Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e35392e302f32342d3234203d3e2031363539.roa
File:                     3139322e3139322e35392e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          X/eEu1AZBACNyNpCyJQd1vCS72q3gALe97gckgDd2aA=
Subject key identifier:   07:B5:90:B6:98:BD:CD:57:1E:83:C9:9C:ED:82:9D:65:58:9E:59:DE
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       33CA571E6857002E910E04E2AB0A6AA404E6A7C1
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e35392e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:40 +0000
ROA not before:           Mon 11 May 2026 20:55:40 +0000
ROA not after:            Mon 10 May 2027 21:00:40 +0000
asID:                     1659
IP address blocks:        192.192.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:57:1e:68:57:00:2e:91:0e:04:e2:ab:0a:6a:a4:04:e6:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:40 2026 GMT
            Not After : May 10 21:00:40 2027 GMT
        Subject: CN=07B590B698BDCD571E83C99CED829D65589E59DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:48:d9:5e:ba:d6:96:7e:84:fc:e4:46:79:
                    7a:46:f3:a2:6a:f9:8c:9d:e7:d3:ea:ac:ab:d3:ad:
                    3f:7b:e8:fa:c9:da:f2:69:13:d5:74:25:ac:2e:84:
                    1d:50:2c:a1:c9:bd:45:5d:e9:de:96:74:43:10:8d:
                    62:4d:2a:cd:70:96:0c:fe:b8:a2:9a:7f:9d:cd:58:
                    94:57:f9:d2:1f:05:b3:95:58:a7:40:71:b8:6c:0b:
                    5e:1d:9e:c9:55:40:95:44:b7:3e:1b:10:c1:da:d5:
                    ec:2a:d8:c5:4a:ac:a7:2b:74:89:eb:c8:88:1c:5b:
                    9f:d4:a6:e2:e5:9e:f7:e9:3d:e4:ba:c9:f6:87:9f:
                    57:45:eb:87:ad:35:36:b9:38:79:e2:2c:75:66:a2:
                    15:ca:50:91:9a:53:f4:ac:2e:91:68:63:2b:9a:47:
                    ef:33:78:a5:d6:1f:f8:86:50:c7:3d:2a:0a:a6:42:
                    46:46:fc:3c:88:d5:d4:b8:44:e0:7c:62:69:2c:3f:
                    2b:c0:93:68:0b:6b:51:94:e0:24:48:b0:24:a8:47:
                    47:6a:a6:79:fe:a1:4c:5c:0e:35:74:75:a5:43:8f:
                    01:34:4f:17:0e:18:59:ef:a6:dc:74:42:f5:bb:69:
                    d8:a2:6a:df:1c:db:7f:b7:59:f7:c2:02:c3:27:b3:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:90:B6:98:BD:CD:57:1E:83:C9:9C:ED:82:9D:65:58:9E:59:DE
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e35392e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:99:3a:1c:ad:32:5b:b4:72:85:ef:1a:f0:d4:68:c7:1b:22:
         da:34:d4:c3:14:63:1a:b6:0f:57:8e:a1:0a:c6:6c:8a:da:fc:
         eb:2f:d6:3a:09:a7:ff:25:b5:e2:d8:5b:f4:ff:82:3d:94:d4:
         8e:e1:ea:8b:e2:5f:0e:a9:06:19:1e:54:bd:e7:bc:32:55:32:
         b9:9a:a4:58:8e:73:dc:8a:94:7b:a6:c7:dc:ad:49:34:d5:e2:
         96:7f:a3:80:d7:68:72:b7:6f:6f:6a:e1:83:64:5d:4f:dd:2c:
         c0:c4:82:83:35:5b:2a:f4:8f:16:3e:ac:a3:51:21:d5:39:9a:
         6b:8e:09:1b:a5:c5:e8:52:79:73:9a:4a:1b:99:fb:99:a8:a9:
         ea:e7:d9:da:f7:ac:71:1d:8a:ec:9b:9c:7f:c9:54:e1:86:6c:
         fc:7f:95:a8:9c:49:c2:0d:26:96:2c:97:86:03:b4:cb:35:31:
         c7:aa:92:d8:8c:ea:76:95:ae:d8:aa:3d:95:06:4e:2e:63:04:
         03:eb:58:47:1f:11:56:7e:b0:ac:ed:9c:ed:7f:f4:7c:06:b0:
         c4:2e:42:ab:3a:8b:eb:8d:31:22:50:ee:c7:28:ff:28:e3:4c:
         e3:27:45:ad:0f:21:d6:ac:d1:36:95:83:75:89:71:6c:b6:2f:
         b0:91:fb:19
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUM8pXHmhXAC6RDgTiqwpqpATmp8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1NDBaFw0yNzA1MTAyMTAwNDBaMDMxMTAvBgNV
BAMTKDA3QjU5MEI2OThCRENENTcxRTgzQzk5Q0VEODI5RDY1NTg5RTU5REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCEjZXrrWln6E/ORGeXpG86Jq
+Yyd59PqrKvTrT976PrJ2vJpE9V0JawuhB1QLKHJvUVd6d6WdEMQjWJNKs1wlgz+
uKKaf53NWJRX+dIfBbOVWKdAcbhsC14dnslVQJVEtz4bEMHa1ewq2MVKrKcrdInr
yIgcW5/UpuLlnvfpPeS6yfaHn1dF64etNTa5OHniLHVmohXKUJGaU/SsLpFoYyua
R+8zeKXWH/iGUMc9KgqmQkZG/DyI1dS4ROB8YmksPyvAk2gLa1GU4CRIsCSoR0dq
pnn+oUxcDjV0daVDjwE0TxcOGFnvptx0QvW7adiiat8c23+3WffCAsMns6DVAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUB7WQtpi9zVceg8mc7YKdZVieWd4wHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADAwDswDQYJKoZIhvcNAQELBQADggEBAAaZOhytMlu0coXvGvDUaMcbIto01MMU
Yxq2D1eOoQrGbIra/Osv1joJp/8lteLYW/T/gj2U1I7h6oviXw6pBhkeVL3nvDJV
MrmapFiOc9yKlHumx9ytSTTV4pZ/o4DXaHK3b29q4YNkXU/dLMDEgoM1Wyr0jxY+
rKNRIdU5mmuOCRulxehSeXOaShuZ+5moqern2dr3rHEdiuybnH/JVOGGbPx/laic
ScINJpYsl4YDtMs1MceqktiM6naVrtiqPZUGTi5jBAPrWEcfEVZ+sKztnO1/9HwG
sMQuQqs6i+uNMSJQ7sco/yjjTOMnRa0PIdas0TaVg3WJcWy2L7CR+xk=
-----END CERTIFICATE-----
Generated at Wed May 13 05:47:18 2026 by rpki-client