Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133342e302e302f31362d3136203d3e2031363539.roa
File:                     3134302e3133342e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier:          8ypyp1U4fWDhqKCl/OiFfgkPCDG4ACaD2YcGVYoeLd0=
Subject key identifier:   E5:7A:2A:08:84:44:10:98:B9:4E:7F:07:BD:5C:9A:FC:8C:5E:AD:85
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       251D554B552FDDC9AB6AEEA39B43BF776BD64F14
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133342e302e302f31362d3136203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:27 +0000
ROA not before:           Mon 11 May 2026 20:55:27 +0000
ROA not after:            Mon 10 May 2027 21:00:27 +0000
asID:                     1659
IP address blocks:        140.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 01:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1d:55:4b:55:2f:dd:c9:ab:6a:ee:a3:9b:43:bf:77:6b:d6:4f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:27 2026 GMT
            Not After : May 10 21:00:27 2027 GMT
        Subject: CN=E57A2A0884441098B94E7F07BD5C9AFC8C5EAD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:de:92:a8:f5:1c:13:e9:cf:d3:88:ce:8f:
                    5e:64:5b:e6:aa:55:d5:6c:2a:ff:97:fa:75:82:1d:
                    25:58:f4:94:cc:21:88:76:a5:b6:17:76:bf:73:e7:
                    fe:4f:66:25:66:42:e2:cc:9d:89:88:ab:7e:5d:07:
                    00:c6:b9:a4:8e:6c:87:0b:37:29:a4:2e:f5:6d:c8:
                    cf:78:0c:ac:69:c0:63:cc:8d:ed:9c:dd:2f:02:96:
                    d7:d4:f2:03:88:a2:85:41:7d:45:e5:3f:60:55:06:
                    07:a2:f2:c3:d7:45:c8:db:32:bb:a1:2f:54:40:e4:
                    cd:16:19:67:f0:24:aa:e8:a6:50:5b:66:23:25:dd:
                    d1:0c:a6:25:12:fe:4b:eb:43:39:89:68:c1:15:76:
                    9a:0e:77:e9:e6:8b:df:3d:3b:36:77:2a:4f:5f:b7:
                    6e:ba:ab:d0:21:c7:04:76:97:1a:ed:b7:c8:ca:18:
                    08:88:0d:86:95:f9:68:a5:8b:0e:9b:80:7a:7d:c7:
                    bf:40:af:ad:79:05:02:01:d5:63:64:62:f9:ec:ee:
                    19:7e:24:1b:32:a5:15:1e:5f:a7:85:fc:fc:16:8e:
                    f8:0b:52:a6:02:99:53:3f:35:cf:9d:cf:07:34:a6:
                    d1:02:1e:0d:20:a3:b6:85:b2:e5:a7:2b:5a:76:70:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:2A:08:84:44:10:98:B9:4E:7F:07:BD:5C:9A:FC:8C:5E:AD:85
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133342e302e302f31362d3136203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:07:10:b5:72:bb:9d:e3:cd:4c:fd:01:5d:e5:d3:2f:73:
         ea:37:a4:b9:05:44:f7:94:82:d5:19:7e:9e:fc:b7:38:c8:72:
         44:61:f8:e9:a2:66:46:5b:a4:c9:e5:81:af:5d:ee:64:e6:67:
         1d:91:2e:ce:2f:68:b6:08:b3:9e:3b:c1:ca:e7:0d:3b:41:3f:
         f2:2d:06:74:0a:f8:7b:47:aa:bb:e1:c6:7f:95:7a:36:f8:f2:
         cf:fd:12:e0:5a:59:a2:56:cb:3d:bd:38:1e:28:34:c9:1d:b5:
         8d:2c:ad:0e:e0:43:7f:bb:20:1d:e2:41:2c:63:32:02:a9:0d:
         11:5b:f7:b7:9b:13:f5:dd:ad:40:e6:ef:10:44:0a:5a:da:34:
         5c:b7:e8:76:c7:27:5f:8d:fc:97:8f:b4:75:a6:47:22:9d:54:
         8f:5b:31:e8:e1:41:db:46:03:69:61:24:66:99:7b:d8:15:95:
         b3:41:09:c5:79:89:15:05:5d:9d:74:c0:9d:a0:b2:09:68:eb:
         48:52:c6:d3:a1:bc:4c:f0:95:d2:bc:71:ed:ad:e5:5d:90:ba:
         92:be:cd:20:44:d1:8f:e4:32:d6:35:5f:d3:84:d8:ee:6f:7a:
         d5:b5:a8:36:15:d1:f7:ec:9b:ce:63:93:ed:e2:57:07:48:9f:
         79:a8:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:29 2026 by rpki-client