Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e302e302f32302d3230203d3e203138313737.roa
File:                     3134302e3133332e302e302f32302d3230203d3e203138313737.roa (raw, json)
Hash identifier:          iw6zD/R0gzHfiKvqq8lub8m6WtPZaHZEQ2fXNX/AeBc=
Subject key identifier:   04:F5:E1:F2:DF:27:4A:AD:EB:E4:D1:FB:F7:E4:A5:37:FE:76:A6:53
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       0E0CD580A72BC51C2FFA90B601D4AEB18FB7EAD5
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e302e302f32302d3230203d3e203138313737.roa
Signing time:             Mon 11 May 2026 21:00:26 +0000
ROA not before:           Mon 11 May 2026 20:55:26 +0000
ROA not after:            Mon 10 May 2027 21:00:26 +0000
asID:                     18177
IP address blocks:        140.133.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0c:d5:80:a7:2b:c5:1c:2f:fa:90:b6:01:d4:ae:b1:8f:b7:ea:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:26 2026 GMT
            Not After : May 10 21:00:26 2027 GMT
        Subject: CN=04F5E1F2DF274AADEBE4D1FBF7E4A537FE76A653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:c7:65:12:cd:6b:fc:aa:05:91:4c:fe:2f:
                    f9:b5:af:67:62:e8:ab:06:f2:e6:8c:ec:6c:3b:be:
                    2c:be:0f:06:ba:80:71:d2:49:88:a8:dd:d3:5e:57:
                    5e:24:50:cc:de:88:b5:54:80:46:03:f7:e0:c4:47:
                    f3:25:fd:8a:05:e8:84:30:c6:8c:e9:24:93:4e:21:
                    a9:e2:55:b9:dd:8a:e5:47:fe:09:f5:6e:6c:33:de:
                    cc:c9:02:d6:9d:ed:cd:e6:9b:9c:b2:ae:ac:55:52:
                    48:c4:e2:95:7b:bd:d5:92:43:0f:66:b1:ea:55:3e:
                    da:ad:83:be:19:fe:85:94:f7:81:7c:f2:c9:c5:0c:
                    65:15:d3:f2:cf:57:e8:c6:12:59:71:bd:11:55:70:
                    86:9b:58:17:40:e7:94:fb:94:1e:43:1c:93:7b:63:
                    1e:68:a7:b5:72:db:4d:b1:7e:7c:6b:0b:1e:e5:e5:
                    64:5e:f2:a6:91:ec:c1:d7:c1:9a:46:81:81:32:07:
                    a4:60:7a:d7:4e:50:1e:0e:8b:60:47:23:39:5c:d9:
                    b1:13:6a:09:9d:bd:09:2f:7e:2f:9c:95:04:56:57:
                    61:ec:21:f2:24:77:be:7b:33:f6:03:48:e7:44:0c:
                    09:a5:a8:8e:26:19:2f:6e:fb:ee:70:94:fd:c5:a9:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:E1:F2:DF:27:4A:AD:EB:E4:D1:FB:F7:E4:A5:37:FE:76:A6:53
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e302e302f32302d3230203d3e203138313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:20:67:ea:71:3f:b7:1f:84:c5:47:46:b1:e4:12:73:8d:ad:
         89:12:40:21:44:fe:60:07:10:84:e1:4c:c8:bb:0a:44:34:14:
         00:e9:10:3f:a2:c5:31:ff:ff:c6:18:a1:b8:7d:60:c3:ff:97:
         23:31:7a:12:0b:ca:84:d4:70:31:d1:77:d7:c2:36:70:28:61:
         d0:22:72:e9:f0:a1:d8:6d:83:47:ce:ee:c3:3d:a1:54:7f:40:
         a0:3b:80:06:67:3e:93:60:61:ce:71:69:6d:6c:d0:c0:8a:e5:
         3f:2d:29:e6:90:f0:2a:ab:0b:19:32:59:d9:36:0c:41:8c:a7:
         33:79:ab:ec:99:f8:94:24:1c:53:a9:06:75:ba:f0:4f:b5:7d:
         61:78:24:89:ee:d8:c2:10:7c:ad:b7:ad:37:61:66:c2:cd:ba:
         b5:1c:1b:27:c0:8e:52:85:41:a7:66:e7:8a:f3:2e:04:db:d5:
         04:61:a5:25:8c:c5:88:1e:1c:a7:5d:5a:3d:c2:0f:57:fe:39:
         92:e7:ce:68:50:07:76:1f:7c:03:98:3d:55:19:7f:ba:46:19:
         05:b6:b4:1c:4f:3f:ed:4b:63:62:59:75:ae:53:60:f3:bd:c1:
         14:83:81:f6:cb:a3:67:7a:22:ae:71:26:44:f7:5d:d5:84:25:
         8b:29:da:14
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUDgzVgKcrxRwv+pC2AdSusY+36tUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MjZaFw0yNzA1MTAyMTAwMjZaMDMxMTAvBgNV
BAMTKDA0RjVFMUYyREYyNzRBQURFQkU0RDFGQkY3RTRBNTM3RkU3NkE2NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEMdlEs1r/KoFkUz+L/m1r2di
6KsG8uaM7Gw7viy+Dwa6gHHSSYio3dNeV14kUMzeiLVUgEYD9+DER/Ml/YoF6IQw
xozpJJNOIaniVbndiuVH/gn1bmwz3szJAtad7c3mm5yyrqxVUkjE4pV7vdWSQw9m
sepVPtqtg74Z/oWU94F88snFDGUV0/LPV+jGEllxvRFVcIabWBdA55T7lB5DHJN7
Yx5op7Vy202xfnxrCx7l5WRe8qaR7MHXwZpGgYEyB6RgetdOUB4Oi2BHIzlc2bET
agmdvQkvfi+clQRWV2HsIfIkd757M/YDSOdEDAmlqI4mGS9u++5wlP3FqY8DAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUBPXh8t8nSq3r5NH79+SlN/52plMwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMzMz
MmUzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzgzMTM3Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BASMhQAwDQYJKoZIhvcNAQELBQADggEBADcgZ+pxP7cfhMVHRrHkEnONrYkSQCFE
/mAHEIThTMi7CkQ0FADpED+ixTH//8YYobh9YMP/lyMxehILyoTUcDHRd9fCNnAo
YdAicunwodhtg0fO7sM9oVR/QKA7gAZnPpNgYc5xaW1s0MCK5T8tKeaQ8CqrCxky
Wdk2DEGMpzN5q+yZ+JQkHFOpBnW68E+1fWF4JInu2MIQfK23rTdhZsLNurUcGyfA
jlKFQadm54rzLgTb1QRhpSWMxYgeHKddWj3CD1f+OZLnzmhQB3YffAOYPVUZf7pG
GQW2tBxPP+1LY2JZda5TYPO9wRSDgfbLo2d6Iq5xJkT3XdWEJYsp2hQ=
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:41 2026 by rpki-client