Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132352e302f32342d3234203d3e2031363539.roa
File:                     3139322e3139322e3132352e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          Pqnyn54XFo7kakdXDs7E6AF5trDyCyf4omNjN7GtgDM=
Subject key identifier:   A1:16:1B:9C:65:9A:19:4E:EE:95:10:72:24:0C:17:07:12:FF:26:4B
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       34B02E0738502BE13DC81136662B2A2932A5BD1E
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132352e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:44 +0000
ROA not before:           Mon 11 May 2026 20:55:44 +0000
ROA not after:            Mon 10 May 2027 21:00:44 +0000
asID:                     1659
IP address blocks:        192.192.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b0:2e:07:38:50:2b:e1:3d:c8:11:36:66:2b:2a:29:32:a5:bd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:44 2026 GMT
            Not After : May 10 21:00:44 2027 GMT
        Subject: CN=A1161B9C659A194EEE951072240C170712FF264B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:05:a4:45:d7:a5:e8:ed:63:f8:99:70:4c:
                    d0:35:5b:4b:cc:ef:c3:6e:97:8d:f4:ba:b0:09:6a:
                    37:64:36:a8:22:a3:e0:f1:52:fc:1c:da:8c:0b:0c:
                    e7:21:bb:65:aa:d5:a1:45:32:27:7a:b9:0d:9b:ab:
                    30:c7:f2:cb:bd:8e:7a:e5:14:6e:c3:7b:16:8e:a9:
                    7c:3d:52:50:75:3a:31:24:45:f3:9b:4a:9e:aa:38:
                    92:c8:9a:48:b8:6a:77:e8:6b:3c:23:7d:62:5b:f0:
                    f5:47:74:43:0e:2c:b4:3c:f1:4e:c8:9c:42:9f:e0:
                    e1:66:46:fb:48:52:4b:de:16:72:f5:06:05:e4:92:
                    11:c3:33:b9:45:1b:79:cd:01:7d:ad:65:00:78:8f:
                    8b:0e:e3:e2:f6:7c:c5:8b:e5:30:d6:ce:81:05:a0:
                    fe:93:87:43:d7:63:18:65:72:dc:e1:65:df:29:75:
                    dd:2d:d4:5d:e3:3d:98:d8:ae:a2:62:c5:29:82:50:
                    2d:2a:50:43:5e:12:90:c4:d4:4a:57:89:61:53:69:
                    c7:9b:76:54:34:a3:2e:5f:92:ee:6d:52:45:69:98:
                    90:64:c5:a3:17:7c:ba:98:32:4a:4b:c5:15:39:21:
                    dd:1c:e0:02:88:61:ae:86:04:cd:0b:e5:65:8c:63:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:16:1B:9C:65:9A:19:4E:EE:95:10:72:24:0C:17:07:12:FF:26:4B
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132352e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:42:4a:45:f7:59:a8:e1:a6:f3:d6:d9:99:d6:60:ee:84:
         48:80:66:9d:d9:6b:42:96:6f:79:7a:81:12:db:c1:e5:39:74:
         f5:0d:6f:de:1e:46:1a:07:f6:92:9f:7b:2f:27:68:02:89:b8:
         90:f3:0f:99:a6:5c:61:e9:0e:ac:b7:95:8f:8b:56:14:50:88:
         60:f5:ff:f0:e5:49:26:33:f7:e9:79:90:28:99:54:db:50:5d:
         cf:49:1a:d1:a7:25:a3:5d:9b:e1:ad:c9:dc:3f:69:49:b3:d3:
         8c:af:59:36:3f:81:b6:20:e7:cd:93:00:4d:17:c8:27:19:41:
         c9:08:08:a1:ab:e2:89:2a:01:93:3b:58:23:ca:6c:b1:57:a5:
         d1:3b:a8:69:8b:82:5d:de:75:0c:51:6b:a6:ef:ed:57:63:dc:
         0e:7f:2c:47:54:fa:45:42:68:97:09:30:19:39:e9:99:73:a8:
         c2:d2:30:8c:15:ac:1a:7a:37:ba:3b:81:f8:5b:cb:f9:64:3f:
         d3:c5:f4:ba:98:6f:d5:bc:96:b5:3d:e5:6d:ff:df:f2:bb:9b:
         34:24:55:98:62:85:1b:1f:4d:50:34:5a:1c:39:ef:47:25:f6:
         e8:be:8e:66:dc:24:4d:e0:cb:44:70:e1:6e:7a:65:ff:db:18:
         ce:b7:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:17 2026 by rpki-client