Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa
File:                     3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          HOMdW/DCA4sfda1rA7mXzGtDkCQnCGvJ9UcaKJMYDkI=
Subject key identifier:   29:88:7C:1C:74:E9:83:BC:F0:90:0E:3F:9D:E6:87:36:70:13:A5:7C
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       79A50207A52D85D3A26FC0DE2F5D62EF882963DC
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:48 +0000
ROA not before:           Mon 11 May 2026 20:55:48 +0000
ROA not after:            Mon 10 May 2027 21:00:48 +0000
asID:                     1659
IP address blocks:        192.192.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a5:02:07:a5:2d:85:d3:a2:6f:c0:de:2f:5d:62:ef:88:29:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:48 2026 GMT
            Not After : May 10 21:00:48 2027 GMT
        Subject: CN=29887C1C74E983BCF0900E3F9DE687367013A57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:e8:9d:7a:01:ce:56:bb:b8:b0:d9:63:e7:
                    e1:18:53:70:66:78:82:75:5c:b5:39:f9:cf:11:99:
                    74:a6:80:6c:9f:3f:ed:35:2d:04:c4:22:d2:5e:a9:
                    9f:01:dc:73:f2:5f:6c:d0:09:46:b9:a0:9f:bf:ad:
                    fe:0a:96:72:78:7a:16:99:b9:fb:4e:ff:5b:5e:9c:
                    93:f1:74:3d:46:1a:d8:45:be:88:73:39:d0:4e:bc:
                    8f:70:3e:68:46:d7:d7:e8:09:51:01:af:68:51:a1:
                    11:7d:8e:97:d6:4a:97:10:12:88:4e:1d:5c:c1:73:
                    e0:40:8b:d4:e4:83:f8:bd:8a:63:6c:7a:d8:86:63:
                    ea:a9:9f:28:f6:35:9a:4f:bd:b9:e0:7e:b6:a7:89:
                    58:45:ce:b1:c0:2c:9e:e6:e1:b9:60:74:ed:c4:18:
                    80:51:1e:e9:1d:9a:1d:30:d9:03:21:6b:2c:c4:95:
                    91:14:58:ce:d4:b4:a7:37:0e:44:aa:4d:4f:1b:4b:
                    c7:4e:62:38:e7:cf:04:f6:24:77:d9:76:ca:cf:3e:
                    46:46:17:38:cf:1c:f2:08:42:7f:06:ef:0e:48:ef:
                    e0:3f:b6:7f:b6:d8:86:bf:9b:a2:44:ab:8b:65:1e:
                    de:5f:92:0f:79:c3:40:b6:4a:2e:13:01:78:5f:70:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:7C:1C:74:E9:83:BC:F0:90:0E:3F:9D:E6:87:36:70:13:A5:7C
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:b4:80:b0:fa:1c:2b:55:51:1a:1b:c1:82:39:c8:32:d1:
         96:e0:72:87:f6:47:3f:64:6f:e9:4f:fe:b3:d6:bb:4c:4b:33:
         0c:88:d1:2a:ed:34:54:b8:26:80:70:98:0e:d7:4e:bd:49:78:
         75:c9:72:02:96:94:68:03:07:22:11:2a:d7:73:0a:cf:02:ff:
         c7:b4:d5:ac:43:5a:19:29:cd:96:f1:57:e6:11:eb:65:98:32:
         18:d9:f5:4b:72:fb:78:26:33:6d:7f:d1:33:d1:8a:71:f3:81:
         1f:c4:a0:43:d6:cd:aa:a0:0c:b9:e0:ea:77:c6:05:e8:9d:88:
         6e:5c:42:96:93:f2:26:30:5b:da:ad:38:ac:50:bd:b7:d3:8f:
         4d:01:81:7f:e7:ec:7b:a0:fe:b0:2f:05:a4:99:e4:c8:4e:39:
         e7:65:f1:b2:05:c5:a4:02:be:8a:29:70:b7:c0:a6:44:1d:99:
         72:4a:1c:86:d1:b5:aa:a2:ca:15:04:9d:ec:b6:31:36:44:cd:
         3c:66:59:ec:5d:f0:0a:eb:33:b4:f2:89:8a:73:5a:79:c0:9f:
         b3:7f:e0:df:58:4e:68:16:30:f7:bb:f6:40:15:5a:13:e2:1e:
         44:13:d3:55:21:84:82:7f:b4:dc:d6:2c:72:2b:6d:f8:59:2c:
         35:a9:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:33 2026 by rpki-client