Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3136322e302f32342d3234203d3e203138313737.roa
File:                     3139322e3139322e3136322e302f32342d3234203d3e203138313737.roa (raw, json)
Hash identifier:          y1vrHSxxsU6zse/iTlZwly27NKCZfPA5t2tKt68Cv+8=
Subject key identifier:   E7:AF:F7:2A:0D:12:AC:5E:77:25:6B:F8:72:29:23:FE:C9:29:38:16
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       6961998A0C7378ED60E821ED0A46CA26E49FB5A7
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3136322e302f32342d3234203d3e203138313737.roa
Signing time:             Mon 11 May 2026 21:03:30 +0000
ROA not before:           Mon 11 May 2026 20:58:30 +0000
ROA not after:            Mon 10 May 2027 21:03:30 +0000
asID:                     18177
IP address blocks:        192.192.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:99:8a:0c:73:78:ed:60:e8:21:ed:0a:46:ca:26:e4:9f:b5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:58:30 2026 GMT
            Not After : May 10 21:03:30 2027 GMT
        Subject: CN=E7AFF72A0D12AC5E77256BF8722923FEC9293816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:6e:05:28:54:9e:76:4e:7e:f6:5a:c8:51:
                    5a:ed:80:28:32:d0:7a:45:2c:b2:f4:1c:c1:d2:6a:
                    56:cd:85:37:c4:db:2e:0f:f0:fb:0b:53:ea:29:8c:
                    7c:f4:6c:84:f4:85:11:d6:26:88:dd:11:eb:ab:82:
                    85:70:20:a2:a8:91:d6:c7:b4:b8:ef:c8:50:24:73:
                    14:d6:26:8f:bd:41:17:f1:bf:77:2d:23:1a:5e:29:
                    37:6b:c6:c3:ae:e3:87:36:9b:1a:91:58:0f:49:0a:
                    91:ac:d1:c3:ab:c7:73:35:0a:c5:d9:6c:8d:2f:0d:
                    f8:49:48:7b:6c:30:a4:da:1e:8c:d7:7b:c9:80:79:
                    ba:c1:2a:0a:b0:de:56:99:6b:03:5b:48:a4:ba:a1:
                    92:ca:6f:06:58:84:42:94:3f:9a:ef:39:b4:c3:67:
                    54:0d:51:20:72:70:22:45:3e:87:5d:61:90:27:e7:
                    b3:b0:80:99:26:f3:7a:46:4f:0e:bb:fb:be:86:91:
                    b8:b3:96:28:9a:66:3c:80:3a:7c:c8:25:c5:e3:41:
                    d6:ff:b5:c7:c9:c0:78:a0:86:bc:c8:b5:0a:be:4c:
                    9e:f4:78:ae:78:e8:83:ab:bc:aa:11:cb:ee:fe:3d:
                    6a:ff:dd:46:4c:5c:34:23:04:f4:be:a8:1d:b9:e6:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AF:F7:2A:0D:12:AC:5E:77:25:6B:F8:72:29:23:FE:C9:29:38:16
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3136322e302f32342d3234203d3e203138313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:36:e8:9b:e9:3c:90:d5:f0:27:c3:48:98:b4:ca:c8:75:
         0f:be:f0:ae:ac:56:a6:52:ae:d2:25:87:31:b5:0d:51:5a:b2:
         1a:ef:74:f6:8e:c6:1b:4b:b4:b5:9d:9b:a8:11:4f:8f:42:eb:
         be:26:41:2a:7c:fc:33:03:e8:c4:00:43:ea:8f:91:99:51:4b:
         fd:c8:5d:a5:2b:73:a1:cc:00:7d:c1:f5:31:72:89:ed:22:d2:
         ce:1c:e3:fa:35:83:2a:68:40:20:22:22:fa:d5:27:79:4c:36:
         e3:bb:38:3b:f1:d1:3d:1d:b0:47:53:02:5c:2a:00:4d:9e:d8:
         93:0b:03:9d:bb:56:aa:9b:a1:e1:aa:f7:3e:f4:7c:35:57:6c:
         4d:04:66:bf:22:dc:32:38:1f:47:c6:cb:f4:f7:69:95:04:a2:
         ba:8c:5e:d4:ff:cd:c0:13:6c:8b:ad:dd:7d:b9:b2:44:7e:4c:
         28:b9:aa:76:f2:7e:1b:d4:2e:22:a3:ab:c4:b7:9c:56:c8:51:
         a6:a5:05:c1:3f:ee:b9:dc:ca:34:ce:1c:96:d1:04:3e:d3:3f:
         50:6b:4f:ae:5c:6f:f3:86:ab:df:bd:b6:fa:b5:42:96:9f:16:
         41:44:45:da:c6:1f:e8:90:cb:60:47:7b:4b:c3:a5:3a:13:e5:
         12:82:1d:f1
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUaWGZigxzeO1g6CHtCkbKJuSftacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU4MzBaFw0yNzA1MTAyMTAzMzBaMDMxMTAvBgNV
BAMTKEU3QUZGNzJBMEQxMkFDNUU3NzI1NkJGODcyMjkyM0ZFQzkyOTM4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLW4FKFSedk5+9lrIUVrtgCgy
0HpFLLL0HMHSalbNhTfE2y4P8PsLU+opjHz0bIT0hRHWJojdEeurgoVwIKKokdbH
tLjvyFAkcxTWJo+9QRfxv3ctIxpeKTdrxsOu44c2mxqRWA9JCpGs0cOrx3M1CsXZ
bI0vDfhJSHtsMKTaHozXe8mAebrBKgqw3laZawNbSKS6oZLKbwZYhEKUP5rvObTD
Z1QNUSBycCJFPoddYZAn57OwgJkm83pGTw67+76GkbizliiaZjyAOnzIJcXjQdb/
tcfJwHighrzItQq+TJ70eK546IOrvKoRy+7+PWr/3UZMXDQjBPS+qB255mEVAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQU56/3Kg0SrF53JWv4cikj/skpOBYwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzMTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzEzNzM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwMCiMA0GCSqGSIb3DQEBCwUAA4IBAQBcBTbom+k8kNXwJ8NImLTKyHUP
vvCurFamUq7SJYcxtQ1RWrIa73T2jsYbS7S1nZuoEU+PQuu+JkEqfPwzA+jEAEPq
j5GZUUv9yF2lK3OhzAB9wfUxcontItLOHOP6NYMqaEAgIiL61Sd5TDbjuzg78dE9
HbBHUwJcKgBNntiTCwOdu1aqm6Hhqvc+9Hw1V2xNBGa/ItwyOB9Hxsv092mVBKK6
jF7U/83AE2yLrd19ubJEfkwouap28n4b1C4io6vEt5xWyFGmpQXBP+653Mo0zhyW
0QQ+0z9Qa0+uXG/zhqvfvbb6tUKWnxZBREXaxh/okMtgR3tLw6U6E+USgh3x
-----END CERTIFICATE-----
Generated at Wed May 13 08:45:11 2026 by rpki-client