Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132302e302f32322d3232203d3e203137373136.roa
File:                     3139322e3139322e3132302e302f32322d3232203d3e203137373136.roa (raw, json)
Hash identifier:          68C6OpPsNWMJAXndbUMDSWsQsLOSPBd730L7j5D5AMA=
Subject key identifier:   84:79:D7:C6:E1:28:21:E7:4E:B3:CC:DD:4F:81:13:0D:6F:5F:4C:81
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       1852FAF20898FBBF030318065B680F089AA955E9
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132302e302f32322d3232203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:04:48 +0000
ROA not before:           Mon 11 May 2026 20:59:48 +0000
ROA not after:            Mon 10 May 2027 21:04:48 +0000
asID:                     17716
IP address blocks:        192.192.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:52:fa:f2:08:98:fb:bf:03:03:18:06:5b:68:0f:08:9a:a9:55:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:59:48 2026 GMT
            Not After : May 10 21:04:48 2027 GMT
        Subject: CN=8479D7C6E12821E74EB3CCDD4F81130D6F5F4C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:20:50:3e:5d:b7:37:2f:b5:04:09:bc:f4:
                    bb:3b:1e:a5:e4:c4:89:dd:53:cb:17:5e:0f:ea:73:
                    d1:7c:c3:b3:f4:d3:bb:5a:73:d4:34:e4:30:c2:6d:
                    75:7b:96:4d:be:36:25:77:7e:48:1b:91:8e:c8:e2:
                    2b:dd:4c:1e:28:31:58:0b:be:48:de:51:df:dc:72:
                    5a:bb:12:2c:87:cc:4e:46:b8:f0:08:4a:10:68:d6:
                    61:32:6f:30:9c:93:e3:e7:ef:10:83:37:63:9e:05:
                    a2:39:84:e2:a8:24:26:e4:3d:6d:7f:c9:6f:ed:7d:
                    8e:19:88:0a:3b:f1:a2:4f:24:a7:c3:30:d3:20:61:
                    57:9f:fe:81:bb:bf:43:e1:f2:f7:f4:c9:3f:ee:73:
                    e9:7c:26:05:ab:d5:dc:12:0e:bd:99:fc:a6:a1:04:
                    70:1f:f4:5b:b4:85:aa:36:93:e2:46:e0:89:b3:48:
                    f8:0b:39:aa:d6:c0:53:3d:c6:fa:86:43:a7:75:a0:
                    a4:26:6e:50:ef:bf:77:59:4d:9d:7c:31:5b:89:d9:
                    e8:05:5b:33:02:bd:d4:fa:85:45:2e:c4:c4:94:79:
                    c4:9a:eb:47:e8:71:f1:6b:89:20:03:32:33:66:fb:
                    9a:de:df:6e:cd:e4:73:b1:d7:f7:6a:8f:af:bf:3d:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:D7:C6:E1:28:21:E7:4E:B3:CC:DD:4F:81:13:0D:6F:5F:4C:81
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132302e302f32322d3232203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:b0:cb:6f:58:72:0e:44:1b:ae:3c:a3:d6:16:8f:d4:de:
         2e:45:ff:69:8b:e2:89:ec:54:92:05:2e:bb:54:37:32:99:ed:
         db:ab:d7:c1:88:41:81:f4:05:7d:1f:e6:7e:e8:c2:f2:a8:0b:
         f8:4c:0b:d4:b9:d7:92:d4:5d:3b:f1:59:88:d2:24:b4:6e:c7:
         cf:93:4d:aa:ab:2b:be:09:54:95:2a:5a:fc:fd:90:a9:fb:f5:
         3e:61:cd:16:96:5e:f1:5e:ae:92:b0:e7:f4:46:67:73:2a:fb:
         e5:8b:f8:9f:1d:47:1d:a1:e4:2a:49:60:c1:2d:c9:0a:bd:09:
         a4:54:09:7b:21:92:41:56:47:f5:03:fa:e7:b8:f5:0c:3b:96:
         69:6d:51:77:e7:f3:69:57:12:99:6b:55:2d:43:63:76:22:65:
         f6:2f:e9:cd:4d:48:90:02:d7:6e:b7:4e:26:51:57:98:9f:ac:
         c7:44:8c:99:33:0d:9a:fe:1d:44:ba:f2:8d:31:e4:93:19:2b:
         f1:5b:af:45:75:1e:ac:9e:28:14:1b:40:8f:32:69:6a:0a:70:
         ed:5f:ea:6c:af:d6:86:05:fe:c4:d7:13:93:e2:96:27:ee:e5:
         ce:4b:d3:5b:d3:07:34:6c:77:3e:eb:f7:b3:22:f3:6b:16:2c:
         d3:be:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:32 2026 by rpki-client