Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32312e302f32342d3234203d3e2031363539.roa
File:                     3139322e3139322e32312e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          wGScHY8PQuemdIbbsrV95u5G4Vm9YPIJDC56AQQOYGU=
Subject key identifier:   00:42:9F:67:F3:99:0B:DE:98:34:60:33:56:A0:E5:F7:D0:1C:E2:F7
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       1C170212812BBDF7479F6DA937978E060283C236
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32312e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:36 +0000
ROA not before:           Mon 11 May 2026 20:55:36 +0000
ROA not after:            Mon 10 May 2027 21:00:36 +0000
asID:                     1659
IP address blocks:        192.192.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:17:02:12:81:2b:bd:f7:47:9f:6d:a9:37:97:8e:06:02:83:c2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:36 2026 GMT
            Not After : May 10 21:00:36 2027 GMT
        Subject: CN=00429F67F3990BDE9834603356A0E5F7D01CE2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:41:09:7e:4d:b1:18:70:b4:78:24:1f:83:
                    89:48:2c:03:66:d9:73:f4:43:c1:92:c9:10:28:dc:
                    9b:b1:e0:cc:ac:8d:e6:be:46:e8:ee:d8:fb:5a:76:
                    36:83:df:89:5f:37:6e:9d:82:18:ae:40:0c:2e:00:
                    92:cd:b0:2b:ee:cd:4c:fc:2e:e0:35:67:88:fd:75:
                    12:7f:3e:05:d5:aa:6a:49:e0:2b:68:e4:28:ec:80:
                    67:ea:21:b7:9d:e6:d9:a8:8c:00:9f:5a:e7:d8:13:
                    2a:c4:e1:c8:fe:a6:61:e2:06:6a:df:3b:75:ab:4c:
                    d2:ca:8c:55:d9:fb:d7:25:e1:c5:dd:08:c4:55:60:
                    69:f6:b4:1c:cc:10:61:f2:20:33:a5:fd:ea:91:7b:
                    c7:65:50:c5:ed:f0:f7:c3:eb:f2:93:2d:46:43:65:
                    5b:2f:41:67:af:27:c3:79:aa:e0:6e:d9:96:53:9f:
                    f7:1a:7e:7a:fc:dd:b5:fb:73:5a:4f:38:ab:47:2e:
                    72:cb:8b:38:4a:6e:12:dc:1b:6d:46:00:1b:14:86:
                    e7:4a:5f:4c:e2:22:41:c0:02:3e:45:ce:4f:f1:3c:
                    21:81:82:85:5a:7b:9d:62:69:bf:6f:a6:52:de:05:
                    bb:c0:05:30:5b:c6:65:f3:01:80:6c:08:29:e9:1e:
                    94:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:9F:67:F3:99:0B:DE:98:34:60:33:56:A0:E5:F7:D0:1C:E2:F7
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32312e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:d9:0f:4d:69:91:6a:58:90:ed:d7:b4:77:64:a5:6f:cc:
         ac:7b:81:14:36:47:f1:c4:8a:c6:06:e8:f5:33:1b:c6:32:28:
         98:41:6c:57:38:ec:13:16:8d:08:6a:0b:c9:06:45:05:12:28:
         94:60:9e:da:3c:cc:52:5e:0f:3b:4c:9f:c4:7e:1d:93:4b:21:
         d1:c0:03:42:14:7b:76:a4:c6:c3:f4:c4:23:a4:96:17:d9:c5:
         89:1a:6e:41:bf:42:61:83:18:43:ff:4f:e3:03:19:d5:eb:ac:
         be:2a:5c:3f:61:e6:ba:ff:95:a4:a7:82:13:f2:02:dd:fd:fb:
         c1:6e:ae:c1:3d:6d:31:25:1c:5b:3e:97:c5:a6:6f:1e:51:2b:
         da:93:82:bc:10:08:b7:1c:af:bd:0b:0b:1d:ec:de:ba:90:05:
         0c:33:20:0b:37:d4:a0:67:9d:9e:7d:35:30:fc:71:0c:ca:8b:
         99:cc:43:2b:cf:de:b7:b2:d2:5e:5f:ed:ea:9a:fe:d9:1e:26:
         36:4a:aa:c1:cb:7f:d1:06:b4:92:69:0c:20:c0:ba:5b:0a:b9:
         8b:11:c3:0d:0c:33:f9:16:ad:68:df:79:1b:a8:4f:45:b9:00:
         3a:46:14:ae:f1:f1:2f:a6:09:81:93:5c:a7:63:e3:50:10:80:
         27:85:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:50 2026 by rpki-client