Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa
File:                     3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa (raw, json)
Hash identifier:          2qii3VSX06DMqq/EtVRBvah3z2FSa/UjztfUOInOFt0=
Subject key identifier:   42:03:F7:74:FD:19:6B:F5:D6:3F:FA:78:8C:B9:2F:47:F8:04:19:10
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       6E9363DA3C16653BB4C37F990E6CB8B4EDC7D51A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:04:50 +0000
ROA not before:           Mon 11 May 2026 20:59:50 +0000
ROA not after:            Mon 10 May 2027 21:04:50 +0000
asID:                     17716
IP address blocks:        192.192.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:63:da:3c:16:65:3b:b4:c3:7f:99:0e:6c:b8:b4:ed:c7:d5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:59:50 2026 GMT
            Not After : May 10 21:04:50 2027 GMT
        Subject: CN=4203F774FD196BF5D63FFA788CB92F47F8041910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9e:e3:f5:1b:a7:a9:52:54:da:4e:2b:aa:e2:
                    af:27:45:77:cb:57:07:ae:d6:89:14:ff:9e:67:50:
                    34:8a:f0:94:34:93:a7:7c:39:8e:1d:07:be:ab:97:
                    0b:84:c4:ff:1b:f1:73:f8:46:08:6c:67:75:bc:51:
                    60:5e:8a:16:2c:0d:bf:de:70:2b:3b:5d:49:56:59:
                    06:e4:47:13:b6:18:e6:9b:64:b8:64:04:c4:32:2d:
                    29:15:e9:84:5a:3b:75:72:b5:fc:dc:96:e9:7b:95:
                    90:4e:ce:f0:c4:99:5d:7d:c9:d8:6d:46:d9:a5:43:
                    fb:55:ff:95:b7:a5:7e:36:3e:f6:fe:bc:16:95:99:
                    41:bd:ca:de:9b:92:18:04:86:3b:12:61:a1:fd:28:
                    94:dc:79:80:d5:70:36:14:d1:59:1b:85:de:72:dc:
                    e7:a0:c8:22:a7:bc:15:3d:4b:78:0b:28:c0:2e:82:
                    47:bb:18:dd:fc:b8:45:13:5b:1a:60:91:2d:74:67:
                    e5:64:51:37:71:7e:a2:6c:8e:28:85:0e:26:eb:1c:
                    24:9f:8f:51:45:47:df:2e:7f:61:c8:45:a1:39:c2:
                    95:07:38:80:33:c6:39:e1:9e:f7:91:43:48:43:b7:
                    ab:0a:e5:3c:a1:ab:23:15:81:d4:f6:c7:8d:66:97:
                    68:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:03:F7:74:FD:19:6B:F5:D6:3F:FA:78:8C:B9:2F:47:F8:04:19:10
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:be:0d:83:44:04:62:9b:31:92:c4:72:0f:7a:cb:3d:28:ce:
         36:5b:b4:67:69:4a:24:5f:05:d1:0d:08:a2:5e:ec:2d:90:42:
         17:8d:09:52:bc:9c:61:1c:e5:4b:66:4c:a1:a4:90:aa:6e:52:
         22:ed:d2:49:77:7a:8c:92:a5:49:d5:da:11:14:16:ff:92:56:
         16:cf:d2:64:a0:ee:f7:79:da:51:ba:ac:1b:52:4b:92:09:8f:
         cb:48:b1:2f:fa:cf:9d:9d:6f:88:58:73:36:25:64:4c:e1:ad:
         45:c9:d3:d5:e7:a4:60:00:da:b8:99:a6:f6:97:13:20:65:a9:
         29:e8:aa:c5:08:72:b5:37:c7:8f:dd:54:a9:20:84:45:66:c8:
         fc:a9:a1:e8:77:4b:92:97:76:27:68:79:cb:a1:0c:e3:40:d5:
         17:d6:51:21:81:2d:c1:02:68:bf:6f:d1:2a:9b:3d:ba:8a:95:
         ea:30:5b:a6:07:09:2d:1b:40:92:70:47:c0:cf:8a:5e:18:9a:
         96:90:5c:9a:2c:e2:02:f9:9b:fd:b2:3d:08:d5:9c:b2:84:65:
         32:0c:09:29:22:54:58:3b:29:16:51:62:f5:18:4e:31:36:14:
         a2:41:d9:50:99:09:9c:d7:e7:65:ab:18:b9:d5:93:95:77:03:
         9c:65:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:47 2026 by rpki-client