Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
File:                     9bdvzNtxJroURAqmtnTtMDcywaw.roa (raw, json)
Hash identifier:          aiDh8liXCefG1qZ5Rw/TnoadqG7H49y4w8Ut6v6hkAg=
Subject key identifier:   F5:B7:6F:CC:DB:71:26:BA:14:44:0A:A6:B6:74:ED:30:37:32:C1:AC
Certificate issuer:       /CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
Certificate serial:       052E
Authority key identifier: F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
Signing time:             Wed 28 Jan 2026 03:39:16 +0000
ROA not before:           Wed 28 Jan 2026 03:39:16 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     152624
IP address blocks:        165.99.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 06:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C62DC16A3259415664142C9278C5DDC4D8299D
        Validity
            Not Before: Jan 28 03:39:16 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F5B76FCCDB7126BA14440AA6B674ED303732C1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:24:2b:a5:5e:90:4c:18:49:59:1d:9d:5b:
                    7a:b2:db:9e:25:61:2c:18:5f:a6:c7:22:20:3a:89:
                    d6:56:c5:37:33:e5:24:2e:94:5e:0d:55:d8:b9:ae:
                    59:52:69:65:60:d4:8c:b7:3f:5e:f3:74:ff:46:c8:
                    b4:cd:3c:66:03:41:4f:70:ad:74:a1:dc:83:79:fe:
                    4c:ae:48:79:6c:c0:51:0b:c0:63:0c:70:79:a2:ae:
                    a2:24:d0:15:85:4a:2c:6f:71:86:fb:cf:92:72:a1:
                    c1:0e:93:b0:5b:6e:e3:12:5d:14:fa:a1:5e:23:c1:
                    fe:7f:5a:06:67:aa:25:c3:b3:9a:9c:d6:ff:80:40:
                    4a:0b:1e:32:bd:d2:2d:e3:be:2f:13:72:be:65:0c:
                    e5:9c:8a:d5:d1:9d:41:73:80:ff:ec:05:ed:90:b1:
                    5a:ff:47:3a:b7:3e:06:15:cf:ae:6c:00:cf:ef:30:
                    0d:18:26:03:ba:74:64:95:bb:0a:63:47:cb:c4:95:
                    ca:b3:92:44:e1:4a:7b:88:5e:48:8c:e1:9f:0c:4e:
                    92:d0:67:fc:cc:de:d7:6d:9a:b9:03:6a:d3:ef:de:
                    2b:d5:39:cd:ce:2a:5c:90:59:ba:ff:07:6f:c5:00:
                    30:ca:0e:88:03:6a:77:16:b4:64:70:58:f1:76:0a:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:6F:CC:DB:71:26:BA:14:44:0A:A6:B6:74:ED:30:37:32:C1:AC
            X509v3 Authority Key Identifier:
                keyid:F9:C6:2D:C1:6A:32:59:41:56:64:14:2C:92:78:C5:DD:C4:D8:29:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/-cYtwWoyWUFWZBQsknjF3cTYKZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-cYtwWoyWUFWZBQsknjF3cTYKZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UWAYIO/9bdvzNtxJroURAqmtnTtMDcywaw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:34:bd:fc:28:2f:4b:fa:c8:08:89:88:0f:ac:9b:5e:75:6b:
         71:b8:26:f9:2f:a6:92:63:89:4b:b2:fe:d7:3e:54:29:a4:4a:
         8d:61:6d:1a:e2:5b:27:df:30:f2:4f:d0:95:1a:15:a9:dc:f6:
         23:a3:e6:38:70:00:de:89:3a:1c:bd:4d:0a:91:93:98:3f:a9:
         63:5f:a3:21:ed:e1:26:26:8a:1b:9e:60:55:22:a1:b8:4b:70:
         8d:38:c7:e9:c4:2e:d5:91:aa:cb:c2:e0:18:76:dc:5e:0e:28:
         de:fe:c9:9c:4d:f8:88:1b:79:3e:14:b1:11:80:fe:9d:6e:7b:
         73:28:17:0c:15:77:b5:37:02:31:d0:8e:d4:ba:0d:fb:5a:a1:
         fa:69:ff:d3:8b:e5:6b:57:9c:fe:47:0b:47:40:c4:dd:0e:a6:
         f8:67:2e:06:3a:41:75:0d:06:1e:fd:79:56:68:ec:b9:0f:c0:
         d2:14:d3:34:2b:56:b3:5f:56:a4:4d:f1:a2:7c:d4:1c:c0:f7:
         9b:97:c2:09:16:00:7c:08:a3:b7:eb:47:13:97:66:da:ec:15:
         69:0a:5e:b7:37:09:fe:64:e9:60:a7:4d:15:2a:96:4f:e0:4a:
         68:81:21:02:93:25:03:3e:3d:83:8e:ae:2b:81:a4:e3:dc:ad:
         75:01:0b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:21 2026 by rpki-client