Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3131302e302e302f31362d3234203d3e2037353339.roa
File:                     3134302e3131302e302e302f31362d3234203d3e2037353339.roa (raw, json)
Hash identifier:          wxVNLG6Zw8vZiEZhN/cSMvCcp+7KdDfuxL3yZJCl7wc=
Subject key identifier:   79:89:E7:CE:2C:5A:F2:27:A6:9C:0B:4E:38:8F:98:06:FD:16:3E:82
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       40BD1654872B7FE915659932F0A38057919C368C
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131302e302e302f31362d3234203d3e2037353339.roa
Signing time:             Mon 11 May 2026 20:59:08 +0000
ROA not before:           Mon 11 May 2026 20:54:08 +0000
ROA not after:            Mon 10 May 2027 20:59:08 +0000
asID:                     7539
IP address blocks:        140.110.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bd:16:54:87:2b:7f:e9:15:65:99:32:f0:a3:80:57:91:9c:36:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:08 2026 GMT
            Not After : May 10 20:59:08 2027 GMT
        Subject: CN=7989E7CE2C5AF227A69C0B4E388F9806FD163E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:ea:7e:b1:aa:9f:92:57:9a:13:93:02:e5:
                    56:95:56:80:2a:99:d0:1d:88:e0:d0:c7:f5:90:4f:
                    1f:28:ec:5e:f0:85:3a:7a:4b:7a:87:82:6c:bc:b2:
                    57:3f:0b:ea:00:28:52:f0:4d:63:37:d1:7c:b5:26:
                    6f:0d:c1:70:42:3b:c4:9f:a0:ee:c9:fa:f2:e7:f5:
                    71:e4:65:c1:da:47:cf:55:40:1e:47:ea:a4:92:47:
                    c0:c8:84:84:64:84:26:e8:a0:d9:4a:8a:7a:ec:2d:
                    8d:99:a4:82:fd:34:be:a2:fe:89:c6:f3:0c:95:3f:
                    e5:b6:54:8b:70:ab:c8:ab:10:93:eb:3f:06:3b:2c:
                    8a:26:43:61:15:21:f2:33:29:89:a3:94:2c:fe:00:
                    09:fa:e6:55:1f:cf:64:4e:5e:8c:47:57:0a:73:ba:
                    77:c4:4e:e0:df:c5:ca:18:56:28:0a:07:75:a6:cf:
                    e3:95:02:3d:bb:7a:27:9b:17:52:20:3d:40:b2:bf:
                    48:3f:7e:22:39:18:e4:cd:8d:f7:b5:72:15:eb:11:
                    84:2c:35:54:68:9c:4c:01:e2:c8:f8:bb:b8:e0:a9:
                    f7:ba:66:68:b6:6d:d6:94:cc:73:31:7e:04:1a:95:
                    ac:fb:bf:b9:68:88:a3:f9:fa:68:b5:04:65:96:b9:
                    c2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:89:E7:CE:2C:5A:F2:27:A6:9C:0B:4E:38:8F:98:06:FD:16:3E:82
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131302e302e302f31362d3234203d3e2037353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:b3:74:0c:91:49:10:b8:98:a3:45:44:a8:94:55:32:c5:
         3d:fd:01:a9:4a:20:1e:e1:1e:ef:b9:48:4b:2a:68:3f:27:4e:
         32:69:2f:e5:af:a2:aa:bd:a8:5f:e0:d4:fa:ff:57:e7:95:ab:
         4c:87:da:ea:6e:1f:e8:b3:1f:86:1a:cf:e2:58:a5:45:e8:b5:
         d9:42:8e:5d:3d:d6:0e:53:2a:c1:0d:69:ee:e6:f9:ec:3b:44:
         b6:d6:d1:d4:b0:d6:99:49:99:93:aa:f9:e7:ed:a8:ad:da:ce:
         e1:99:be:4c:47:28:60:19:e3:fd:e2:36:ef:e1:89:f0:c5:86:
         17:49:25:0a:b4:4a:2a:de:79:c3:bc:6d:5f:cd:54:f5:b6:51:
         ef:f9:fc:74:15:4e:70:15:0b:80:86:b6:06:33:98:12:96:54:
         16:35:bb:cb:1a:66:fa:86:71:29:c5:11:7a:3a:e4:4c:00:ad:
         c2:08:ab:55:fc:64:4a:6a:4b:28:e8:18:67:80:f2:a6:86:02:
         39:77:28:a8:37:e5:55:3c:62:52:25:7f:8d:f3:5b:bf:4e:a3:
         c8:aa:29:17:26:c1:87:ab:06:b9:e0:54:4a:74:9a:49:33:47:
         41:69:cc:a1:31:70:67:19:3d:1f:50:31:4d:08:ca:a6:6d:8c:
         cc:ef:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:57 2026 by rpki-client