Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3131362e302e302f31362d3136203d3e203138313737.roa
File:                     3134302e3131362e302e302f31362d3136203d3e203138313737.roa (raw, json)
Hash identifier:          FyWZ33jMrcqTp8LoWuZl3eX12VCU3Q/tQ9ljLQoGK88=
Subject key identifier:   F5:CC:AE:10:33:68:F9:ED:6E:A3:C0:DF:B5:B8:92:E1:F1:4F:91:BB
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       0640B4A09E6D29B23D5388A0DA8D6433A54D637B
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131362e302e302f31362d3136203d3e203138313737.roa
Signing time:             Mon 11 May 2026 21:00:16 +0000
ROA not before:           Mon 11 May 2026 20:55:16 +0000
ROA not after:            Mon 10 May 2027 21:00:16 +0000
asID:                     18177
IP address blocks:        140.116.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:b4:a0:9e:6d:29:b2:3d:53:88:a0:da:8d:64:33:a5:4d:63:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:16 2026 GMT
            Not After : May 10 21:00:16 2027 GMT
        Subject: CN=F5CCAE103368F9ED6EA3C0DFB5B892E1F14F91BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:71:db:78:9b:d5:e0:e3:75:ae:51:c3:25:
                    4e:77:e1:ea:99:d2:41:ed:99:3d:a5:25:9f:60:75:
                    d3:9d:bb:4c:87:d3:01:53:51:32:ba:74:1e:ac:e7:
                    2b:4f:36:fc:00:17:d6:a7:23:f0:f1:32:b6:38:2d:
                    29:f4:0d:93:2a:84:04:40:52:c0:fa:39:7d:6c:6f:
                    93:39:9b:02:8d:7f:96:01:78:1d:df:b4:fe:a9:c5:
                    cf:e9:fa:a1:1a:cc:00:5f:54:68:86:fd:99:c4:d6:
                    46:33:64:30:1a:93:f6:78:ea:af:59:b7:af:4c:f9:
                    ae:52:46:a1:74:b5:21:95:72:6b:4a:bb:37:9e:59:
                    d7:a4:54:5a:aa:29:f3:1e:23:9c:23:e3:51:59:a6:
                    37:2b:9f:10:0b:1b:dd:e3:c0:2a:f1:0c:6f:63:1c:
                    d7:fc:d6:4c:f7:a2:5c:98:04:cb:02:3f:e5:ae:05:
                    b0:e4:83:3b:d8:11:9c:34:c8:59:02:f3:85:95:77:
                    a9:df:57:0b:d1:14:2d:4d:b2:25:3a:9a:2f:d7:13:
                    df:e1:34:14:4a:7e:19:9d:b8:8b:f9:f6:cb:47:b5:
                    ba:07:06:6d:16:72:74:d9:0c:b7:f9:0c:2c:30:81:
                    59:ec:bf:1e:c2:c6:e2:b6:21:d0:a4:51:07:6c:2e:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CC:AE:10:33:68:F9:ED:6E:A3:C0:DF:B5:B8:92:E1:F1:4F:91:BB
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131362e302e302f31362d3136203d3e203138313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.116.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:62:65:c2:48:ba:38:cb:76:b8:d7:15:0a:9e:aa:71:1d:e6:
         98:e1:39:8c:cb:bf:62:33:2f:5d:e8:fb:e4:cf:72:b9:f4:b1:
         b7:2e:ff:af:d2:c0:d6:7c:02:c3:3f:c5:86:8f:32:a9:ca:13:
         2e:11:7c:d8:a8:7c:b4:bf:7f:73:ea:3b:82:72:49:65:14:5c:
         71:83:f7:99:da:39:33:27:9b:b8:1b:49:8f:49:a3:99:a5:57:
         21:58:73:13:5b:a8:b5:b3:be:c9:34:cf:73:90:d0:82:8c:5f:
         64:5c:49:03:1c:27:06:be:5a:d7:77:59:19:f1:41:47:f3:b5:
         ea:95:c3:6b:31:51:24:c7:be:49:15:70:3b:6c:f5:3b:46:53:
         92:66:79:fa:c4:d6:35:45:13:17:c3:13:57:7b:9f:62:e9:96:
         a7:9b:48:a9:c5:98:82:6f:63:cf:41:36:ad:18:5d:5b:73:6a:
         4c:42:e5:77:c9:a2:7d:1b:90:f0:e1:bd:8e:0b:79:53:20:a5:
         fc:49:53:43:1b:f8:96:c8:29:a3:0b:81:ea:5f:57:f1:d5:cc:
         bd:80:2e:33:2b:ec:1a:b6:ae:f6:88:fd:da:c1:3d:62:7b:bb:
         11:74:3b:51:58:d2:e3:ce:d8:7e:87:7e:55:56:91:61:a4:86:
         72:e3:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:19 2026 by rpki-client