Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smNNynYS0kwXNvrNPJCOFzpAn9M.roa
File:                     smNNynYS0kwXNvrNPJCOFzpAn9M.roa (raw, json)
Hash identifier:          08BPqlnZw7GE1AA6C5whc2PiZ8wZedR7cyD3pQ7pm/M=
Subject key identifier:   B2:63:4D:CA:76:12:D2:4C:17:36:FA:CD:3C:90:8E:17:3A:40:9F:D3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25C7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smNNynYS0kwXNvrNPJCOFzpAn9M.roa
Signing time:             Fri 22 Aug 2025 08:42:14 +0000
ROA not before:           Fri 22 Aug 2025 08:42:14 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9671 (0x25c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:14 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B2634DCA7612D24C1736FACD3C908E173A409FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:17:62:d1:92:8d:50:66:82:99:e2:6e:95:
                    73:7e:2d:54:4b:2e:3f:0d:85:50:2f:43:0c:08:b1:
                    b7:e0:16:79:d5:28:ed:bc:cd:89:9f:9a:a4:4f:3a:
                    c9:3f:55:0a:2c:e1:1f:42:b3:10:2b:b3:17:fc:57:
                    b1:3d:28:0a:a6:ff:60:f8:31:80:4c:63:76:d7:65:
                    77:71:fd:d7:2d:d6:ce:38:45:76:5d:2b:33:42:e9:
                    db:34:f0:a7:1a:6a:c6:b1:d2:f0:32:92:99:d1:46:
                    32:74:1f:bc:a4:0a:c8:29:65:4e:59:cb:24:e4:83:
                    94:28:21:60:07:09:a5:20:3a:7d:58:19:1a:af:96:
                    75:e9:45:76:bc:de:6a:1b:76:0d:ae:98:92:99:da:
                    d7:87:70:4d:4c:cb:83:c0:8d:d2:16:0d:45:ee:e8:
                    fe:4b:5c:71:f0:7e:f2:8d:ab:bc:35:b7:f9:76:68:
                    ec:bc:70:e3:be:1e:4d:a8:6e:97:23:8c:4a:59:9c:
                    20:81:7f:cc:ed:d3:5f:88:5a:af:38:ce:66:53:0e:
                    1b:75:b3:a5:4d:e5:66:63:46:9f:eb:f8:8c:6f:26:
                    92:11:8c:72:85:d7:0f:9c:1a:98:90:e9:45:cc:6f:
                    1b:2b:85:ff:72:f1:85:9f:4c:3f:ed:10:c2:aa:04:
                    f9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:63:4D:CA:76:12:D2:4C:17:36:FA:CD:3C:90:8E:17:3A:40:9F:D3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/smNNynYS0kwXNvrNPJCOFzpAn9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:4a:70:19:e2:b3:35:62:9a:28:eb:07:99:38:53:f5:c2:
         fb:1d:b2:87:37:4d:18:bc:c5:b6:8c:ea:dc:85:bd:cd:11:89:
         86:4c:18:0e:64:be:d6:93:6c:e4:1a:4b:0e:86:41:fc:f8:91:
         51:52:11:38:cd:87:cd:64:17:2e:c4:1f:5b:0e:6c:d4:d8:3a:
         70:b7:b4:eb:8b:94:0e:96:d6:b8:a5:9e:fd:6c:ba:04:e2:25:
         a4:b7:de:d6:84:4c:c9:39:bd:b7:2f:d1:98:9f:45:5c:42:03:
         d3:21:50:e5:34:27:52:9c:5c:81:33:e0:15:ff:4d:0e:b6:a7:
         1a:c2:87:77:a1:2e:28:a3:cd:b3:51:11:28:27:6f:36:b1:ac:
         e4:5f:bb:4b:fb:8d:a1:82:ff:46:93:24:d7:52:a6:ea:f5:51:
         8c:06:bb:52:11:2e:8e:75:dd:c8:c7:de:f8:23:b5:06:55:ef:
         87:b7:24:e1:9b:90:c7:90:c9:91:fe:a2:89:65:ab:70:01:27:
         bf:c7:65:37:61:b8:52:cf:1e:89:5b:b9:e2:6b:57:f1:eb:14:
         ea:89:64:21:4e:76:1f:ff:ed:b6:fa:d3:0f:91:19:95:87:7d:
         69:b8:3b:30:81:f9:18:bd:29:f1:ab:ef:a0:e6:7a:46:eb:00:
         e5:14:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:33 2025 by rpki-client