Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231322e302f32342d3234203d3e203338383532.roa
File:                     3130332e3136392e3231322e302f32342d3234203d3e203338383532.roa (raw, json)
Hash identifier:          6F7GRz2ivVc7gTC1LjGrMJwd2u8TzSzX1M8kl8Ks4pg=
Subject key identifier:   EB:11:87:D1:54:F5:D4:83:EA:EF:8B:BC:DD:DF:A3:72:96:64:EE:D7
Certificate issuer:       /CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
Certificate serial:       1C9E715C40AA7F9AB6F5AAA98C3E6F4FD4531776
Authority key identifier: E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231322e302f32342d3234203d3e203338383532.roa
Signing time:             Mon 11 May 2026 17:10:53 +0000
ROA not before:           Mon 11 May 2026 17:05:53 +0000
ROA not after:            Mon 10 May 2027 17:10:53 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl
                          rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9e:71:5c:40:aa:7f:9a:b6:f5:aa:a9:8c:3e:6f:4f:d4:53:17:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
        Validity
            Not Before: May 11 17:05:53 2026 GMT
            Not After : May 10 17:10:53 2027 GMT
        Subject: CN=EB1187D154F5D483EAEF8BBCDDDFA3729664EED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:08:8b:9d:b7:12:bf:bb:e1:a2:64:3a:09:
                    75:c8:34:5b:ef:a5:ff:78:51:20:db:80:47:d9:3c:
                    b3:39:87:72:35:6c:f9:a2:32:c0:c4:70:56:f7:5c:
                    73:40:9d:50:15:d6:9d:ab:d7:a0:ec:19:5b:82:67:
                    f5:31:f6:ae:2c:63:a7:5a:25:f3:b1:69:a5:eb:13:
                    24:be:4b:41:bc:4f:35:1d:0d:ce:02:d9:a9:90:0c:
                    ff:62:10:27:94:13:46:46:07:39:bc:03:c3:0b:c8:
                    5e:66:2e:26:6d:21:65:d0:29:27:76:cd:92:3e:0d:
                    1d:f1:78:05:ac:84:8b:e2:47:83:9a:1c:5d:2c:b0:
                    7c:cc:97:a2:f0:65:a1:9b:8b:c6:92:2a:a8:87:26:
                    d2:08:2c:09:2e:4a:b0:31:89:bb:ea:22:63:94:29:
                    6a:1e:0b:5c:a2:b0:65:db:72:4f:30:ed:f1:df:ed:
                    5b:1d:c5:0a:65:e3:2f:ee:a1:ba:4e:cf:f2:41:00:
                    44:de:e3:b8:b5:f5:da:35:94:38:cf:31:4c:9f:4e:
                    7a:52:19:82:27:4f:ff:f5:4e:ba:3b:da:51:7c:f8:
                    2c:1d:df:1f:0c:c8:8b:5d:63:d9:cc:c6:a6:1c:67:
                    01:56:10:e5:ad:1b:8b:12:b2:31:9f:b4:c2:e9:fa:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:11:87:D1:54:F5:D4:83:EA:EF:8B:BC:DD:DF:A3:72:96:64:EE:D7
            X509v3 Authority Key Identifier:
                keyid:E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231322e302f32342d3234203d3e203338383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:76:3a:9d:12:c4:b2:da:b2:f3:98:b4:06:c6:a9:41:2b:d9:
         4c:9f:e4:a1:3f:f7:b6:5c:92:34:6e:0f:6d:26:3c:cb:26:d2:
         f4:45:d4:67:b2:0c:b0:40:9b:87:78:98:7c:65:cd:ba:d4:00:
         1d:09:a3:47:c8:79:96:80:50:22:58:33:14:fd:f0:ce:50:6c:
         2f:32:46:20:44:b7:8e:5f:7d:bb:ea:c1:60:79:29:eb:c4:49:
         6a:cb:90:cf:f9:09:7e:89:5c:98:12:c9:78:65:27:aa:11:6f:
         40:38:e2:b2:36:33:fa:ef:ea:41:36:64:3a:c9:67:9e:35:29:
         2b:5d:c5:ec:cf:81:9b:83:21:98:86:68:dd:62:07:51:90:d2:
         21:33:34:b8:4b:fe:d3:78:ef:db:95:88:6c:e0:d2:f8:54:92:
         42:ec:a9:bf:4d:3e:93:85:d3:09:99:49:c9:1b:7f:e4:7d:4a:
         30:39:6b:06:a5:83:8d:1c:98:bb:2b:df:06:53:58:71:95:e4:
         bd:09:64:73:29:65:e9:9c:49:03:17:81:09:8a:2b:dc:de:23:
         00:35:ee:13:61:72:f8:ec:7c:f1:3d:ad:ed:33:c5:61:e1:6b:
         05:96:90:9a:40:a1:7f:20:c2:c9:18:f6:1f:6a:bc:65:06:da:
         22:f8:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:30 2026 by rpki-client