Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/5ZjbyMKg3liQhUtxVV470ORGPLI.roa
File:                     5ZjbyMKg3liQhUtxVV470ORGPLI.roa (raw, json)
Hash identifier:          TJHGV1ikpS/H4yfa3jUH8mJ24O8/HN0wOj3rTyomIPI=
Subject key identifier:   E5:98:DB:C8:C2:A0:DE:58:90:85:4B:71:55:5E:3B:D0:E4:46:3C:B2
Certificate issuer:       /CN=A0C366AF6094FD819098D826573A085BB16EE27B
Certificate serial:       13A5
Authority key identifier: A0:C3:66:AF:60:94:FD:81:90:98:D8:26:57:3A:08:5B:B1:6E:E2:7B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/5ZjbyMKg3liQhUtxVV470ORGPLI.roa
Signing time:             Wed 10 Sep 2025 05:29:22 +0000
ROA not before:           Wed 10 Sep 2025 05:29:22 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18046
IP address blocks:        103.131.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Sep 2025 18:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5029 (0x13a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C366AF6094FD819098D826573A085BB16EE27B
        Validity
            Not Before: Sep 10 05:29:22 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E598DBC8C2A0DE5890854B71555E3BD0E4463CB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:d5:81:77:a7:c4:aa:8b:78:e5:93:93:0d:
                    eb:4a:75:ab:22:08:80:f4:83:51:ec:d4:aa:9b:51:
                    09:75:1d:bd:ed:02:9a:25:78:27:1e:d6:ba:a6:c3:
                    02:a0:48:73:6a:66:0a:da:bb:78:95:a9:c0:9f:28:
                    eb:d5:56:94:9b:21:b0:61:de:90:6f:61:2c:a7:7b:
                    c8:d0:0d:d3:29:bd:ad:2b:a0:34:19:33:57:05:e8:
                    37:d4:de:f7:be:51:4e:38:86:a4:8d:84:98:1a:f7:
                    ef:11:23:79:05:49:a8:ce:49:8d:7e:e9:b0:7f:40:
                    8f:61:8e:fe:0b:36:2f:8a:fa:8d:cb:6d:de:4e:e5:
                    71:75:3b:45:22:56:70:72:ea:4f:11:61:c5:75:6a:
                    22:13:d8:62:d9:8c:b9:3c:03:55:0c:f7:4c:aa:d9:
                    fb:b6:f9:85:94:ab:a7:e5:99:89:ff:04:47:5d:97:
                    b7:a5:d4:e2:5c:c5:69:a5:44:e2:81:4b:05:8f:62:
                    9d:b5:26:15:de:41:60:b6:3b:67:22:ef:a1:62:69:
                    c0:4b:67:87:29:9d:d7:39:fc:55:27:d2:e3:50:b6:
                    47:eb:7d:78:3e:3a:e9:25:73:c2:f0:69:fa:13:47:
                    e4:39:24:36:31:f2:b5:8d:d2:b9:f6:5e:7e:0a:c1:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:98:DB:C8:C2:A0:DE:58:90:85:4B:71:55:5E:3B:D0:E4:46:3C:B2
            X509v3 Authority Key Identifier:
                keyid:A0:C3:66:AF:60:94:FD:81:90:98:D8:26:57:3A:08:5B:B1:6E:E2:7B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oMNmr2CU_YGQmNgmVzoIW7Fu4ns.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNITEDSOFT/5ZjbyMKg3liQhUtxVV470ORGPLI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:d2:61:41:82:a6:69:7c:88:89:a8:6c:a2:8d:ae:24:41:
         87:0e:e0:17:50:ec:8a:8f:2c:95:23:ea:30:7e:40:90:7e:16:
         e7:96:d8:ba:54:d2:46:94:e2:4f:b3:bf:e5:7c:9d:88:9b:df:
         e7:03:ec:3b:2f:c2:60:63:28:1f:0e:76:cb:3d:94:7c:db:c0:
         c7:e7:ea:d5:dd:d2:ec:21:07:d5:63:67:1e:d1:34:c7:43:39:
         d8:e2:ea:31:b9:72:91:4f:4a:6f:d3:8c:22:8a:ca:2d:c8:af:
         17:34:9f:e6:3f:de:48:43:0d:b4:23:ac:a0:6a:e3:3f:ef:1d:
         a1:95:e5:d1:16:1e:2f:31:6f:e0:71:6b:eb:19:a6:cc:b0:a4:
         4f:59:5d:8e:9d:ea:a9:05:42:ef:39:ce:c1:dc:8c:52:93:9e:
         d7:63:dc:3a:9a:38:5e:30:7a:20:d3:83:c0:f7:42:f3:f4:87:
         7d:33:46:3b:af:6d:20:df:4d:6c:49:67:2b:72:bb:f7:95:41:
         74:4a:cc:44:ee:cb:4d:7f:2f:a7:c5:4b:18:df:74:4d:6a:85:
         6e:aa:54:7f:ad:24:d4:94:22:d7:0f:1f:52:ec:5c:f6:b6:3a:
         d9:f4:b3:c7:13:66:4b:dd:99:26:ea:42:e0:39:ca:44:39:80:
         b4:cf:68:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 18 16:58:49 2025 by rpki-client