Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132342e302e302f31362d3136203d3e203137373136.roa
File:                     3134302e3132342e302e302f31362d3136203d3e203137373136.roa (raw, json)
Hash identifier:          3Ht2FaGYKVc/Dv0g/IEA1wdWuWqGnfSdb0e50PYwUY4=
Subject key identifier:   8F:CE:0C:22:D5:81:27:99:73:C0:17:6E:19:AA:24:EB:53:6B:10:30
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       5D07DDC547E7CABE47B60CAB92E8B83D67783101
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132342e302e302f31362d3136203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:00:18 +0000
ROA not before:           Mon 11 May 2026 20:55:18 +0000
ROA not after:            Mon 10 May 2027 21:00:18 +0000
asID:                     17716
IP address blocks:        140.124.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 01:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:07:dd:c5:47:e7:ca:be:47:b6:0c:ab:92:e8:b8:3d:67:78:31:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:18 2026 GMT
            Not After : May 10 21:00:18 2027 GMT
        Subject: CN=8FCE0C22D581279973C0176E19AA24EB536B1030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:7b:a3:ba:7c:c1:b0:e0:c3:3e:6c:63:cd:
                    ad:05:f1:3f:8b:77:c1:63:cc:c8:2e:d1:8f:5c:4a:
                    38:fc:db:ff:07:bb:b7:a9:b6:fe:21:cd:db:d1:ba:
                    e2:4f:92:14:db:15:c0:a3:d4:ff:f8:72:47:f0:b1:
                    03:ff:c7:ca:5d:92:97:1b:fc:ad:43:34:40:8e:93:
                    1c:b1:76:67:00:1d:54:6d:2f:92:df:62:86:28:ae:
                    65:3d:6e:a3:0f:d1:b1:2b:f0:24:da:05:f0:cc:90:
                    0d:5c:1e:77:94:a5:d1:bd:ee:d8:33:df:37:ff:a8:
                    40:0c:d5:98:2b:88:24:24:bc:d6:57:14:a6:71:43:
                    79:f6:78:c5:87:b7:28:4e:a8:97:7c:bf:04:17:89:
                    26:d4:7b:bd:b1:dc:83:c6:a0:73:31:30:81:cc:76:
                    12:c8:62:64:d2:10:e2:84:9d:a3:81:ee:8a:24:4d:
                    93:8b:2b:88:79:15:da:2e:07:10:bc:3f:0e:eb:cf:
                    9f:75:5c:d4:6c:2e:ab:c0:8e:a3:0d:8a:75:56:f2:
                    0f:37:a4:f2:14:c8:85:fd:d8:07:d0:72:2c:66:03:
                    03:f0:2d:20:fe:01:48:57:99:4d:d8:50:52:b0:73:
                    a7:1c:30:78:3a:a2:71:53:4e:35:f4:6a:88:8e:ee:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:0C:22:D5:81:27:99:73:C0:17:6E:19:AA:24:EB:53:6B:10:30
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132342e302e302f31362d3136203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:cb:f0:43:4c:b0:fc:53:04:19:f4:b4:00:34:d0:25:11:
         07:f1:be:1a:fd:32:3b:86:9f:32:56:3f:68:91:f2:6e:26:e0:
         b6:42:6c:fa:49:5a:9f:1f:d5:23:cc:ea:c2:11:72:c9:19:f2:
         75:6c:79:67:93:d2:ca:a3:b6:09:38:0d:3b:58:ea:02:e4:4d:
         fb:f8:ba:da:4b:6e:e8:e0:6a:2f:4c:e2:cd:ec:d8:a0:ba:d4:
         53:a5:2b:1b:9e:aa:47:44:4c:41:27:4b:be:00:f2:78:3c:9a:
         3e:5f:8c:f6:e8:21:0a:47:e5:6c:1a:4a:b5:06:3f:2a:62:e1:
         2d:84:88:6d:7b:cf:90:af:3e:c2:24:ae:65:3e:ab:ec:e6:0b:
         c0:5d:3e:29:ba:f4:7d:3b:bf:31:93:62:38:8b:4a:17:16:89:
         53:a6:b3:c6:d0:84:a3:6d:1b:9d:78:8d:5e:c0:de:e0:72:1a:
         27:a8:c0:55:38:07:d7:63:46:99:74:4a:3c:c1:4f:98:67:ae:
         8d:45:5f:5a:cc:4b:46:1e:7f:00:8a:12:2b:42:fd:78:84:5f:
         4e:e6:89:e0:63:4f:c7:fe:a6:9d:53:30:cc:db:96:24:d8:56:
         cf:7b:ba:61:d7:64:c0:47:e4:90:d2:41:d8:10:3a:de:35:d1:
         f8:88:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:13:59 2026 by rpki-client