Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139342e302f32332d3233203d3e203137373133.roa
File:                     3139322e38332e3139342e302f32332d3233203d3e203137373133.roa (raw, json)
Hash identifier:          oQVEQ9FWyo/2z3oS+DNg9aGVqj9JwbqP8LofN2P6kQo=
Subject key identifier:   B3:76:9C:F2:DD:DA:67:79:9E:29:D0:5C:E4:E6:E1:B2:2F:17:67:F9
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       5DDF04FB2D5B333FCC5E1F2E4E58E20208847B19
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139342e302f32332d3233203d3e203137373133.roa
Signing time:             Mon 11 May 2026 21:02:53 +0000
ROA not before:           Mon 11 May 2026 20:57:53 +0000
ROA not after:            Mon 10 May 2027 21:02:53 +0000
asID:                     17713
IP address blocks:        192.83.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:df:04:fb:2d:5b:33:3f:cc:5e:1f:2e:4e:58:e2:02:08:84:7b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:57:53 2026 GMT
            Not After : May 10 21:02:53 2027 GMT
        Subject: CN=B3769CF2DDDA67799E29D05CE4E6E1B22F1767F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:03:71:26:13:c2:b7:3c:c4:6b:08:a2:b6:
                    19:3e:19:d6:fa:41:e4:2f:14:59:77:b3:be:43:84:
                    8d:f5:eb:c0:fa:53:17:11:15:3e:3f:88:b2:ea:42:
                    75:bf:5a:58:9f:e5:17:91:07:85:7e:81:8c:5d:09:
                    40:d5:01:f3:b7:67:12:34:66:2f:5f:0d:ae:53:56:
                    a7:3d:d2:b8:8f:7c:7b:50:53:c6:d7:18:07:30:b1:
                    d4:94:3c:0f:5c:a2:08:ec:7e:12:5b:fa:fa:a4:66:
                    82:bb:27:bb:4d:3d:d2:c5:97:60:e2:93:18:22:d1:
                    f0:20:5e:22:78:81:2b:b5:89:e2:53:4b:f1:a6:6c:
                    4c:81:41:ba:5a:52:b7:a5:02:2b:e8:69:06:ef:e1:
                    98:2e:b6:3a:3f:1f:89:f7:62:48:81:28:22:7c:4e:
                    e4:13:d9:7d:22:f8:90:c7:26:78:bc:b5:b8:77:db:
                    c0:d6:d2:2c:ff:11:5f:d3:99:cf:f4:fa:07:d8:2b:
                    2f:ff:38:a2:f0:3d:7f:b7:ce:72:f9:b8:fe:2f:4a:
                    57:50:0c:c0:cb:f3:17:cc:72:b8:34:ba:20:0d:b7:
                    e3:3b:d1:74:d1:c4:c6:65:13:2f:ca:a4:22:5f:68:
                    2d:bb:cf:37:64:42:a3:16:8f:4a:34:57:40:6d:84:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:9C:F2:DD:DA:67:79:9E:29:D0:5C:E4:E6:E1:B2:2F:17:67:F9
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139342e302f32332d3233203d3e203137373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:3c:ce:80:f1:f0:c3:12:96:b0:f7:69:79:a7:98:67:d1:
         6f:30:b9:fe:40:f0:3b:a4:65:84:98:e2:f5:b4:29:94:a0:18:
         eb:2e:ca:bd:84:4b:94:14:eb:23:f7:b4:2b:d7:14:2d:2f:61:
         06:e7:bd:73:2d:a0:d9:b1:5c:61:d4:75:9a:23:6a:72:b9:84:
         22:70:54:92:e6:20:58:0e:e0:0f:24:d0:d8:47:ec:c3:81:fb:
         1a:57:41:50:b0:19:6f:23:f2:af:6b:c8:cd:0d:45:4d:1a:90:
         a1:fd:5f:29:4a:60:37:f3:32:7d:4c:a3:7c:70:a4:6c:e9:02:
         dd:be:0e:89:2b:87:de:87:66:bd:ac:8f:2e:b3:35:fd:c9:d9:
         b8:bf:fc:9c:19:d6:d9:c8:3c:e3:47:d4:57:eb:e1:1c:54:59:
         b1:49:4b:54:f5:c5:97:2e:42:90:f7:2b:b2:f6:44:5a:a1:44:
         51:be:c6:ba:5a:c6:83:ca:a8:e5:7f:fa:cb:3f:b0:27:76:01:
         87:87:c4:0d:ca:b9:42:04:6d:35:c2:64:82:8f:74:34:0d:8b:
         4b:ba:5b:59:5f:9a:54:a7:19:c3:b1:71:27:68:1d:2f:c6:bc:
         e3:80:f3:54:a7:1d:01:bd:ee:c0:1d:a8:04:32:31:92:57:b3:
         de:01:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:42 2026 by rpki-client