Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vNULLojo_rPYPodSmLWFpoApcEk.roa
File:                     vNULLojo_rPYPodSmLWFpoApcEk.roa (raw, json)
Hash identifier:          BeTFftep+WB/Mx+GAUnDL3fmuDL3ypayGB1YP3enozI=
Subject key identifier:   BC:D5:0B:2E:88:E8:FE:B3:D8:3E:87:52:98:B5:85:A6:80:29:70:49
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25EF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vNULLojo_rPYPodSmLWFpoApcEk.roa
Signing time:             Fri 22 Aug 2025 08:42:24 +0000
ROA not before:           Fri 22 Aug 2025 08:42:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        180.218.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9711 (0x25ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BCD50B2E88E8FEB3D83E875298B585A680297049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:56:51:7b:92:cf:c6:3a:97:4a:a8:11:b5:
                    71:cf:87:1b:2a:e6:f6:74:44:ad:25:5b:44:b9:53:
                    b3:70:34:a4:85:5b:ee:b1:c3:e4:31:79:71:ae:22:
                    63:a2:b3:e0:9c:0a:c4:fe:38:4b:54:02:a4:3c:a9:
                    69:38:b6:31:36:c9:c1:54:9b:1a:6a:5b:73:26:4a:
                    59:a4:5f:20:20:4c:3f:71:68:89:43:68:83:29:b6:
                    35:1e:4a:1a:e2:f6:60:d7:b1:98:af:53:c2:ba:27:
                    3a:d7:ce:96:94:eb:e8:3f:9f:cf:78:56:f5:21:7b:
                    47:21:ae:ed:fe:2a:8c:23:39:13:9c:b3:3d:fb:ec:
                    c3:a9:99:97:93:b5:ec:b5:8b:9f:25:26:83:c2:80:
                    1e:24:10:75:0e:c6:ef:15:87:a0:f1:e6:78:88:48:
                    e7:5a:71:92:7a:3e:45:37:79:c0:40:2b:ac:7b:87:
                    bc:be:70:fa:47:b6:57:ee:6e:83:56:26:70:a0:7d:
                    99:7f:46:a0:b4:4a:93:00:12:ba:17:4f:db:84:31:
                    12:42:1d:06:ed:ab:d1:91:f3:6e:67:b8:93:05:66:
                    61:d1:0e:88:4b:03:19:f7:89:55:68:b8:e5:ee:ba:
                    af:9b:45:85:6c:28:78:59:ed:e4:7d:4a:de:56:c4:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D5:0B:2E:88:E8:FE:B3:D8:3E:87:52:98:B5:85:A6:80:29:70:49
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vNULLojo_rPYPodSmLWFpoApcEk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:79:1e:aa:27:43:be:0e:56:fc:1b:38:85:b8:fb:34:a2:37:
         22:34:ee:6d:08:c6:03:b2:74:c1:2e:14:f4:22:63:2b:35:18:
         9c:ed:09:e5:69:53:6b:f1:7f:00:4e:1f:df:1a:57:5e:8a:d9:
         f3:a4:fe:49:3e:5e:7e:7c:74:62:c2:5f:3d:ef:cc:88:5d:90:
         b6:2e:d2:43:84:62:22:c8:49:d7:a3:67:23:ee:d2:a2:f9:25:
         55:52:33:03:8f:a7:06:4c:9c:eb:cf:e6:29:a7:c3:cf:f9:99:
         0f:a7:30:a2:e6:74:e7:5a:4f:96:3c:b9:0d:68:dc:7f:2e:a1:
         e3:1b:ad:2d:50:15:3f:2c:2c:41:dc:f0:2b:00:f8:e5:4d:42:
         05:13:29:bf:6d:cf:2c:3e:77:22:5b:10:35:4a:b9:e4:a6:80:
         d0:0c:91:d8:48:5b:8a:8b:0d:37:0e:a5:11:f3:40:a2:dd:4c:
         d8:6e:6c:d4:93:aa:c7:74:e6:99:0c:2a:89:8a:f1:2a:b6:37:
         8d:2d:54:1a:91:dc:02:8c:2f:2e:57:53:ee:29:fc:62:6b:be:
         63:03:d8:f1:10:fd:5a:ae:29:1b:98:e5:85:f7:5f:1a:8f:52:
         fe:fc:2c:a0:d9:66:ca:c7:00:a4:c6:d9:50:f7:d8:3b:c0:96:
         5f:48:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:19 2025 by rpki-client