Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39302e302f32332d3233203d3e203137373136.roa
File:                     3139322e3139322e39302e302f32332d3233203d3e203137373136.roa (raw, json)
Hash identifier:          AxSaxdxULnYP63kBKbpqN1pBIrKyCo8SMm6HCd5H1dY=
Subject key identifier:   EA:58:BE:FA:8D:60:B9:79:41:85:95:37:95:50:DE:D3:0E:83:83:81
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       471D4377ACDD8313B5DBA4DE4A4D1F113465AE08
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39302e302f32332d3233203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:04:46 +0000
ROA not before:           Mon 11 May 2026 20:59:46 +0000
ROA not after:            Mon 10 May 2027 21:04:46 +0000
asID:                     17716
IP address blocks:        192.192.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:43:77:ac:dd:83:13:b5:db:a4:de:4a:4d:1f:11:34:65:ae:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:59:46 2026 GMT
            Not After : May 10 21:04:46 2027 GMT
        Subject: CN=EA58BEFA8D60B979418595379550DED30E838381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:02:79:35:32:a0:08:14:be:9e:9e:06:a7:
                    95:31:12:31:47:03:55:77:a8:d5:68:c0:a9:91:a6:
                    4a:c2:19:14:ff:5f:c6:3a:57:37:1b:4f:68:2a:6e:
                    a8:87:63:e9:78:dc:1e:9b:c6:dd:97:97:c3:00:4e:
                    3c:4c:62:9b:e4:a6:bf:29:0e:90:23:52:4f:c4:9c:
                    fb:ca:37:87:cd:76:6a:ff:2f:70:53:41:58:97:b2:
                    ee:1a:4c:64:32:99:3b:73:94:6a:39:3c:46:da:e9:
                    c5:c4:0b:4b:94:58:e2:7c:b8:ef:e9:9c:20:ad:4a:
                    1e:21:d2:bc:a0:78:66:f4:40:ad:69:d7:94:91:5f:
                    e9:4a:01:44:1a:24:29:90:8d:2c:be:b2:8d:ac:1d:
                    2a:f6:8a:8f:c7:44:da:44:d0:66:a9:ac:ec:cc:30:
                    5a:2f:5d:4d:ab:b6:69:34:b2:cf:8a:be:8c:23:28:
                    27:4c:68:c4:36:12:e2:31:c8:cd:d4:df:98:f9:60:
                    5c:86:a9:14:29:4a:e5:ec:b2:9f:61:34:a5:76:ad:
                    fb:c4:a5:d5:45:10:69:45:1e:c6:d3:53:cc:84:0d:
                    4c:80:14:68:2b:68:9c:e9:38:ca:1a:e8:3e:ad:2e:
                    6a:bb:96:70:cc:4a:89:18:68:a4:83:ba:04:88:7f:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:BE:FA:8D:60:B9:79:41:85:95:37:95:50:DE:D3:0E:83:83:81
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39302e302f32332d3233203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:28:78:ee:47:2e:8d:f1:68:45:e3:b4:bb:03:8e:19:cb:
         89:a4:b9:c5:03:0d:e4:b7:e2:dc:f2:d0:1f:ae:86:ca:26:04:
         24:e5:de:d8:34:87:b1:47:ac:03:d8:c1:c7:ba:c1:fb:13:19:
         48:43:23:ba:cf:b5:35:e4:78:65:4e:47:e8:c9:56:16:47:06:
         94:1e:bd:63:e5:dc:04:60:f9:a1:99:26:56:a4:28:fa:30:23:
         db:09:9c:03:a8:da:77:e2:79:25:ae:70:0a:be:e5:29:8a:d5:
         8f:17:e2:6b:b8:94:2c:57:a3:5e:36:3c:1e:ca:be:76:67:fb:
         9f:60:74:f5:19:ba:bd:9d:f8:db:57:8d:f9:dd:00:e7:70:78:
         fd:5c:79:33:24:32:73:af:2a:8a:02:c5:e7:5d:a9:f8:23:ce:
         06:a5:d2:1e:e7:81:17:0a:f2:0d:a2:ae:4e:df:6f:0b:0a:1d:
         ad:ee:18:53:c7:c3:2b:48:37:de:da:20:2b:96:58:a8:16:4a:
         22:f9:46:88:2f:a7:6d:79:8b:62:a8:a9:a8:c9:a8:15:bf:ac:
         f4:35:db:91:d1:22:af:09:c0:c1:2c:ed:14:cf:6a:a0:56:4d:
         1a:57:a4:8a:77:a8:e9:4b:ad:b3:51:b8:eb:79:d3:e7:06:9c:
         62:6b:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:44 2026 by rpki-client