Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3138322e302f32332d3233203d3e203138313737.roa
File:                     3139322e38332e3138322e302f32332d3233203d3e203138313737.roa (raw, json)
Hash identifier:          GjpujTM0FGzQn0bLl8/jqT1ksFfdWZmupzFQHuzItkE=
Subject key identifier:   00:CB:B4:5B:D4:38:21:ED:79:03:2D:24:07:8A:CC:BE:43:19:63:AF
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       7ABA79FF5D615E185E1B3D5F81ADDBE24485077A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3138322e302f32332d3233203d3e203138313737.roa
Signing time:             Mon 11 May 2026 21:03:25 +0000
ROA not before:           Mon 11 May 2026 20:58:25 +0000
ROA not after:            Mon 10 May 2027 21:03:25 +0000
asID:                     18177
IP address blocks:        192.83.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:79:ff:5d:61:5e:18:5e:1b:3d:5f:81:ad:db:e2:44:85:07:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:58:25 2026 GMT
            Not After : May 10 21:03:25 2027 GMT
        Subject: CN=00CBB45BD43821ED79032D24078ACCBE431963AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:dc:44:9a:c0:e3:c3:a7:2b:b7:25:17:8d:
                    d2:5f:2f:02:65:f9:11:b1:d2:d3:42:2e:6b:46:64:
                    f4:b5:69:ce:08:34:48:62:5d:54:36:50:0e:5d:2f:
                    3f:71:c0:d5:ec:07:cb:f8:c8:65:e8:7e:f6:cf:9e:
                    46:ad:1a:7c:57:e1:04:0f:61:03:cd:bc:d9:f4:3e:
                    06:d7:51:cc:67:ad:63:90:c6:02:18:d5:2c:bf:9b:
                    70:fc:af:11:0f:6a:7a:97:0f:bc:58:1b:ab:c0:19:
                    1f:0d:e4:1d:50:13:4f:05:f5:88:c9:f8:21:34:b8:
                    cd:b2:52:61:1d:a7:3b:29:9b:39:fc:bd:17:c2:7c:
                    92:0c:05:88:54:b7:e4:ad:f4:77:31:46:70:38:c5:
                    66:5f:17:10:6c:a1:d6:ff:b9:92:ad:63:7d:c1:fc:
                    1d:ef:63:11:69:51:c3:4b:d4:6b:a2:e1:44:8d:68:
                    f2:e4:49:ae:8a:dc:3f:03:88:62:4a:d9:15:3e:4b:
                    1b:34:70:71:f6:bc:6a:6f:4f:2f:c2:d8:59:f1:95:
                    88:76:7d:84:a6:05:49:1a:d9:77:d0:11:e6:a7:00:
                    d0:01:37:d0:bd:5f:f5:b6:83:b4:73:51:06:65:44:
                    0f:86:0f:b0:0d:0e:d9:d1:3f:32:c0:7c:1e:a1:6b:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CB:B4:5B:D4:38:21:ED:79:03:2D:24:07:8A:CC:BE:43:19:63:AF
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3138322e302f32332d3233203d3e203138313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:e8:3c:61:48:3a:fd:15:df:32:c2:e6:63:fd:64:dc:fc:
         9c:d2:ef:7c:27:90:2e:a7:2c:d9:f2:02:8d:78:43:bb:88:c5:
         7b:de:db:13:f7:ab:61:8d:d9:f9:9f:12:bd:e4:0f:2f:71:9c:
         9f:da:5f:3a:cd:e2:cb:48:6c:91:11:fb:38:3c:ce:10:53:2c:
         4b:1f:ff:b9:b7:54:7f:14:13:1d:bc:05:1d:3f:7f:07:f6:ea:
         28:21:0f:dc:0d:21:db:4f:e9:af:24:71:02:ed:98:ee:85:a6:
         dc:d8:97:3a:39:75:17:05:c4:24:44:d5:b1:f6:61:c7:1a:e0:
         c9:66:ef:fd:de:47:ad:21:f0:35:a0:b8:13:21:54:e0:e6:71:
         08:59:a9:61:71:b6:7e:cb:c9:24:c3:a8:9b:df:38:f6:24:26:
         de:a5:c0:dc:55:fa:4e:ea:57:ca:d2:cf:22:2a:f4:3f:c1:59:
         81:e5:af:a8:c2:15:6b:60:58:2d:2e:ec:0f:4a:42:ed:a7:97:
         ac:ff:47:14:9a:89:9b:cb:60:c0:ef:5a:11:a6:9a:c2:77:b9:
         e0:fa:87:42:3f:40:50:f7:b6:e5:bc:fc:dc:c6:47:94:ad:c3:
         fa:bc:f6:a3:46:b6:39:0b:51:50:97:8c:fb:23:58:11:ae:03:
         93:b0:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:03 2026 by rpki-client