Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39322e302f32332d3233203d3e203137373136.roa
File:                     3139322e3139322e39322e302f32332d3233203d3e203137373136.roa (raw, json)
Hash identifier:          WCfNBCG6+EgY9a/3t06zBJ7SmRvtI9E7O5dcpGsNy1I=
Subject key identifier:   E1:36:46:31:08:ED:90:31:D1:7A:D9:A1:B6:0E:C8:8F:09:EB:0B:0F
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       40E1AC4C6862146B8FD2B946C2A78CECADC0B91F
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39322e302f32332d3233203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:04:46 +0000
ROA not before:           Mon 11 May 2026 20:59:46 +0000
ROA not after:            Mon 10 May 2027 21:04:46 +0000
asID:                     17716
IP address blocks:        192.192.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e1:ac:4c:68:62:14:6b:8f:d2:b9:46:c2:a7:8c:ec:ad:c0:b9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:59:46 2026 GMT
            Not After : May 10 21:04:46 2027 GMT
        Subject: CN=E136463108ED9031D17AD9A1B60EC88F09EB0B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:0f:cf:88:e0:91:8c:61:d6:57:4b:fb:27:
                    61:e0:68:7d:67:68:51:5f:1f:10:48:63:0a:ad:46:
                    a2:7e:e1:2e:c9:0b:8c:56:da:f6:06:0d:67:82:57:
                    aa:9d:fe:0f:b1:a2:de:e7:4f:12:7a:3b:7e:98:00:
                    b6:77:bf:30:28:9d:56:d9:48:fd:21:fb:5f:65:4c:
                    b4:b5:3f:85:c8:0f:9a:26:e2:69:25:f0:e2:83:18:
                    4a:ec:5a:ca:1c:e6:08:e7:c1:7f:eb:a4:6e:e2:ba:
                    0c:f8:5d:00:34:c0:ce:2b:f9:09:81:88:7a:de:c4:
                    3c:c6:c4:b7:39:38:a4:ea:34:0c:ea:c0:22:18:55:
                    3c:06:4f:e8:aa:a8:93:04:a7:ef:14:47:cf:81:a5:
                    f2:c2:4f:6f:bb:f3:44:17:a8:b1:e3:b3:98:e8:b6:
                    93:8c:50:c3:d1:da:8c:1d:f5:15:e7:50:93:fa:0b:
                    55:a4:15:64:ae:d1:19:fa:95:47:89:bf:41:3d:c5:
                    75:7b:fb:42:81:e7:0b:b9:5c:e1:e1:33:f2:42:d3:
                    fc:3e:2f:98:dc:f1:bc:ba:0a:cd:15:05:bf:64:b1:
                    cb:89:ae:cb:56:b0:46:17:7d:61:02:c2:65:cc:2c:
                    06:b1:4c:27:93:49:6d:0e:07:2d:28:cb:4b:7f:25:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:36:46:31:08:ED:90:31:D1:7A:D9:A1:B6:0E:C8:8F:09:EB:0B:0F
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e39322e302f32332d3233203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:51:30:49:35:5b:f7:1c:8f:fd:00:78:da:b5:dd:16:f0:
         4f:bb:b2:d5:d6:f1:e5:b6:1c:24:59:1d:55:68:14:64:ed:ec:
         65:d4:96:74:7c:ba:e6:ec:89:d5:46:c9:59:ce:ce:88:9f:11:
         ea:80:96:3d:86:ec:ed:c7:ee:e3:53:59:02:5d:71:b9:9c:04:
         ca:6b:58:d5:10:40:b4:95:12:44:3f:54:b9:fe:2f:39:42:f9:
         b7:9d:39:1e:34:5c:21:e7:c9:6a:ba:79:ff:c1:4c:0e:68:6a:
         6e:99:1b:b0:58:48:52:fd:7b:f3:c2:a9:76:1e:98:38:d6:44:
         42:a9:63:be:a5:57:d6:7e:8e:dd:9c:3b:30:b8:86:ec:76:47:
         10:20:0f:df:e6:da:e3:14:83:02:5d:39:27:5d:33:29:c7:30:
         fd:af:32:7a:f7:9a:8b:3f:bc:2e:1c:12:54:83:b6:38:ec:bc:
         d5:4e:0a:d8:f0:13:be:f1:fe:8d:89:e1:7c:a3:d8:f9:a0:41:
         ce:85:b3:1b:55:ca:5c:b4:61:4c:cd:b8:43:62:d0:e3:49:08:
         82:c5:bf:5f:e9:31:ce:76:20:08:a7:48:c0:4f:ae:cc:b0:a6:
         88:1f:e4:a2:7f:34:84:c2:01:ac:ef:ef:c5:ef:51:24:c7:9c:
         a8:09:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:51 2026 by rpki-client