Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35312e302f32342d3234203d3e2039393136.roa
File:                     3134302e3132392e35312e302f32342d3234203d3e2039393136.roa (raw, json)
Hash identifier:          y37goOIIr6dxAu9Gkal5wUZvfN35ZFdQyhkXFEjUnL4=
Subject key identifier:   4B:62:AC:90:1F:3D:8C:1C:6D:F0:46:71:49:67:4C:E4:D9:0F:D1:C6
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       7E26441EC8A36D1BDF7230512C26116C772BCFCF
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35312e302f32342d3234203d3e2039393136.roa
Signing time:             Mon 11 May 2026 20:59:41 +0000
ROA not before:           Mon 11 May 2026 20:54:41 +0000
ROA not after:            Mon 10 May 2027 20:59:41 +0000
asID:                     9916
IP address blocks:        140.129.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:26:44:1e:c8:a3:6d:1b:df:72:30:51:2c:26:11:6c:77:2b:cf:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:41 2026 GMT
            Not After : May 10 20:59:41 2027 GMT
        Subject: CN=4B62AC901F3D8C1C6DF0467149674CE4D90FD1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:ae:1e:61:fd:46:65:92:a3:0c:a1:7a:44:
                    f8:52:75:03:34:05:00:f2:ed:51:36:41:93:46:8c:
                    60:35:53:0e:00:23:40:ad:85:08:f3:26:49:ab:fa:
                    cf:4e:9a:b1:56:f7:08:2e:02:d0:a8:70:95:f9:fe:
                    c5:e8:22:69:83:96:db:7f:71:98:70:b2:94:28:8f:
                    f9:be:b8:5b:a8:d3:82:13:75:7d:34:f1:0f:14:d8:
                    03:6b:02:2c:1b:99:cf:3d:cf:47:d4:f7:bc:ef:48:
                    78:e7:a1:aa:d8:24:4c:9f:9f:e9:c8:a5:be:7d:31:
                    ea:eb:67:b7:f2:e3:69:f0:48:28:b5:66:23:be:a7:
                    b9:43:a5:15:32:9e:b9:29:0f:eb:41:01:af:24:80:
                    be:b1:28:30:73:a4:c3:89:6a:cd:9f:be:77:b4:b5:
                    8c:1b:2e:48:47:0a:a3:13:8d:6c:b6:63:94:7f:79:
                    cd:54:83:32:89:75:33:ec:d8:59:3e:b0:44:88:0b:
                    cf:6d:36:d6:3d:15:43:57:62:9e:cc:ad:80:b0:d5:
                    39:04:7b:94:f6:2e:d9:17:16:d7:34:03:77:40:b3:
                    65:8a:91:7a:35:c0:43:98:01:d9:5a:4c:f2:45:bd:
                    00:5e:07:a4:5c:43:ce:b4:be:b7:c8:c8:33:2f:4d:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:62:AC:90:1F:3D:8C:1C:6D:F0:46:71:49:67:4C:E4:D9:0F:D1:C6
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35312e302f32342d3234203d3e2039393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.129.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:98:c4:71:d2:31:f1:18:96:be:96:86:44:c2:9c:ea:0d:24:
         4f:a4:78:20:b4:c6:95:5a:be:46:27:09:1c:75:12:7e:d4:5a:
         f9:2a:30:50:d2:f1:66:77:68:81:2e:f1:78:87:ff:e2:e0:6d:
         1f:72:b9:60:04:c1:45:5e:5e:01:29:d5:14:2a:24:e9:3b:d3:
         80:16:3a:de:7a:8f:c3:13:96:13:f7:93:36:f1:37:96:c0:43:
         6a:b0:fe:be:7b:2e:8d:58:09:99:92:03:74:3c:3f:3e:21:a9:
         99:3f:10:f3:a3:cb:50:3c:24:08:84:32:f8:a9:f6:59:54:93:
         d5:e6:d8:01:0c:52:32:74:98:ce:6a:80:23:82:dd:32:8d:23:
         17:35:7a:d5:98:8b:6e:9d:41:21:6b:a6:d0:9a:89:bd:10:3a:
         fc:51:bf:27:84:72:74:66:94:d4:62:be:65:69:43:bb:a9:90:
         4d:2d:0a:83:28:57:d9:a3:dc:43:aa:8b:a5:a1:77:c8:02:74:
         0a:d3:c6:46:9e:e0:96:2d:e0:6c:a9:cf:40:38:df:bf:09:d4:
         0d:80:0c:5e:a9:bc:ec:ab:71:cb:78:f9:cd:cc:e5:e7:c8:bf:
         ba:54:9c:08:b5:69:9d:15:bc:d4:25:5d:5a:45:6f:fc:c3:3f:
         84:1b:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:02 2026 by rpki-client