Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVRid7Hd07gxoRoGCsc280VgsmQ.roa
File:                     uVRid7Hd07gxoRoGCsc280VgsmQ.roa (raw, json)
Hash identifier:          FcZy/lzLcCl3T/cIYjZ3QwABmyOyJxVfISegCoTVoCo=
Subject key identifier:   B9:54:62:77:B1:DD:D3:B8:31:A1:1A:06:0A:C7:36:F3:45:60:B2:64
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       2629
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVRid7Hd07gxoRoGCsc280VgsmQ.roa
Signing time:             Fri 22 Aug 2025 08:42:38 +0000
ROA not before:           Fri 22 Aug 2025 08:42:38 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24163
IP address blocks:        61.60.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9769 (0x2629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:38 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B9546277B1DDD3B831A11A060AC736F34560B264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:86:fc:3d:06:cf:30:52:d5:cb:a2:d3:43:
                    cd:72:03:3f:b3:3e:74:62:ff:bd:7c:19:9d:77:58:
                    57:77:c5:dc:44:c8:63:25:c1:06:66:86:56:84:19:
                    63:4e:77:2b:35:e5:e5:0d:7b:2a:33:6f:bf:69:f5:
                    34:27:42:94:35:f7:2b:f4:da:94:50:ca:6d:94:c8:
                    b9:47:65:35:6d:c4:a3:31:ed:1f:c7:c1:fa:1e:70:
                    c7:a5:3d:e3:ff:b4:6e:23:2a:ef:2c:06:1e:12:9a:
                    da:81:a9:ac:92:b8:18:6a:f3:87:a8:96:15:5e:d8:
                    46:c2:f9:7d:9c:49:1f:1b:4b:1b:8e:ce:85:65:ab:
                    53:e9:78:5a:55:f1:cf:1b:39:8c:1e:fa:f8:c9:0d:
                    66:a7:9c:8c:2c:f2:e8:f9:21:7e:21:83:60:c4:19:
                    6e:ea:ca:18:41:15:a5:b0:cb:d5:de:88:01:57:65:
                    07:1b:02:e0:59:cc:14:38:22:15:99:b4:9a:df:40:
                    68:5f:1d:bc:b9:dd:13:f8:31:d5:b5:ed:12:12:0f:
                    ff:1d:89:ba:02:d3:3c:8f:fa:54:aa:5f:cc:73:7c:
                    5d:da:7c:7c:ab:48:a2:5d:8f:74:e6:ea:4d:4b:c4:
                    89:06:70:a8:17:b1:d1:1d:45:07:74:3d:12:20:aa:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:62:77:B1:DD:D3:B8:31:A1:1A:06:0A:C7:36:F3:45:60:B2:64
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uVRid7Hd07gxoRoGCsc280VgsmQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:9e:8b:0b:2b:5c:70:56:e6:1f:50:f8:39:95:79:74:42:
         7e:51:d2:2c:c2:c0:7d:53:c0:96:d9:01:11:64:fa:9d:5c:3e:
         b2:e8:43:69:14:4e:41:16:1a:a9:6a:6f:ea:58:59:10:74:bb:
         ff:1b:53:88:9f:90:61:94:5c:d0:c1:c6:60:16:51:69:02:d1:
         97:d1:1b:e2:2a:61:07:ae:65:0e:19:33:f8:c9:a5:e8:80:bc:
         62:4e:6d:44:b0:79:16:aa:71:12:6a:ec:e1:b5:db:5a:0a:0a:
         c2:8f:f1:84:13:a6:59:f8:21:e1:1a:93:2e:fa:9a:a4:d5:b8:
         40:8c:ca:6f:49:a1:1f:17:c9:e6:f8:9a:7f:da:d2:b1:59:68:
         70:3b:48:6e:1c:c0:be:65:e3:de:a9:07:45:40:bf:90:f5:fe:
         b0:7c:3a:c8:ba:7e:5e:bc:10:f3:31:e2:5c:46:e9:81:cb:c3:
         f2:10:d3:85:dc:61:02:aa:0e:13:ba:92:bc:df:11:6b:2f:89:
         ee:80:7e:bf:55:95:f2:20:e8:07:9e:e9:ff:4f:e0:de:05:5e:
         5b:c6:91:6e:87:c1:a9:d7:9d:2c:99:87:c9:a6:2a:4a:fc:3b:
         81:e4:44:4c:df:d5:3f:7d:30:5b:66:0c:ee:4d:4b:d7:64:73:
         68:40:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:39:37 2025 by rpki-client