Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s2d2JV407Yx0ytKt3pYxQGTH5jg.roa
File:                     s2d2JV407Yx0ytKt3pYxQGTH5jg.roa (raw, json)
Hash identifier:          6dJTn+VRtAANX2a3Z1LRUv4cTs5O8XCqlBY6GJYdH88=
Subject key identifier:   B3:67:76:25:5E:34:ED:8C:74:CA:D2:AD:DE:96:31:40:64:C7:E6:38
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26E2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s2d2JV407Yx0ytKt3pYxQGTH5jg.roa
Signing time:             Fri 22 Aug 2025 08:43:21 +0000
ROA not before:           Fri 22 Aug 2025 08:43:21 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9954 (0x26e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:21 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B36776255E34ED8C74CAD2ADDE96314064C7E638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:95:e2:fd:ef:de:6e:d9:b8:57:ef:5d:69:
                    52:54:63:76:bd:41:97:6b:06:90:a6:fe:a8:9d:3b:
                    ec:42:6f:e5:45:7d:e8:08:2c:bc:08:7e:26:91:ba:
                    af:a7:16:16:4b:76:3e:55:47:ec:88:85:c7:1f:90:
                    d5:cb:cd:46:36:08:fc:38:de:da:78:cd:0a:ee:6d:
                    0d:b1:ff:fd:4f:62:99:80:98:5c:82:a9:6a:03:14:
                    92:30:ea:2f:9b:c1:10:7c:13:35:2f:5c:35:bd:11:
                    a4:cd:72:8d:e0:18:84:d1:4d:1e:72:a8:78:13:fc:
                    8c:ee:56:79:48:72:20:19:1a:56:8c:b0:91:d8:61:
                    84:5f:4b:b1:c7:f4:9c:32:44:05:0f:00:f9:7d:e8:
                    f1:eb:c3:b4:ed:c8:cc:85:6f:0e:80:09:8d:d7:6e:
                    2e:92:f8:05:b8:f3:02:dd:28:98:a7:c0:b7:09:c1:
                    92:d5:ca:ec:c9:dc:6b:81:7c:fe:c6:37:b5:15:65:
                    94:c5:db:95:26:66:06:e8:0e:e6:51:e1:c9:61:a5:
                    cd:3e:ed:2a:ca:d0:32:22:d9:89:eb:32:d8:d3:03:
                    d6:ee:58:d7:84:0d:69:bf:cd:2a:f8:db:be:90:86:
                    bf:9b:20:64:2a:05:ac:75:b2:c2:14:8d:44:49:03:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:67:76:25:5E:34:ED:8C:74:CA:D2:AD:DE:96:31:40:64:C7:E6:38
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s2d2JV407Yx0ytKt3pYxQGTH5jg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:82:6a:61:71:64:bb:0d:0a:c1:ea:23:01:c3:94:47:f5:7c:
         6b:6a:ee:2c:fb:89:0a:4b:9b:8a:a4:56:63:31:75:e5:0e:f6:
         f4:3f:9f:5f:38:51:36:a0:7c:97:5a:73:4d:84:95:c7:23:a7:
         32:b9:b1:3d:e1:89:37:ec:98:21:d2:95:3f:58:2e:30:bc:31:
         f5:a0:25:dd:ff:de:92:72:fa:19:9f:5f:dc:8f:26:7a:93:92:
         6d:25:89:31:68:22:ff:8d:f7:27:df:53:2f:48:40:d5:7d:2d:
         a4:41:f3:53:bb:3a:d2:39:12:25:75:be:1f:ec:12:30:52:ca:
         c4:5b:37:11:b1:e1:d5:65:64:1e:b1:e4:3c:d7:85:96:7d:3a:
         1f:33:89:87:72:e6:d7:d0:d9:7f:22:3e:80:c9:3b:16:49:d8:
         12:a9:31:5f:d5:44:39:2a:cb:d9:ce:9c:66:30:ca:3a:59:f1:
         95:25:5b:f4:bf:c6:3e:21:c7:4b:55:ed:91:ba:03:3d:78:5c:
         df:9c:de:34:66:0e:db:ca:d9:76:bb:3a:f8:6b:e0:c5:23:26:
         2d:fb:13:99:3e:c9:ab:90:a4:74:88:46:59:d2:12:68:6a:60:
         6c:40:72:2d:38:70:80:c4:f4:60:3b:82:8a:0b:cf:d7:be:81:
         bf:eb:6f:c6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIzNjc3NjI1NUUzNEVE
OEM3NENBRDJBRERFOTYzMTQwNjRDN0U2MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPRpXi/e/ebtm4V+9daVJUY3a9QZdrBpCm/qidO+xCb+VFfegI
LLwIfiaRuq+nFhZLdj5VR+yIhccfkNXLzUY2CPw43tp4zQrubQ2x//1PYpmAmFyC
qWoDFJIw6i+bwRB8EzUvXDW9EaTNco3gGITRTR5yqHgT/IzuVnlIciAZGlaMsJHY
YYRfS7HH9JwyRAUPAPl96PHrw7TtyMyFbw6ACY3Xbi6S+AW48wLdKJinwLcJwZLV
yuzJ3GuBfP7GN7UVZZTF25UmZgboDuZR4clhpc0+7SrK0DIi2YnrMtjTA9buWNeE
DWm/zSr4276Qhr+bIGQqBax1ssIUjURJA4b1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUs2d2JV407Yx0ytKt3pYxQGTH5jgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3MyZDJKVjQwN1l4MHl0S3Qz
cFl4UUdUSDVqZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2pQwDQYJKoZIhvcNAQELBQADggEBAHiCamFxZLsNCsHqIwHDlEf1fGtq7iz7iQpL
m4qkVmMxdeUO9vQ/n184UTagfJdac02ElccjpzK5sT3hiTfsmCHSlT9YLjC8MfWg
Jd3/3pJy+hmfX9yPJnqTkm0liTFoIv+N9yffUy9IQNV9LaRB81O7OtI5EiV1vh/s
EjBSysRbNxGx4dVlZB6x5DzXhZZ9Oh8ziYdy5tfQ2X8iPoDJOxZJ2BKpMV/VRDkq
y9nOnGYwyjpZ8ZUlW/S/xj4hx0tV7ZG6Az14XN+c3jRmDtvK2Xa7Ovhr4MUjJi37
E5k+yauQpHSIRlnSEmhqYGxAci04cIDE9GA7gooLz9e+gb/rb8Y=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:37 2025 by rpki-client