Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e38302e302f32312d3231203d3e203137373133.roa
File:                     3134302e3133332e38302e302f32312d3231203d3e203137373133.roa (raw, json)
Hash identifier:          djbZhTXhojQc5xo0/UYau79GGBqNTZEEfGSnq6XXdB8=
Subject key identifier:   03:C0:1D:10:63:A7:4E:BB:7F:77:9A:90:99:11:ED:CE:0F:27:A4:35
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       0662F8251BBBC86E9C162074FA9B50330CCC9DFD
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e38302e302f32312d3231203d3e203137373133.roa
Signing time:             Mon 11 May 2026 21:01:56 +0000
ROA not before:           Mon 11 May 2026 20:56:56 +0000
ROA not after:            Mon 10 May 2027 21:01:56 +0000
asID:                     17713
IP address blocks:        140.133.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:62:f8:25:1b:bb:c8:6e:9c:16:20:74:fa:9b:50:33:0c:cc:9d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:56:56 2026 GMT
            Not After : May 10 21:01:56 2027 GMT
        Subject: CN=03C01D1063A74EBB7F779A909911EDCE0F27A435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:eb:f6:62:11:e7:2b:4d:d3:f8:bf:bc:8f:
                    46:47:0f:0c:27:1c:24:73:50:de:e9:00:ae:d0:25:
                    c4:84:e9:3f:6a:46:1d:42:49:8d:2a:a1:26:28:37:
                    cf:93:03:3b:87:b0:3c:de:9e:1e:cd:cc:ef:5c:37:
                    17:74:85:ea:54:5c:33:dd:b1:bf:5b:65:85:77:ca:
                    72:fd:27:6a:ae:ce:f8:1b:2e:a8:55:a1:80:ed:76:
                    1b:8b:b6:7b:77:22:4d:4c:42:a0:26:b9:a8:56:cf:
                    78:73:04:53:21:f5:1e:bd:0b:9a:65:dd:3c:a0:c5:
                    0a:56:d4:a4:19:ed:60:d0:e4:67:ed:67:c0:50:65:
                    05:f6:a9:69:eb:8e:f9:67:0f:ff:74:c2:42:9d:d8:
                    8d:95:35:07:68:78:ca:c9:f0:f3:67:6e:27:d6:f8:
                    48:72:ac:73:43:e9:ff:83:d0:2b:20:8a:63:16:bb:
                    59:94:78:71:1b:97:12:cc:96:ff:fe:e0:b7:4e:8a:
                    8b:ab:9b:7b:8c:3e:14:10:4e:d3:7a:a1:f1:d5:eb:
                    98:2d:8a:fb:64:61:d6:e9:de:63:0d:a0:90:de:4a:
                    73:94:91:be:83:e5:e2:a3:5f:46:2e:bc:de:9c:16:
                    2c:d3:fb:3d:40:ae:11:5e:08:03:de:a2:a0:a2:a8:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:1D:10:63:A7:4E:BB:7F:77:9A:90:99:11:ED:CE:0F:27:A4:35
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e38302e302f32312d3231203d3e203137373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.133.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:57:3c:d1:fc:ed:41:b1:ee:4c:20:06:a5:f4:16:47:b2:
         78:6c:8a:67:df:09:ad:6b:9a:92:f8:ca:e8:87:bf:12:99:5c:
         9b:92:3a:a6:98:e6:65:cb:25:87:fa:52:26:a5:77:4c:44:f0:
         62:72:ca:33:c6:0a:f5:37:41:e0:4b:7f:23:b6:58:53:95:01:
         a5:ef:89:48:e6:07:3a:9e:eb:d4:75:87:94:be:cd:0b:c4:7d:
         04:6c:43:2f:0a:7e:07:c3:73:2e:2d:bf:90:b6:7b:11:f0:46:
         37:3d:b7:ac:9b:6e:d8:e3:47:e0:f1:7f:f5:c5:64:f0:59:82:
         81:5d:55:62:bc:30:10:fc:10:df:77:d2:55:c1:63:68:19:f0:
         27:3d:22:ff:a2:bd:37:23:ce:1a:3e:29:0f:78:fe:2d:21:af:
         c6:8b:24:99:27:42:24:bd:8e:8d:c7:89:40:db:43:31:a1:43:
         97:4b:13:2f:fb:7b:bd:04:46:ef:35:42:ff:f6:a6:36:6a:02:
         aa:bd:c5:6b:11:49:3f:4e:da:12:a8:73:0e:83:18:0f:83:7b:
         78:8e:2e:fc:89:2d:5f:05:fe:ae:29:6c:6b:d0:14:00:ac:86:
         94:12:04:d6:e5:a7:4c:93:7b:8d:ab:b9:ec:da:3b:d6:d3:b4:
         52:79:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:13 2026 by rpki-client