Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w_6sZj32uLnxr0zJs0rU2qUkEgI.roa
File:                     w_6sZj32uLnxr0zJs0rU2qUkEgI.roa (raw, json)
Hash identifier:          yG2kAaFRiqkJz/a1ojg7iteblMKCcm7Ysmn3V2zpkAk=
Subject key identifier:   C3:FE:AC:66:3D:F6:B8:B9:F1:AF:4C:C9:B3:4A:D4:DA:A5:24:12:02
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       26C2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w_6sZj32uLnxr0zJs0rU2qUkEgI.roa
Signing time:             Fri 22 Aug 2025 08:43:13 +0000
ROA not before:           Fri 22 Aug 2025 08:43:13 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        119.77.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9922 (0x26c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:43:13 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C3FEAC663DF6B8B9F1AF4CC9B34AD4DAA5241202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:4f:96:ac:50:f6:a6:99:a6:19:65:0b:75:
                    16:1a:17:e8:1e:81:3c:12:a5:67:f1:f5:30:06:19:
                    d1:9d:41:55:16:e1:6f:dd:a3:88:86:68:24:28:62:
                    c4:1f:e4:68:15:3c:ff:f8:86:2b:aa:02:60:96:6c:
                    d2:85:73:f3:b5:5a:26:9d:ef:0a:d4:86:ef:5d:90:
                    a2:9c:bf:2a:0e:16:06:db:d3:f2:c8:da:c6:3a:5a:
                    de:d4:92:39:43:5e:5a:4d:be:1e:b9:46:88:2d:7f:
                    95:a4:3c:dd:fa:ce:76:5b:46:ea:2a:3f:56:38:a7:
                    c5:04:4b:81:d6:16:2a:fc:cc:6d:05:c4:fc:d9:bc:
                    64:da:f2:c4:42:27:5d:65:5d:cf:d1:ed:5d:89:51:
                    3b:5e:7b:13:06:26:f0:a2:96:e8:6c:82:4b:cc:24:
                    04:aa:52:28:d9:d8:79:07:e8:a5:6c:78:13:8f:96:
                    e3:28:96:4a:2a:c8:f3:cc:12:29:75:ba:66:1d:a3:
                    ba:79:24:27:06:43:30:b2:8a:22:a2:bd:5a:bd:78:
                    22:c4:39:3c:ca:8f:58:27:36:7a:79:90:ca:7f:f3:
                    56:78:88:28:93:78:1a:56:0c:24:08:fc:af:eb:7f:
                    fe:a6:de:73:30:cd:f5:37:a9:e5:c2:5e:53:25:de:
                    ee:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FE:AC:66:3D:F6:B8:B9:F1:AF:4C:C9:B3:4A:D4:DA:A5:24:12:02
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w_6sZj32uLnxr0zJs0rU2qUkEgI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:bc:c5:ff:42:0d:d2:b2:f4:35:6d:43:a1:d0:7c:86:71:
         ca:39:29:9c:1f:50:87:78:fd:55:db:e2:28:05:21:81:b8:37:
         fe:fa:95:96:e0:88:f7:bf:2e:a7:57:3f:12:de:da:68:2c:31:
         ff:46:8c:09:85:15:e6:74:c2:0b:2d:98:04:f2:87:c7:9c:6d:
         70:c3:49:fb:f8:76:b5:0d:be:32:55:75:eb:4f:aa:96:39:be:
         28:d6:40:4d:02:96:ff:10:5b:f2:8e:2a:ac:22:51:50:1d:ac:
         4a:f3:07:58:62:8a:ff:54:77:07:df:f0:ce:09:cf:2c:97:91:
         35:ae:0f:36:4d:59:8d:87:ba:db:a9:5e:c9:de:74:80:93:81:
         fd:7d:8e:0d:dd:0a:19:68:a2:cb:7c:d2:34:02:05:94:79:fa:
         03:d5:32:0c:b2:85:bc:c1:f0:50:10:6e:db:fb:2d:27:9a:48:
         33:bb:cc:1b:85:b5:7d:18:e5:7a:02:f6:6a:c9:42:af:8c:e7:
         b4:15:17:73:14:ec:ba:93:81:9c:8a:68:56:c8:6b:ce:27:d1:
         18:81:7b:3a:2e:25:3a:91:90:c4:27:a2:41:1c:78:f1:9e:d6:
         46:e0:f0:95:23:d0:10:5f:20:81:02:1b:7d:d6:6c:87:29:59:
         ce:a1:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:35 2025 by rpki-client