Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
File:                     uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa (raw, json)
Hash identifier:          02XSBEYfDPVPHEpxuXLBcasHGxEeGCqamkJXxiJJn8k=
Subject key identifier:   B9:17:DF:41:24:CA:DD:D1:7F:A8:D9:F8:B9:48:24:99:01:10:D7:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       268A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
Signing time:             Fri 22 Aug 2025 08:43:01 +0000
ROA not before:           Fri 22 Aug 2025 08:43:01 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4662
IP address blocks:        123.0.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9866 (0x268a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:01 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B917DF4124CADDD17FA8D9F8B94824990110D713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:17:d8:1c:a6:8b:71:e2:0c:75:13:4b:88:
                    7d:1f:ae:b6:60:0c:85:a5:ad:c8:d1:c6:f2:32:12:
                    2e:99:5b:59:21:c5:18:2a:c4:38:f2:84:e4:db:d7:
                    24:31:51:b7:7d:b5:e1:85:eb:f6:9b:ab:58:e1:3b:
                    39:ff:29:b5:49:af:ba:b9:14:93:33:9e:c2:32:59:
                    07:1a:d4:9a:7a:9c:b8:e2:02:75:be:f4:b6:06:33:
                    cf:32:20:04:e4:12:ef:c9:64:66:c0:9e:ee:a8:f6:
                    d4:d2:cd:85:04:7c:7e:1b:d0:24:a7:9c:e2:e5:98:
                    20:06:74:fb:15:36:c6:29:ce:de:fe:ca:75:cf:d3:
                    71:d9:9d:90:f5:9d:f0:a9:6d:90:4d:8c:66:be:61:
                    e3:f2:af:65:36:f8:38:4a:10:2f:1f:8f:0d:73:13:
                    96:44:6d:1b:e9:17:d4:9a:60:d6:e1:a2:3e:af:d9:
                    79:0e:de:54:8f:16:d1:13:5a:e4:72:53:84:ac:e5:
                    17:0e:31:45:21:1b:f0:ea:06:70:82:b4:bb:7e:a6:
                    7c:18:f5:62:c8:cf:c9:56:30:85:83:f8:21:e5:43:
                    bf:cd:69:80:6e:4a:fa:4d:cf:9e:5a:0d:41:a3:89:
                    49:cf:f1:ef:9a:0e:f1:c0:33:84:f7:ed:67:bc:31:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:DF:41:24:CA:DD:D1:7F:A8:D9:F8:B9:48:24:99:01:10:D7:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRffQSTK3dF_qNn4uUgkmQEQ1xM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:2e:49:4e:18:12:d3:a3:ab:d1:e9:18:d6:b5:38:41:d7:
         35:86:ba:a1:ef:b3:17:bb:41:14:98:36:11:8e:66:63:21:5a:
         79:f0:2e:c5:1c:59:75:ad:de:af:c6:be:1c:7c:06:64:3e:07:
         1a:08:d3:0e:bf:76:21:b0:d7:3f:98:88:83:e4:10:1e:20:53:
         1d:0c:28:5b:e2:e9:4e:05:2f:06:a1:10:ba:ac:77:01:61:d4:
         b8:cb:dd:59:27:ea:b7:98:dc:f9:8e:d9:da:7d:3d:5b:21:ec:
         b2:7c:1b:76:40:d9:c1:81:b8:1c:ee:61:93:d6:1e:82:ff:f5:
         9b:2c:b1:c9:59:ab:a3:14:ba:68:bc:50:29:00:83:4e:23:c0:
         2a:b8:31:53:38:1c:79:e8:18:6f:a1:a4:f7:ab:e9:63:53:42:
         52:bd:9d:94:b9:8d:c3:6c:ef:0d:ea:6b:be:e5:71:de:9f:db:
         bd:2f:4a:c6:b7:26:37:24:ed:e3:d3:cc:fb:40:bd:9f:8e:e2:
         17:e4:6d:74:cd:c4:c8:13:6d:e3:8c:91:b8:1f:5f:f9:72:42:
         bb:74:c4:44:eb:a6:1e:34:ff:27:8f:67:54:a4:d3:8b:ec:85:
         04:6a:57:33:86:08:ed:40:5c:cd:34:02:11:6d:da:d9:8e:55:
         85:94:fc:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTA4MjIw
ODQzMDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5MTdERjQxMjRDQURE
RDE3RkE4RDlGOEI5NDgyNDk5MDExMEQ3MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwWhfYHKaLceIMdRNLiH0frrZgDIWlrcjRxvIyEi6ZW1khxRgq
xDjyhOTb1yQxUbd9teGF6/abq1jhOzn/KbVJr7q5FJMznsIyWQca1Jp6nLjiAnW+
9LYGM88yIATkEu/JZGbAnu6o9tTSzYUEfH4b0CSnnOLlmCAGdPsVNsYpzt7+ynXP
03HZnZD1nfCpbZBNjGa+YePyr2U2+DhKEC8fjw1zE5ZEbRvpF9SaYNbhoj6v2XkO
3lSPFtETWuRyU4Ss5RcOMUUhG/DqBnCCtLt+pnwY9WLIz8lWMIWD+CHlQ7/NaYBu
SvpNz55aDUGjiUnP8e+aDvHAM4T37We8MVLPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuRffQSTK3dF/qNn4uUgkmQEQ1xMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VSZmZRU1RLM2RGX3FObjR1
VWdrbVFFUTF4TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
ACAwDQYJKoZIhvcNAQELBQADggEBAJxDLklOGBLTo6vR6RjWtThB1zWGuqHvsxe7
QRSYNhGOZmMhWnnwLsUcWXWt3q/Gvhx8BmQ+BxoI0w6/diGw1z+YiIPkEB4gUx0M
KFvi6U4FLwahELqsdwFh1LjL3Vkn6reY3PmO2dp9PVsh7LJ8G3ZA2cGBuBzuYZPW
HoL/9ZsssclZq6MUumi8UCkAg04jwCq4MVM4HHnoGG+hpPer6WNTQlK9nZS5jcNs
7w3qa77lcd6f270vSsa3Jjck7ePTzPtAvZ+O4hfkbXTNxMgTbeOMkbgfX/lyQrt0
xETrph40/yePZ1Sk04vshQRqVzOGCO1AXM00AhFt2tmOVYWU/B8=
-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:42 2025 by rpki-client