Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132382e302f32332d3233203d3e2031363539.roa
File:                     3139322e3139322e3132382e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier:          eZqimb1i5J/L0Au9R6R7M5fPP8BLIPKYhoZHSmL9gMg=
Subject key identifier:   50:AA:15:D3:24:B4:E9:0F:41:00:50:43:74:99:8D:8E:C2:25:C4:5F
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       620E58317A18533FCBAF61A34732EDD0EDD3A29B
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132382e302f32332d3233203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:47 +0000
ROA not before:           Mon 11 May 2026 20:55:47 +0000
ROA not after:            Mon 10 May 2027 21:00:47 +0000
asID:                     1659
IP address blocks:        192.192.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0e:58:31:7a:18:53:3f:cb:af:61:a3:47:32:ed:d0:ed:d3:a2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:47 2026 GMT
            Not After : May 10 21:00:47 2027 GMT
        Subject: CN=50AA15D324B4E90F4100504374998D8EC225C45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:64:26:fc:71:94:d1:22:73:00:ac:b3:b9:
                    da:32:b2:f1:ca:91:9f:c4:08:fc:c1:c3:e2:bd:c8:
                    48:75:21:cb:41:ca:fa:69:02:5f:58:74:5f:55:77:
                    6a:48:11:dd:74:59:0d:8e:64:0f:ea:1f:d5:06:27:
                    26:29:f8:fa:06:72:21:55:a8:69:66:d7:e4:ea:20:
                    3c:22:6b:14:00:3a:1a:89:2d:e0:ce:c9:8b:bc:a0:
                    61:0d:b6:a0:dd:d4:95:71:e1:6c:6c:27:04:5f:d2:
                    7e:73:89:3d:7c:91:2c:52:4c:b9:de:d4:7b:d6:0f:
                    42:41:24:f4:35:1b:22:33:50:9e:5c:07:66:98:ca:
                    e8:81:7a:8f:b5:a0:a4:76:22:fc:b2:6c:52:61:b5:
                    3c:d7:e9:fb:45:24:df:01:e9:d8:de:74:9e:8c:36:
                    15:0e:11:0a:9e:ed:af:16:c6:f7:6c:d3:b0:fd:a4:
                    c3:49:e4:37:bc:82:a6:9f:ba:a9:38:d7:3f:94:db:
                    c4:fb:08:1d:5a:5e:06:46:84:ed:f0:87:80:29:79:
                    d4:53:73:0b:d4:9a:c4:e8:a6:1e:9f:61:48:5c:13:
                    f6:9c:c2:8b:65:f3:e0:e4:9f:77:fa:bf:9b:8d:c1:
                    87:a3:27:ff:99:e2:02:83:93:65:91:42:a3:42:59:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:15:D3:24:B4:E9:0F:41:00:50:43:74:99:8D:8E:C2:25:C4:5F
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3132382e302f32332d3233203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:7b:3f:b3:8d:14:ce:2a:86:de:21:78:79:95:a9:42:34:1e:
         82:14:fd:95:8d:a2:56:89:34:a0:c4:25:c3:c4:5d:3c:67:28:
         73:92:85:64:03:cb:6f:3e:09:9b:91:63:6d:1a:7f:b6:9f:17:
         13:81:96:f6:0c:59:09:c4:5a:1e:98:7e:21:aa:1b:e8:99:e1:
         92:5e:14:ce:40:af:66:bf:3d:75:be:3a:2b:57:6a:be:a3:e8:
         5b:15:d2:c9:00:e5:3c:8c:b1:55:10:24:ed:8f:fc:b4:1f:16:
         cf:1b:e6:b9:18:fe:35:5f:2b:62:7d:3b:90:1b:1b:2c:ac:9d:
         ba:f6:50:26:b0:30:2c:c6:88:e6:f3:66:55:37:7f:f9:a9:7a:
         f7:04:de:cb:40:cd:a1:f1:c8:43:ca:5e:50:de:76:03:bf:30:
         72:20:51:eb:d7:9d:42:73:36:e6:32:31:6e:98:20:9f:f7:17:
         28:26:e3:29:16:27:ad:97:99:76:bb:d9:18:5e:17:21:87:6f:
         e9:6d:a7:53:64:46:bf:0c:6c:86:9e:40:46:08:d3:58:02:b6:
         a1:c5:9b:19:e7:bf:cd:c6:08:e7:72:2d:f4:30:cb:93:b7:f5:
         bf:75:96:65:fd:9f:ac:53:08:e8:4d:1b:ab:37:e5:63:b2:11:
         bb:cf:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:18 2026 by rpki-client