...
Each subnet is /28 (16 addresses) in size (the smallest size allowed by AWS) and utilizes a CIDR range from the secondary VPC CIDR block.
One utility subnet exists in each of the AZs where other (standard) subnets in the VPC reside.
Each of the utility subnets is attached to the TGW.
...