Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139332e302f32342d3234203d3e203137373136.roa
File:                     3139322e38332e3139332e302f32342d3234203d3e203137373136.roa (raw, json)
Hash identifier:          PbZeGsfIqjyd2xb8xQ1m+i5eCwONZ/G8SFwrHkTKhoQ=
Subject key identifier:   B4:D4:86:CF:26:40:F4:27:0A:B0:AB:6B:FA:0C:CE:93:B4:20:3C:2D
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       7EF6710BBE5BB5559EF1CB89246453743E7C3B89
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139332e302f32342d3234203d3e203137373136.roa
Signing time:             Tue 04 Aug 2026 02:44:09 +0000
ROA not before:           Tue 04 Aug 2026 02:39:09 +0000
ROA not after:            Tue 03 Aug 2027 02:44:09 +0000
asID:                     17716
IP address blocks:        192.83.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
                          rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 22:38:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f6:71:0b:be:5b:b5:55:9e:f1:cb:89:24:64:53:74:3e:7c:3b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: Aug  4 02:39:09 2026 GMT
            Not After : Aug  3 02:44:09 2027 GMT
        Subject: CN=B4D486CF2640F4270AB0AB6BFA0CCE93B4203C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:86:31:93:a1:85:41:9d:39:99:6a:77:ac:
                    fc:62:d8:ff:d6:9b:90:15:ca:cc:02:02:14:ee:65:
                    3d:87:03:39:17:a3:2f:bb:ff:bb:b3:f6:c6:12:2f:
                    e1:1e:72:84:5e:e8:1c:b0:9b:ff:eb:c9:b1:4c:53:
                    fc:8f:62:ba:d5:18:dc:6a:6b:1a:53:d5:74:2d:33:
                    01:06:7a:5b:b3:99:96:63:aa:6b:2f:86:08:11:ac:
                    fc:ac:2e:10:72:4a:37:8d:4f:2f:a8:7a:d9:79:bd:
                    fb:ed:6f:c2:f3:c1:ee:b9:a3:c3:33:fb:48:4b:08:
                    13:49:29:66:e8:b2:f3:6c:cf:54:67:79:34:6f:c1:
                    1b:c2:6e:4e:fa:fc:de:bd:43:af:94:24:d4:da:cf:
                    18:7c:de:aa:11:c6:c3:e6:1e:c3:ad:ac:14:2c:8f:
                    b4:e9:33:df:37:33:aa:23:b4:25:89:8d:ae:33:a8:
                    4c:68:9e:67:0a:d6:29:2f:8d:e9:52:e0:93:68:3d:
                    d4:0c:79:2e:27:13:9a:e0:21:2c:0c:d3:f9:8d:3a:
                    3c:19:23:c2:d5:a9:63:b0:32:f6:34:76:68:87:b5:
                    e3:61:5d:73:5c:26:f7:d5:f2:25:1a:a4:3c:08:28:
                    3b:a6:d8:5e:4c:ea:2c:5e:74:87:d1:a8:fe:5c:4f:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:86:CF:26:40:F4:27:0A:B0:AB:6B:FA:0C:CE:93:B4:20:3C:2D
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139332e302f32342d3234203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:79:92:f5:d6:ba:13:9f:aa:4f:bd:f6:7e:bd:1e:0d:c5:4d:
         0d:7d:68:eb:da:70:6f:21:73:c3:ff:b1:d6:78:0e:8b:ac:10:
         4d:0f:27:8e:7d:09:da:a2:50:a0:27:eb:1d:60:2b:43:02:10:
         e6:9d:23:68:25:a8:4b:d5:aa:69:f6:20:81:06:22:a2:1b:97:
         29:1f:5e:62:96:3f:91:45:78:fd:24:6e:b8:ac:b6:1d:e0:81:
         d0:e0:a9:c1:3d:3f:7f:08:f0:24:99:77:14:a3:91:1f:2d:b5:
         d2:a1:ee:2c:81:7e:65:e0:61:9a:69:44:64:58:70:f9:4d:f4:
         25:55:9e:55:ae:71:ac:e6:8a:b6:ae:15:31:22:0b:32:29:10:
         26:8a:70:2e:28:9a:54:ac:0f:4f:3c:79:8e:0c:32:24:ac:4f:
         b0:21:15:9d:05:f4:7d:68:75:92:50:23:d2:0e:b5:e8:cf:60:
         03:2c:a0:e0:24:54:32:2d:5a:d1:2e:20:7d:f5:8c:4f:83:79:
         d6:f2:4b:ad:12:68:3b:58:96:56:f8:7b:20:ce:35:6f:4b:dc:
         98:cc:e8:6f:ab:d9:55:f1:43:ff:b1:9e:66:12:72:93:6f:54:
         d8:11:4b:f5:f2:0b:83:e2:b1:7e:0a:ed:07:d0:22:19:bd:ee:
         09:92:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 12:34:54 2026 by rpki-client