Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132362e302f32332d3233203d3e2031363539.roa
File:                     3139322e3139322e3132362e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier:          VMg8lfLvaIDD49DLcMNErQdm7ja0Mr/vxef3k28hYA4=
Subject key identifier:   5E:9D:14:2B:B1:77:8B:C7:FF:1C:C7:AA:65:4D:AB:37:9A:C4:2A:B5
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       143736EDF3A683656FE3270F8EA17C05D5DB6DBB
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132362e302f32332d3233203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:45 +0000
ROA not before:           Mon 11 May 2026 20:55:45 +0000
ROA not after:            Mon 10 May 2027 21:00:45 +0000
asID:                     1659
IP address blocks:        192.192.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:36:ed:f3:a6:83:65:6f:e3:27:0f:8e:a1:7c:05:d5:db:6d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:45 2026 GMT
            Not After : May 10 21:00:45 2027 GMT
        Subject: CN=5E9D142BB1778BC7FF1CC7AA654DAB379AC42AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:7b:f7:46:b4:d1:53:1b:d5:f4:4b:c6:8d:
                    36:07:31:2b:f4:f7:ad:a9:00:52:3b:01:13:17:8f:
                    09:91:2e:4e:e7:fc:e9:e0:2c:fe:b5:3a:91:2f:c8:
                    9a:e2:c1:ec:35:df:04:b5:7a:53:67:64:3e:b9:e3:
                    55:96:f3:12:fa:5b:54:f8:94:3e:b8:53:62:81:33:
                    b0:32:bc:f2:b5:eb:65:4f:69:61:ce:dc:dc:e8:86:
                    ae:48:7a:e2:db:f4:da:de:20:f3:0d:53:28:1c:d6:
                    f7:36:30:39:ab:65:55:78:84:7a:5d:2c:e4:02:75:
                    c7:be:e9:fa:e8:bd:f1:88:ab:8b:3b:49:fc:c5:14:
                    5b:f7:62:92:6d:03:73:98:53:50:e9:b0:59:2a:7c:
                    47:1c:c5:91:93:0e:99:17:cb:78:07:85:80:2a:4c:
                    7d:9a:f7:19:d8:76:ae:dc:e6:ca:1e:05:46:cf:cf:
                    33:14:fd:08:50:32:0d:26:32:26:10:60:51:97:73:
                    31:9d:e4:df:17:4c:54:3e:4c:ac:83:d9:a9:0c:32:
                    61:e6:fd:d4:11:f9:5f:09:a9:8a:d7:f2:1b:66:52:
                    69:1e:20:e5:38:f0:4a:b8:78:b0:f2:0a:8a:9b:bb:
                    5f:38:49:92:db:37:2d:45:fe:33:cd:79:3f:51:40:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9D:14:2B:B1:77:8B:C7:FF:1C:C7:AA:65:4D:AB:37:9A:C4:2A:B5
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132362e302f32332d3233203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:0d:fa:82:cb:ea:03:1e:70:75:44:f1:91:13:68:76:c8:fa:
         ab:aa:78:29:2b:5d:fd:28:35:cb:66:7b:94:ee:ee:e0:e9:2e:
         17:0b:f1:97:a0:4a:7d:30:26:bc:04:07:12:08:e2:7c:b6:da:
         3d:1e:ff:7a:51:73:2f:69:fd:ae:c2:d2:da:38:0e:dc:af:68:
         d9:93:0e:3d:64:8f:a3:dc:da:59:47:9d:86:e5:cd:93:88:5e:
         c8:e0:9d:4c:ed:b4:3f:3e:51:02:5c:94:df:0e:f1:4b:ab:12:
         ef:8b:b9:06:44:74:7a:0b:62:44:5f:cd:10:0a:55:02:c1:f8:
         83:b0:4a:51:e9:dc:fe:87:d4:a9:25:fd:9a:cd:10:64:c2:0b:
         b7:13:74:46:f4:84:a8:30:0b:4f:74:df:31:2d:f9:8b:1f:48:
         c2:fd:7f:68:29:22:b3:a8:dd:fc:31:ed:36:4d:48:c6:bb:ab:
         d8:38:f9:aa:67:75:39:e2:34:39:52:64:21:83:fa:fe:e1:a9:
         34:23:09:c5:70:af:e2:45:0b:3c:7e:d8:3f:e7:37:92:8b:cd:
         1f:b1:72:4e:3c:48:34:e3:16:9c:cd:9b:c2:9d:3c:15:d1:5d:
         b2:56:bb:85:46:b3:46:94:2e:d9:b9:6e:47:3f:53:ba:f0:7c:
         8a:5a:23:ff
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUFDc27fOmg2Vv4ycPjqF8BdXbbbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1NDVaFw0yNzA1MTAyMTAwNDVaMDMxMTAvBgNV
BAMTKDVFOUQxNDJCQjE3NzhCQzdGRjFDQzdBQTY1NERBQjM3OUFDNDJBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7EHv3RrTRUxvV9EvGjTYHMSv0
962pAFI7ARMXjwmRLk7n/OngLP61OpEvyJriwew13wS1elNnZD6541WW8xL6W1T4
lD64U2KBM7AyvPK162VPaWHO3Nzohq5IeuLb9NreIPMNUygc1vc2MDmrZVV4hHpd
LOQCdce+6frovfGIq4s7SfzFFFv3YpJtA3OYU1DpsFkqfEccxZGTDpkXy3gHhYAq
TH2a9xnYdq7c5soeBUbPzzMU/QhQMg0mMiYQYFGXczGd5N8XTFQ+TKyD2akMMmHm
/dQR+V8JqYrX8htmUmkeIOU48Eq4eLDyCoqbu184SZLbNy1F/jPNeT9RQPrDAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUXp0UK7F3i8f/HMeqZU2rN5rEKrUwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM2MzUzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcDAfjANBgkqhkiG9w0BAQsFAAOCAQEAYQ36gsvqAx5wdUTxkRNodsj6q6p4
KStd/Sg1y2Z7lO7u4OkuFwvxl6BKfTAmvAQHEgjifLbaPR7/elFzL2n9rsLS2jgO
3K9o2ZMOPWSPo9zaWUedhuXNk4heyOCdTO20Pz5RAlyU3w7xS6sS74u5BkR0egti
RF/NEApVAsH4g7BKUenc/ofUqSX9ms0QZMILtxN0RvSEqDALT3TfMS35ix9Iwv1/
aCkis6jd/DHtNk1Ixrur2Dj5qmd1OeI0OVJkIYP6/uGpNCMJxXCv4kULPH7YP+c3
kovNH7FyTjxINOMWnM2bwp08FdFdsla7hUazRpQu2bluRz9TuvB8iloj/w==
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:14 2026 by rpki-client