Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e39362e302f32302d3230203d3e203137373136.roa
File:                     3134302e3132392e39362e302f32302d3230203d3e203137373136.roa (raw, json)
Hash identifier:          OqCZPRg3Hp1rHC/q23EeieGNOcR8rTmMlv8xpD/vB6A=
Subject key identifier:   88:34:B9:C0:B7:2D:A7:DB:A8:03:D3:7B:11:F2:4A:F9:43:67:89:6C
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       11CE54B77C63362F37B61F1E5A7F5B9C622F49DF
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e39362e302f32302d3230203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:00:21 +0000
ROA not before:           Mon 11 May 2026 20:55:21 +0000
ROA not after:            Mon 10 May 2027 21:00:21 +0000
asID:                     17716
IP address blocks:        140.129.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ce:54:b7:7c:63:36:2f:37:b6:1f:1e:5a:7f:5b:9c:62:2f:49:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:21 2026 GMT
            Not After : May 10 21:00:21 2027 GMT
        Subject: CN=8834B9C0B72DA7DBA803D37B11F24AF94367896C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:29:69:a7:05:91:98:b9:4b:f9:75:7c:d5:
                    5a:3f:bc:c8:fe:e7:3d:9d:75:b2:86:da:94:8e:d5:
                    58:dc:83:c2:09:a4:d3:bf:8b:7f:c0:88:27:33:ba:
                    a3:2c:33:bd:38:0c:c3:84:f4:01:12:fb:dc:1a:7d:
                    c1:2e:7d:e4:c3:6c:8f:12:2b:6e:af:27:3d:93:24:
                    ce:42:05:7a:4d:b2:8e:06:e3:f5:47:4a:58:c3:d9:
                    ea:af:b7:ce:37:6c:42:ed:4c:23:28:0d:04:13:d1:
                    33:bd:12:34:1b:67:92:02:30:9a:7d:b7:f2:0f:20:
                    df:da:33:7c:fa:00:fa:e3:bc:26:90:f5:a0:33:f8:
                    13:58:21:04:69:50:5b:22:19:c7:d5:3e:b3:e5:b4:
                    8d:fc:81:e6:18:50:71:91:28:bd:ce:c9:64:5c:6f:
                    43:b4:d5:98:f0:51:eb:60:44:92:be:14:bf:1e:af:
                    11:26:c6:40:48:11:c9:66:57:9d:47:a8:ab:4b:e2:
                    18:43:3a:41:8c:1a:a1:63:e4:47:cf:a7:fc:cb:02:
                    f7:b1:15:4c:0b:8a:4a:9a:f2:ae:35:9f:5b:9e:e9:
                    aa:51:04:f0:98:43:d5:7e:38:fc:7b:b5:c6:8b:be:
                    c6:6f:87:d0:82:4a:53:09:d7:b0:32:46:e9:c9:63:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:B9:C0:B7:2D:A7:DB:A8:03:D3:7B:11:F2:4A:F9:43:67:89:6C
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e39362e302f32302d3230203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.129.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:de:f6:c6:72:a9:98:c5:61:c7:2d:b6:ca:46:f8:04:30:54:
         39:1a:dd:da:42:9a:f9:1a:35:01:95:80:59:c6:4f:f9:c6:09:
         d2:4d:f9:0b:f0:df:11:d0:cc:af:98:07:cd:e9:99:03:be:ee:
         3e:8d:7c:56:a6:2f:a1:50:91:01:6a:19:08:a9:8d:92:db:28:
         c3:9d:14:f1:34:d0:97:a2:7a:30:cb:75:ba:86:58:75:b8:0c:
         26:68:fb:54:1e:b2:cc:f9:2f:2b:49:d7:ea:94:fb:a5:14:98:
         06:d1:93:38:61:26:c9:bd:fe:d9:14:8d:88:4b:0c:f6:29:40:
         36:45:0d:cb:b1:d9:89:9d:d8:7a:47:97:4b:fd:fd:e9:11:a5:
         28:5c:96:73:22:1d:18:18:2f:c3:4f:ba:5c:10:6c:ec:1f:b7:
         6c:61:03:c4:8a:55:1b:c9:47:cb:1f:c1:a4:84:9f:5a:0b:60:
         8b:a3:87:16:c5:17:b8:54:6c:3f:fd:e7:ba:0f:cd:74:4f:16:
         99:6a:eb:5c:e5:d0:ce:4a:a1:40:6f:5c:4f:96:01:46:9a:d8:
         a2:b6:12:6d:98:78:15:5d:17:7b:ba:29:9b:3a:5f:a7:8f:ac:
         08:c9:89:12:4b:24:30:15:a7:c8:ae:d3:af:9e:ab:1a:b8:2e:
         c3:5a:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:27 2026 by rpki-client