Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133302e302e302f31362d3136203d3e203137373132.roa
File:                     3134302e3133302e302e302f31362d3136203d3e203137373132.roa (raw, json)
Hash identifier:          S2HZRmP87/ayiT93pBYItQGB3hfM1JOeONC0kfpwFCM=
Subject key identifier:   34:05:27:2D:0B:BA:4A:87:41:5C:06:46:02:D3:86:1B:DB:42:1C:3C
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       746D668D8BE97B19A85567414B84E64200065645
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133302e302e302f31362d3136203d3e203137373132.roa
Signing time:             Mon 11 May 2026 21:00:23 +0000
ROA not before:           Mon 11 May 2026 20:55:23 +0000
ROA not after:            Mon 10 May 2027 21:00:23 +0000
asID:                     17712
IP address blocks:        140.130.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6d:66:8d:8b:e9:7b:19:a8:55:67:41:4b:84:e6:42:00:06:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:23 2026 GMT
            Not After : May 10 21:00:23 2027 GMT
        Subject: CN=3405272D0BBA4A87415C064602D3861BDB421C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0c:6f:19:78:d2:1c:6c:99:35:15:9c:12:b6:
                    28:a4:bf:59:78:75:a1:6b:5b:ce:41:46:60:c1:33:
                    aa:43:72:d3:05:c9:6a:0c:2b:60:3e:f4:37:04:37:
                    43:ec:c6:45:44:f1:c8:b3:cc:63:1e:91:7c:e5:d0:
                    96:5f:4b:c3:0e:9c:97:2d:b5:3a:05:e0:30:81:f0:
                    45:c1:5f:d2:ec:4e:56:0c:74:cb:69:62:c8:1e:32:
                    bf:ca:29:0c:d2:b2:86:b0:7b:8c:c3:e7:33:f2:08:
                    3c:8f:be:ee:bb:05:d0:c8:f6:2d:02:12:e7:a4:87:
                    83:dd:5d:07:d4:e0:ee:eb:a5:81:92:c1:51:6e:10:
                    1e:d6:9b:04:ff:7a:90:b2:2c:1a:58:3b:5a:2c:c0:
                    6b:8d:ed:5c:22:e1:b2:d8:77:9d:6c:1d:4a:9d:c5:
                    cd:b9:79:47:a3:da:74:3e:60:bd:0b:af:05:d2:65:
                    9f:1b:bd:13:25:04:50:76:50:fd:aa:fe:28:ee:0d:
                    dc:6b:0a:17:e0:11:22:15:5e:45:4c:91:f7:cc:5f:
                    3c:0b:37:85:90:08:1a:23:0a:55:86:18:7a:1f:78:
                    e0:9a:4c:c2:45:05:8f:68:5e:dc:fa:8a:cd:73:94:
                    cd:f4:2d:79:9b:d0:c1:f5:27:ea:cd:16:15:23:86:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:27:2D:0B:BA:4A:87:41:5C:06:46:02:D3:86:1B:DB:42:1C:3C
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133302e302e302f31362d3136203d3e203137373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:6d:6c:da:67:80:80:e0:fe:87:46:b1:a2:f4:e7:5b:e0:c6:
         10:6a:b7:2e:46:32:56:b3:5c:aa:7d:bd:26:87:2d:80:74:76:
         9c:14:b9:9d:c8:8e:b0:f6:91:95:d8:8f:5f:70:5e:8f:4d:f1:
         91:41:0c:5d:4b:ee:e5:2d:4f:c6:24:79:d5:2a:df:8f:73:8d:
         ce:cd:78:29:75:08:74:f5:83:9c:99:02:cf:82:46:35:69:8d:
         4b:57:d8:f6:7d:8a:f4:e1:99:52:f1:66:fb:63:74:8e:99:ca:
         4e:23:17:3d:6f:e9:52:f4:15:b5:e7:a8:27:01:0a:4d:07:cd:
         03:81:17:f6:9a:69:d4:8b:f0:a6:d2:ae:e0:4c:24:a4:a0:ec:
         c7:71:b7:4e:85:cd:93:51:28:3e:9b:1c:97:34:01:cd:0b:45:
         6b:25:ad:16:91:08:bd:81:c6:b5:24:41:91:68:b7:d0:30:c0:
         53:e7:87:a2:3e:8d:f5:9e:bf:cc:4d:33:5b:a5:23:19:99:a4:
         80:99:0e:2c:5b:0a:89:f1:ef:80:55:9c:01:5b:cc:7a:ee:9f:
         96:29:03:1f:d4:2e:58:b4:e4:3b:54:a1:86:5b:f4:3b:5e:ba:
         73:84:0d:fa:a3:91:2b:ab:7b:a6:5e:65:45:66:6e:e1:a7:ec:
         9f:26:41:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:37 2026 by rpki-client