Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132322e302e302f31362d3136203d3e203137373136.roa
File:                     3134302e3132322e302e302f31362d3136203d3e203137373136.roa (raw, json)
Hash identifier:          ZfOWdPv3AmdY+aaSSFKE0M7F7S9llp42oH5lrUwTYcM=
Subject key identifier:   79:95:1E:61:99:26:3A:62:BD:4E:EE:88:D2:26:2C:9A:E1:24:A6:95
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       73D675854E480277E8402726C55F2D7FAAA12D98
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132322e302e302f31362d3136203d3e203137373136.roa
Signing time:             Mon 11 May 2026 20:59:59 +0000
ROA not before:           Mon 11 May 2026 20:54:59 +0000
ROA not after:            Mon 10 May 2027 20:59:59 +0000
asID:                     17716
IP address blocks:        140.122.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d6:75:85:4e:48:02:77:e8:40:27:26:c5:5f:2d:7f:aa:a1:2d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:59 2026 GMT
            Not After : May 10 20:59:59 2027 GMT
        Subject: CN=79951E6199263A62BD4EEE88D2262C9AE124A695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:ee:2c:32:cf:e8:cc:31:6d:c1:e2:d4:bc:
                    28:13:50:37:53:4b:f9:8a:ee:c6:21:ab:b2:76:65:
                    e5:eb:8a:f8:c8:34:43:43:18:cd:5f:41:e8:ef:88:
                    0d:97:21:db:12:0d:26:f7:7a:f7:22:03:78:4f:f2:
                    48:13:aa:87:6d:44:5c:e8:2d:1c:22:36:76:f2:de:
                    df:e9:08:de:36:34:24:d6:fb:87:6c:08:16:d0:ab:
                    1b:28:10:32:2a:56:d4:1f:28:2d:e1:58:c2:27:11:
                    16:72:32:d2:1b:76:9f:bc:35:3a:77:6c:49:ff:a3:
                    b1:ea:f8:c4:43:12:e3:22:e5:a0:85:b4:00:78:32:
                    ab:62:37:d5:7d:85:ec:60:95:4f:eb:d8:05:31:56:
                    e5:68:58:75:22:b6:84:be:83:96:34:41:b6:89:e8:
                    f3:38:d5:45:e4:16:46:46:7f:50:25:db:5d:c7:7d:
                    f4:d3:90:f5:21:33:8c:c7:10:c8:c1:49:1b:b2:5d:
                    48:fc:54:08:72:16:be:0d:89:e5:e9:bf:9a:c4:5a:
                    15:7b:dd:58:70:11:44:bf:8d:95:62:19:3d:b4:8d:
                    35:3a:1a:89:dc:67:ef:52:54:6b:f7:13:b7:d9:59:
                    54:a1:c5:5b:e7:57:9e:d5:d3:e4:4c:bb:33:b7:81:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:95:1E:61:99:26:3A:62:BD:4E:EE:88:D2:26:2C:9A:E1:24:A6:95
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132322e302e302f31362d3136203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.122.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:98:ff:27:13:50:c2:f7:84:51:5f:00:7b:32:b8:92:6a:
         1c:6c:13:06:f4:4e:11:6b:c7:23:20:29:96:62:52:d5:3f:5e:
         19:56:c4:16:fb:93:1c:7c:b2:82:5c:34:9e:df:f7:56:17:83:
         f5:55:34:19:23:e5:92:05:e2:5d:81:85:91:56:1b:12:5f:23:
         68:6a:d4:c2:92:83:35:13:b7:58:89:81:33:bd:51:d0:be:48:
         09:1f:b9:36:32:46:2d:39:5f:23:96:21:70:69:7c:1a:a5:b1:
         5f:de:5e:8c:e8:03:9a:9a:02:94:41:69:6b:f8:b2:31:4c:15:
         09:91:cd:04:37:d7:dd:d4:4b:76:a1:88:a6:00:2b:db:70:b0:
         0f:81:6f:15:f8:e9:22:7e:9c:7f:6f:09:00:b3:3b:6c:6f:30:
         64:24:eb:20:69:7c:9c:09:fe:4a:ad:3d:78:81:db:ec:d1:53:
         47:a6:f1:5c:11:cb:d1:c7:7b:4f:d0:52:82:f7:8a:e2:2b:9e:
         63:26:69:6b:9a:ef:6a:46:6a:27:9f:d1:ae:b9:19:ed:6e:04:
         b6:e8:af:98:c3:b7:56:68:2a:cb:6b:17:be:54:03:fd:d1:03:
         4f:f6:a1:42:31:bf:cb:d0:61:2e:c5:4c:f8:54:2f:69:8d:87:
         95:63:59:0c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUc9Z1hU5IAnfoQCcmxV8tf6qhLZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU0NTlaFw0yNzA1MTAyMDU5NTlaMDMxMTAvBgNV
BAMTKDc5OTUxRTYxOTkyNjNBNjJCRDRFRUU4OEQyMjYyQzlBRTEyNEE2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0O4sMs/ozDFtweLUvCgTUDdT
S/mK7sYhq7J2ZeXrivjINENDGM1fQejviA2XIdsSDSb3evciA3hP8kgTqodtRFzo
LRwiNnby3t/pCN42NCTW+4dsCBbQqxsoEDIqVtQfKC3hWMInERZyMtIbdp+8NTp3
bEn/o7Hq+MRDEuMi5aCFtAB4MqtiN9V9hexglU/r2AUxVuVoWHUitoS+g5Y0QbaJ
6PM41UXkFkZGf1Al213HffTTkPUhM4zHEMjBSRuyXUj8VAhyFr4NieXpv5rEWhV7
3VhwEUS/jZViGT20jTU6GoncZ+9SVGv3E7fZWVShxVvnV57V0+RMuzO3gepNAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUeZUeYZkmOmK9Tu6I0iYsmuEkppUwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMjMy
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzczNzMxMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCMejANBgkqhkiG9w0BAQsFAAOCAQEApz6Y/ycTUML3hFFfAHsyuJJqHGwTBvRO
EWvHIyAplmJS1T9eGVbEFvuTHHyyglw0nt/3VheD9VU0GSPlkgXiXYGFkVYbEl8j
aGrUwpKDNRO3WImBM71R0L5ICR+5NjJGLTlfI5YhcGl8GqWxX95ejOgDmpoClEFp
a/iyMUwVCZHNBDfX3dRLdqGIpgAr23CwD4FvFfjpIn6cf28JALM7bG8wZCTrIGl8
nAn+Sq09eIHb7NFTR6bxXBHL0cd7T9BSgveK4iueYyZpa5rvakZqJ5/RrrkZ7W4E
tuivmMO3Vmgqy2sXvlQD/dEDT/ahQjG/y9BhLsVM+FQvaY2HlWNZDA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:14 2026 by rpki-client