Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32362e302f32342d3234203d3e2031363539.roa
File:                     3139322e3139322e32362e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          e919qF2nvOhWG/Rtp/iaEsu+0jgIYWG2NYoQUWmk/QI=
Subject key identifier:   30:1A:B8:21:44:E8:84:66:8A:36:76:0B:01:E3:05:99:07:CE:9D:A3
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       072104BFB7DEF7636D768D8B627183DBC701B7C1
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32362e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:39 +0000
ROA not before:           Mon 11 May 2026 20:55:39 +0000
ROA not after:            Mon 10 May 2027 21:00:39 +0000
asID:                     1659
IP address blocks:        192.192.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:21:04:bf:b7:de:f7:63:6d:76:8d:8b:62:71:83:db:c7:01:b7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:39 2026 GMT
            Not After : May 10 21:00:39 2027 GMT
        Subject: CN=301AB82144E884668A36760B01E3059907CE9DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:06:e7:9e:96:1a:aa:45:12:97:e3:47:60:
                    7a:8a:e0:1f:a8:71:3f:13:23:27:23:4d:f9:1f:3b:
                    fc:6b:ce:80:dc:35:02:dc:97:26:ee:4e:e3:c3:58:
                    a1:69:77:1e:ce:41:b9:7b:94:17:c5:eb:6a:39:1d:
                    56:b2:e3:4d:d3:83:d8:56:dd:17:12:da:30:8e:86:
                    97:c2:d2:5f:d0:64:b6:1f:a8:de:7a:99:c4:c2:6d:
                    26:98:6a:32:7d:85:80:18:ed:4f:63:47:85:e1:82:
                    cf:9f:22:c1:1e:40:1e:88:d3:37:bb:2f:ee:70:0d:
                    b7:c2:96:47:6b:96:99:a9:ec:c2:9d:05:1e:bd:86:
                    bd:7e:91:54:73:39:e3:cf:b9:bb:4c:8a:98:27:ca:
                    8f:dc:e5:77:2f:5a:90:d6:4a:f5:3b:be:2a:d1:6c:
                    76:b1:8a:dc:88:17:e5:38:1b:06:15:4a:e8:85:14:
                    53:29:9c:12:e6:62:6a:e1:e9:15:c0:d0:f0:6d:b8:
                    d7:ef:e5:29:f3:0b:34:b6:86:ac:f9:53:79:84:f5:
                    e0:cd:90:47:43:23:6d:d6:ac:14:d4:25:e5:f0:be:
                    68:e0:dc:e2:f2:bb:73:e2:26:41:e1:71:a3:27:01:
                    06:63:78:00:60:e5:22:c2:1a:30:eb:24:e7:55:0e:
                    03:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1A:B8:21:44:E8:84:66:8A:36:76:0B:01:E3:05:99:07:CE:9D:A3
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32362e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:91:fa:b1:79:d9:99:02:e2:24:98:fc:57:b0:da:19:7b:66:
         02:80:55:7a:af:0b:81:9c:fe:4c:47:71:46:ef:74:d1:cc:11:
         96:62:89:e3:bf:72:a7:45:2c:a0:9b:42:e1:6a:64:09:7b:82:
         17:3a:3f:8f:02:9e:41:78:ea:a0:1e:20:3a:b1:79:aa:f7:de:
         32:f8:9f:ea:9d:dc:28:5c:36:0c:5b:60:79:16:16:ef:2b:58:
         70:d1:64:38:73:83:fb:99:d1:2c:42:87:42:61:2f:1b:6d:be:
         c0:44:1d:ed:c7:72:16:d2:5e:11:a4:a7:97:45:5e:f1:86:ff:
         39:93:b0:61:c1:8b:bb:21:24:80:b0:f2:88:61:39:79:1c:bb:
         dd:cc:40:4d:69:12:77:e0:9b:41:fa:69:15:a2:0f:fd:fe:dd:
         dc:0b:27:96:76:65:b4:db:25:2f:85:90:4e:4a:bf:e7:15:80:
         e6:76:c1:68:dc:77:02:5c:fb:26:d2:27:76:97:23:52:64:ba:
         f6:29:1d:04:eb:29:85:3b:0f:21:7d:1f:4f:06:33:b6:09:0f:
         1e:ed:67:7f:6c:96:24:42:7b:bd:19:97:c3:48:53:a3:ed:d6:
         4b:47:ce:32:9c:0c:ae:f7:bc:18:95:5f:fa:1a:bb:fa:68:1f:
         e9:92:82:07
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUByEEv7fe92Ntdo2LYnGD28cBt8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MzlaFw0yNzA1MTAyMTAwMzlaMDMxMTAvBgNV
BAMTKDMwMUFCODIxNDRFODg0NjY4QTM2NzYwQjAxRTMwNTk5MDdDRTlEQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlwbnnpYaqkUSl+NHYHqK4B+o
cT8TIycjTfkfO/xrzoDcNQLclybuTuPDWKFpdx7OQbl7lBfF62o5HVay403Tg9hW
3RcS2jCOhpfC0l/QZLYfqN56mcTCbSaYajJ9hYAY7U9jR4Xhgs+fIsEeQB6I0ze7
L+5wDbfClkdrlpmp7MKdBR69hr1+kVRzOePPubtMipgnyo/c5XcvWpDWSvU7virR
bHaxityIF+U4GwYVSuiFFFMpnBLmYmrh6RXA0PBtuNfv5SnzCzS2hqz5U3mE9eDN
kEdDI23WrBTUJeXwvmjg3OLyu3PiJkHhcaMnAQZjeABg5SLCGjDrJOdVDgO9AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUMBq4IUTohGaKNnYLAeMFmQfOnaMwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADAwBowDQYJKoZIhvcNAQELBQADggEBAKWR+rF52ZkC4iSY/Few2hl7ZgKAVXqv
C4Gc/kxHcUbvdNHMEZZiieO/cqdFLKCbQuFqZAl7ghc6P48CnkF46qAeIDqxear3
3jL4n+qd3ChcNgxbYHkWFu8rWHDRZDhzg/uZ0SxCh0JhLxttvsBEHe3HchbSXhGk
p5dFXvGG/zmTsGHBi7shJICw8ohhOXkcu93MQE1pEnfgm0H6aRWiD/3+3dwLJ5Z2
ZbTbJS+FkE5Kv+cVgOZ2wWjcdwJc+ybSJ3aXI1JkuvYpHQTrKYU7DyF9H08GM7YJ
Dx7tZ39sliRCe70Zl8NIU6Pt1ktHzjKcDK73vBiVX/oau/poH+mSggc=
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:14 2026 by rpki-client