Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa
File:                     3133342e3230382e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier:          iUAaZj3Y5SLyP/eCqbl/btP0GqPRoSrLi6GbVPu9u8o=
Subject key identifier:   B7:D1:2D:C4:9C:6F:CC:07:CB:91:C5:BE:D7:11:07:FD:A4:65:8B:2F
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       05BC4DDDB1F482386FF1B774500B7D3824AB355D
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa
Signing time:             Mon 11 May 2026 20:59:55 +0000
ROA not before:           Mon 11 May 2026 20:54:55 +0000
ROA not after:            Mon 10 May 2027 20:59:55 +0000
asID:                     1659
IP address blocks:        134.208.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 01:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bc:4d:dd:b1:f4:82:38:6f:f1:b7:74:50:0b:7d:38:24:ab:35:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:55 2026 GMT
            Not After : May 10 20:59:55 2027 GMT
        Subject: CN=B7D12DC49C6FCC07CB91C5BED71107FDA4658B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:5b:12:5a:a3:4a:50:96:f1:da:75:a2:72:
                    7d:44:9a:60:d3:6b:b8:31:c6:db:3d:39:e3:8c:ec:
                    87:aa:bc:5c:f0:8f:30:e5:a9:97:40:13:45:21:7e:
                    5d:46:34:ac:0b:82:f0:46:02:b5:cd:38:9c:b5:05:
                    02:ad:6d:3e:7a:44:c2:08:5f:d1:89:1a:95:6e:8b:
                    a8:26:be:9a:35:dc:f2:82:78:98:5d:87:36:2c:1d:
                    05:2e:b7:3b:ac:9c:69:49:5d:8c:f2:b7:16:ba:8b:
                    2e:a7:df:8c:bb:9a:88:26:bb:56:4e:a8:09:7a:8e:
                    32:55:4a:93:c8:3f:af:b8:c7:54:2c:50:d9:8e:e5:
                    b8:a7:29:a9:76:2b:8d:86:ae:5a:c9:9f:35:68:d4:
                    24:3b:25:14:52:d5:ac:2d:7e:d0:fe:69:31:6f:79:
                    ea:13:68:f7:ce:a0:14:14:0f:e6:84:09:8d:08:53:
                    cb:34:17:04:c9:5d:ac:dc:0c:13:aa:c1:38:9a:34:
                    fb:ad:86:a0:d0:87:2c:d9:7c:cd:a0:9c:fa:4f:d6:
                    32:b6:f0:a0:e0:f5:7c:c8:82:fc:31:1d:4f:41:7c:
                    66:10:98:65:19:ec:13:2a:04:19:00:14:98:13:c6:
                    79:37:f2:ca:2b:65:8c:8c:94:fc:60:9d:e0:33:91:
                    d7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D1:2D:C4:9C:6F:CC:07:CB:91:C5:BE:D7:11:07:FD:A4:65:8B:2F
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:f0:54:8e:c3:f5:29:39:8c:88:68:ad:43:bb:4c:b9:df:
         81:90:29:19:1d:b9:9d:23:75:12:36:25:e2:28:8d:98:66:d5:
         c6:8a:ab:60:91:29:1a:0b:5b:e9:e2:6b:b9:37:e2:e0:30:99:
         8d:4f:f8:87:77:d5:df:6a:b5:10:f4:cf:ef:53:58:a8:de:0a:
         39:ec:e4:fb:97:b1:c8:ac:28:ac:f3:84:a9:0d:a8:50:c9:83:
         da:b4:e5:67:77:5d:d6:b3:8c:e9:1b:69:3d:53:d9:56:99:77:
         0d:e1:6c:50:32:9f:89:c1:79:af:87:c2:1b:e9:ba:ae:c6:19:
         f7:fd:dc:29:3e:f3:1f:dc:47:bc:e5:af:f2:d4:36:4d:98:f0:
         64:78:df:f7:e5:25:df:9a:5b:5f:3f:a5:7b:3f:67:6a:e0:ee:
         6a:57:f5:7f:c7:ce:33:df:16:e3:9e:cc:82:f4:5b:be:13:45:
         75:63:27:a2:a1:b2:a0:43:5a:e7:95:cd:74:bb:0e:7a:db:46:
         c8:b2:2a:eb:b0:21:f1:7a:7c:7f:4e:df:dc:9f:62:eb:19:ab:
         23:2c:ed:a3:e5:d0:11:41:1a:65:0c:91:cb:16:30:e8:53:b9:
         94:7c:0f:ac:24:2d:3a:4f:4f:c8:e4:c9:07:45:70:0c:b8:b2:
         12:0b:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:08 2026 by rpki-client