Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wenuuMUwSpSla7Eon7FiZGwgxoc.roa
File:                     wenuuMUwSpSla7Eon7FiZGwgxoc.roa (raw, json)
Hash identifier:          79eiJzgql371JzXve4P84/SyfAXfgHYsw/FkaXAJzGI=
Subject key identifier:   C1:E9:EE:B8:C5:30:4A:94:A5:6B:B1:28:9F:B1:62:64:6C:20:C6:87
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25F8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wenuuMUwSpSla7Eon7FiZGwgxoc.roa
Signing time:             Fri 22 Aug 2025 08:42:26 +0000
ROA not before:           Fri 22 Aug 2025 08:42:26 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.158.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9720 (0x25f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C1E9EEB8C5304A94A56BB1289FB162646C20C687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:b2:20:ed:36:c3:f2:62:67:e0:53:58:7a:
                    41:dc:0f:fd:21:62:1c:f2:01:31:59:ae:ee:d9:f1:
                    36:bc:3e:f0:0d:a3:e3:72:79:d7:45:05:f2:8d:a2:
                    74:dc:ed:75:59:a8:94:13:c5:21:17:77:b3:c0:6a:
                    d4:ca:63:76:87:97:71:10:89:c2:b7:d9:74:29:91:
                    62:17:18:10:8d:1d:5a:cd:a1:36:c8:04:bc:05:d8:
                    02:1b:9e:89:71:bb:c3:13:7b:0a:fa:a2:19:3d:6b:
                    b1:94:c6:f8:d7:11:ab:02:3d:85:03:19:50:21:5c:
                    10:48:c5:dd:b7:f8:ad:8b:9f:ad:39:2a:d1:c5:58:
                    05:f1:71:b0:8a:81:e8:ee:77:74:7e:2a:c8:10:01:
                    5a:56:77:18:af:61:b6:ff:f3:13:e5:79:95:22:43:
                    94:e3:7e:82:ea:12:f0:bb:36:81:63:31:ec:b3:d1:
                    fe:ef:85:57:93:7e:b8:e4:7d:1b:f9:85:c5:b6:2e:
                    92:7b:54:23:0f:75:57:42:11:81:d2:ac:3c:70:2a:
                    a7:d4:f8:b8:56:b1:c3:99:81:7d:e4:56:24:1c:fd:
                    f9:90:ff:b6:38:d8:bb:a3:e6:d4:7d:e8:20:d0:ad:
                    e6:f7:0b:4e:f5:f0:f8:80:c0:9f:c3:0c:f2:f9:a8:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E9:EE:B8:C5:30:4A:94:A5:6B:B1:28:9F:B1:62:64:6C:20:C6:87
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wenuuMUwSpSla7Eon7FiZGwgxoc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:12:53:6b:89:56:eb:73:36:4c:5b:e0:da:29:8d:d1:b1:
         fb:8f:2d:d1:60:2f:6a:40:63:c3:b3:05:a0:b8:03:01:97:01:
         c3:0f:48:6a:64:1a:7f:b3:cc:92:24:b1:51:c0:ed:26:1c:1e:
         fe:65:ec:e5:e3:ec:13:22:92:a4:07:ad:91:30:10:37:98:95:
         e5:30:c2:91:04:15:56:7e:4f:fb:da:c6:33:6c:63:f6:69:d3:
         07:17:99:4a:ca:8a:49:7d:c6:78:9f:02:fb:b5:f8:7c:ca:18:
         43:87:e8:a8:c3:24:95:30:f8:43:14:e2:e3:1e:53:b4:18:ff:
         1c:60:2f:f3:a3:00:bc:29:1a:a0:85:b2:7b:42:d8:c9:d8:17:
         54:ad:3e:cd:40:13:44:51:f3:d0:a0:5c:b7:fd:e5:c6:65:53:
         5f:ed:e8:7c:91:b8:37:c4:f7:2f:b9:ca:b9:a9:5a:38:25:04:
         47:99:47:2f:7a:28:5f:6f:56:29:4a:64:97:1f:b2:67:08:b1:
         3e:cf:ca:f9:f1:6c:41:e4:6a:d9:7a:50:8b:aa:a9:ca:ce:4e:
         34:2c:6a:12:f6:8d:d9:cf:54:82:f8:0f:c2:07:c2:50:fe:2e:
         a5:28:7e:53:74:b8:f7:e2:47:0c:7e:6d:be:88:96:81:45:3c:
         0d:55:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:37:06 2025 by rpki-client