Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e31322e302f32342d3234203d3e203137373136.roa
File:                     3139322e3139322e31322e302f32342d3234203d3e203137373136.roa (raw, json)
Hash identifier:          z2a/LBKxsWG4rka7O6ZBbKXS70IvHWBc+ok7Pat1S4Y=
Subject key identifier:   D9:8E:73:7D:2A:2D:12:37:0A:BD:DE:01:76:5E:83:F0:3B:B2:DF:87
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       2993E975EC3C725AF6415F88F7EB26CD3D3D2EF8
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e31322e302f32342d3234203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:04:42 +0000
ROA not before:           Mon 11 May 2026 20:59:42 +0000
ROA not after:            Mon 10 May 2027 21:04:42 +0000
asID:                     17716
IP address blocks:        192.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:e9:75:ec:3c:72:5a:f6:41:5f:88:f7:eb:26:cd:3d:3d:2e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:59:42 2026 GMT
            Not After : May 10 21:04:42 2027 GMT
        Subject: CN=D98E737D2A2D12370ABDDE01765E83F03BB2DF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:7a:d1:53:4b:d5:13:bc:d5:25:6e:9b:58:
                    a2:c3:1d:69:c3:24:4d:e3:bc:68:d1:13:95:74:f9:
                    1e:62:c2:c1:f5:e7:7d:a6:b7:c7:0a:22:6c:d7:dd:
                    51:59:7a:9e:03:8b:fc:d5:75:9a:fb:80:19:0a:1e:
                    99:89:e6:d4:8f:6f:dd:97:ed:cc:6e:f6:7f:7b:da:
                    a9:4d:47:c1:42:83:29:d3:ab:35:5c:d3:7c:d7:c8:
                    ce:4f:94:f5:69:fc:6f:c2:dc:a0:c9:db:ed:fa:e2:
                    ce:e4:57:e2:f8:bb:75:1d:e6:bc:26:36:a3:f4:55:
                    16:ba:f5:d6:7b:c9:a1:fb:d1:14:6c:53:be:6d:e8:
                    54:f6:41:48:67:07:10:4e:d1:f5:b3:aa:15:24:db:
                    30:2b:ad:42:9f:56:12:4f:48:0b:60:0a:72:7f:d4:
                    9a:4d:86:fd:e4:28:8f:f8:67:17:77:3c:82:63:68:
                    d6:77:a1:d7:22:c3:d5:db:ac:60:b4:c3:df:7d:22:
                    e8:a8:f7:9c:19:95:89:53:76:89:61:fe:34:86:d2:
                    b2:9d:83:ac:e8:c9:a0:fa:ab:31:03:f5:4f:82:7f:
                    7a:c4:69:0d:46:09:cd:71:64:34:9d:4c:76:c3:d8:
                    ca:04:0a:8c:62:08:10:67:8f:c0:39:f6:40:64:21:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:73:7D:2A:2D:12:37:0A:BD:DE:01:76:5E:83:F0:3B:B2:DF:87
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e31322e302f32342d3234203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:65:12:75:f0:f3:ed:c0:c9:4b:f4:3e:47:e1:df:08:66:
         74:6f:4b:32:1e:80:a0:02:fa:93:7d:be:2e:ad:54:98:e2:09:
         6a:a2:31:bd:06:49:6e:a1:a6:da:75:5b:91:fb:54:b2:de:61:
         46:b6:d8:57:8b:39:d9:96:79:69:28:4b:d7:1b:70:4f:71:48:
         db:a3:f9:f7:6b:ad:b0:c1:55:7c:91:b3:70:23:fd:27:0f:8b:
         17:89:4c:47:d7:d5:11:bc:8c:51:6c:52:39:ef:35:36:15:eb:
         9e:d6:c3:0c:6d:13:36:fa:72:98:10:3e:e3:8e:b7:89:1d:28:
         c0:a9:64:1d:79:b2:8a:4e:fa:f3:9c:82:6b:c2:84:6e:09:7d:
         8e:12:3d:ce:41:8c:79:f6:d0:9d:96:95:a5:27:0a:a4:5b:45:
         db:1e:5f:b8:1a:a6:e9:a5:5f:7e:72:5c:d6:6b:1a:31:2a:47:
         43:10:f3:b2:37:7a:46:60:ab:a1:49:8c:97:51:cd:44:23:9b:
         85:ae:33:0b:36:c0:8f:e6:94:9b:43:6c:7f:f8:01:93:85:a0:
         68:91:15:f1:95:5a:bf:1e:aa:43:5e:8d:e8:1e:9d:c6:00:42:
         fc:7f:05:9e:e6:0b:82:3b:08:d8:cb:84:cd:3b:2e:4f:cc:b7:
         86:0a:98:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:07 2026 by rpki-client