Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y9HSRLwoLDcL_QWg8nVN0-21nHY.roa
File:                     y9HSRLwoLDcL_QWg8nVN0-21nHY.roa (raw, json)
Hash identifier:          yS6GiKIeMfmRw+wv71yRI8SFb0bpmwlTlHN/RYny3dM=
Subject key identifier:   CB:D1:D2:44:BC:28:2C:37:0B:FD:05:A0:F2:75:4D:D3:ED:B5:9C:76
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       25F3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y9HSRLwoLDcL_QWg8nVN0-21nHY.roa
Signing time:             Fri 22 Aug 2025 08:42:25 +0000
ROA not before:           Fri 22 Aug 2025 08:42:25 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9715 (0x25f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 22 08:42:25 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=CBD1D244BC282C370BFD05A0F2754DD3EDB59C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f1:7f:9c:6c:59:21:73:4c:2f:23:de:1b:eb:
                    19:f4:36:8d:13:77:59:97:f9:50:41:de:63:54:4a:
                    93:13:4d:e4:3a:2f:b6:bb:9d:66:ae:7a:6a:48:a2:
                    bb:21:2e:4d:e9:62:ce:22:1e:c3:1a:bb:d3:e0:5b:
                    8e:e0:36:e4:f8:15:c5:c1:fa:bd:01:c2:2c:2f:e9:
                    65:7a:cb:72:74:d0:74:6d:f0:02:8b:fd:15:06:e9:
                    e6:f6:7f:7f:2c:9b:4b:58:1e:83:8b:aa:69:02:05:
                    41:18:9b:c9:04:19:e5:01:4f:51:b2:4f:24:0f:5e:
                    fb:63:0f:0c:92:26:64:d1:52:0f:56:fe:38:cb:3d:
                    ee:63:c0:6c:75:c5:13:a2:8b:2d:72:b3:db:b8:f4:
                    86:2c:af:f6:08:18:f0:c0:c7:8c:ce:90:23:e9:22:
                    01:3e:6e:48:97:f7:71:1d:a0:b7:e4:f7:f8:d5:6b:
                    43:0e:0a:f7:21:be:cf:d8:0c:ad:c1:aa:38:6e:57:
                    6d:fd:09:d9:39:00:e2:b7:4c:b8:ea:04:2c:c3:0c:
                    b4:54:7a:81:69:10:73:39:ff:08:3e:20:71:3d:61:
                    2a:b0:ab:79:9f:8a:07:f4:99:b3:48:2b:64:4e:8d:
                    0f:35:c0:8d:2c:68:92:77:d5:04:fb:c0:90:d0:dc:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D1:D2:44:BC:28:2C:37:0B:FD:05:A0:F2:75:4D:D3:ED:B5:9C:76
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y9HSRLwoLDcL_QWg8nVN0-21nHY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:10:1f:0c:48:13:43:6f:ee:51:dd:40:f9:f2:39:93:5b:ca:
         be:1a:b2:dd:37:12:95:87:c2:90:51:9d:2c:9c:66:78:36:41:
         79:54:ca:81:1d:48:1c:19:3f:46:d1:9b:90:30:43:0f:12:2c:
         50:7b:78:ae:77:19:df:07:6c:c8:22:6b:b7:8a:53:5d:9b:ee:
         4f:ef:2c:92:63:72:77:48:71:9e:0e:b8:2f:de:f5:8b:0f:c1:
         f0:4c:24:3d:b2:cb:04:fb:48:72:97:b0:63:cc:c5:ec:a1:a3:
         44:64:4a:db:b7:08:c7:8e:e5:14:88:e5:aa:8a:03:a0:d3:e2:
         44:b2:c8:b4:a3:74:b7:dc:08:6f:3a:78:20:54:21:c0:73:18:
         30:db:73:9a:4d:65:45:a1:96:43:6d:6e:38:36:a2:e5:81:3b:
         d1:a3:b3:b4:4d:e8:7b:1a:ad:30:e5:c3:b7:3c:93:f2:77:61:
         e6:80:99:c5:47:6f:de:66:91:a1:dc:c0:a5:86:a2:26:8c:cb:
         cf:b3:22:a4:a9:a9:31:d7:51:8c:08:26:cf:9e:7c:6e:09:bf:
         e2:06:f0:30:a0:32:4f:70:51:8d:2a:1f:51:70:f9:81:2f:e2:
         f4:d9:9b:f7:e7:42:34:96:ed:19:e0:72:d2:c5:37:27:d6:68:
         36:62:17:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:38:48 2025 by rpki-client