Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139302e302f32332d3233203d3e203137373133.roa
File:                     3139322e3139322e3139302e302f32332d3233203d3e203137373133.roa (raw, json)
Hash identifier:          BJZS+GcKGnSeqqdDrlp1E3ScB/RYN1ThOo8ndoNhhPQ=
Subject key identifier:   C8:DB:05:97:A6:A9:20:FB:F6:56:75:AD:11:52:EC:E6:C7:CF:1D:45
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       54DA03B6C66851D69BCAD6D3C139409F504B52D6
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139302e302f32332d3233203d3e203137373133.roa
Signing time:             Mon 11 May 2026 21:02:55 +0000
ROA not before:           Mon 11 May 2026 20:57:55 +0000
ROA not after:            Mon 10 May 2027 21:02:55 +0000
asID:                     17713
IP address blocks:        192.192.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:da:03:b6:c6:68:51:d6:9b:ca:d6:d3:c1:39:40:9f:50:4b:52:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:57:55 2026 GMT
            Not After : May 10 21:02:55 2027 GMT
        Subject: CN=C8DB0597A6A920FBF65675AD1152ECE6C7CF1D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:d3:04:86:a0:58:3d:1a:2d:a9:61:78:2f:
                    66:09:4c:8b:bb:70:35:21:55:8b:60:5a:ec:71:cc:
                    1c:85:15:6e:fb:0f:3d:a0:33:e6:8e:03:d7:a8:d0:
                    e2:68:4c:38:48:9c:2f:87:0a:e5:88:4b:4c:75:26:
                    e9:79:c7:c9:1b:f3:83:f8:db:f7:fb:16:96:f0:1b:
                    81:58:f4:3a:11:54:87:9a:d1:1d:d6:d5:bb:6e:19:
                    14:fa:32:d1:06:c6:fc:80:10:7c:dd:41:a6:9e:53:
                    1a:a0:fd:a0:8e:83:3e:2a:a5:cb:94:76:f5:65:37:
                    38:e6:bd:c7:e5:b3:d1:e9:96:67:a4:ba:46:da:02:
                    3e:61:40:c0:1e:2a:b2:54:42:b4:df:31:65:a9:d4:
                    26:61:6c:0a:3d:4f:bc:15:8a:7e:6e:90:93:eb:89:
                    01:38:a9:bc:5c:2a:bd:e4:a6:70:05:1d:35:74:56:
                    47:93:99:dc:75:6e:90:88:61:44:33:d9:d3:fa:e8:
                    69:db:e7:a6:d4:57:c8:8f:a5:ab:04:df:3b:54:ad:
                    74:43:85:96:74:22:6d:4a:fa:e5:84:6c:c5:92:a9:
                    86:93:1c:ee:b3:18:15:b1:8f:e1:23:d3:1a:f9:65:
                    c2:97:7f:87:bb:12:40:8f:99:69:6c:d2:f0:a2:d1:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DB:05:97:A6:A9:20:FB:F6:56:75:AD:11:52:EC:E6:C7:CF:1D:45
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139302e302f32332d3233203d3e203137373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:9a:61:83:61:3c:a3:5f:bc:bf:7e:40:bd:c8:84:f2:e3:
         c4:c0:f9:4d:14:96:3e:75:5a:af:bf:a3:2f:49:0e:e0:32:9a:
         73:33:87:c8:bd:32:ce:73:c1:01:7e:dc:7e:a2:43:32:24:23:
         eb:1f:fa:c9:32:fa:d9:79:1e:d8:66:0c:f2:fd:58:2b:92:75:
         12:2c:e3:a5:fb:2a:23:53:ab:5e:52:a3:77:9e:95:b6:3f:6b:
         90:41:3d:d7:6a:10:a0:78:d0:e2:20:1e:f6:b0:12:b5:37:01:
         3f:3b:fa:1b:a2:c8:fa:d4:59:e6:64:5e:1b:ea:14:09:01:0a:
         7a:8a:f9:c5:d2:3e:02:88:9b:b2:6f:07:b9:e3:e1:8b:d2:57:
         81:f3:15:e2:ba:05:a7:c8:31:b0:c9:87:32:bd:64:30:51:c9:
         ef:01:f7:1c:e4:45:66:24:1f:e4:28:87:97:dd:71:d5:6e:10:
         b4:92:50:82:a2:0c:a9:74:e5:9e:c4:a4:97:dd:6a:52:05:07:
         62:1b:f6:6f:50:f2:72:1a:c5:30:27:f0:85:36:75:17:aa:84:
         b4:3a:d5:0d:4f:d7:f4:54:17:ea:dc:7b:f2:62:e4:1e:c2:fd:
         1d:b8:c9:5f:de:92:26:7f:3a:05:61:9e:f2:b3:0e:54:32:e4:
         38:ea:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:11 2026 by rpki-client