Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3232203d3e20313331363537.roa
File:                     3130332e3132322e3138382e302f32322d3232203d3e20313331363537.roa (raw, json)
Hash identifier:          SycJPCIbcoTG7QdWpnH35vBv0K83s1XGZO3umgeZOQY=
Subject key identifier:   CD:D0:EB:55:D5:B6:0D:4C:43:39:EA:D0:AB:22:95:EE:BF:E1:E1:09
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       7A7F45803903E9E9AD4482FD98FFC2F8B9935443
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3232203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:32:26 +0000
ROA not before:           Mon 11 May 2026 17:27:26 +0000
ROA not after:            Mon 10 May 2027 17:32:26 +0000
asID:                     131657
IP address blocks:        103.122.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7f:45:80:39:03:e9:e9:ad:44:82:fd:98:ff:c2:f8:b9:93:54:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:27:26 2026 GMT
            Not After : May 10 17:32:26 2027 GMT
        Subject: CN=CDD0EB55D5B60D4C4339EAD0AB2295EEBFE1E109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:0b:83:9b:d2:ee:29:49:b1:be:3f:1b:2a:
                    62:aa:94:63:b7:5b:f9:bc:c0:0e:0d:8d:25:e6:68:
                    f0:5c:61:3d:e6:03:53:ba:7b:83:f5:d4:61:a1:ba:
                    e7:d1:a0:4b:af:b5:fe:00:6b:ef:94:49:1d:b2:2a:
                    eb:1a:31:64:dc:ed:89:f3:86:89:31:a3:66:7f:7c:
                    94:66:45:30:70:3a:80:49:3c:ba:3a:f7:dc:48:af:
                    c1:2f:61:07:d1:5b:fc:c0:a5:93:73:67:aa:9e:4b:
                    2d:e4:4d:1b:3a:5e:2a:24:20:d9:8c:ea:b8:01:14:
                    ea:2a:a3:93:46:5c:3d:08:98:48:b3:8d:6a:03:7c:
                    ff:86:34:60:3b:9c:f2:4c:d1:7c:d0:0d:d5:48:76:
                    04:5c:40:7d:94:fe:32:73:76:16:86:fe:a4:5a:28:
                    57:1f:6d:55:8f:19:0c:7d:c3:18:02:8c:86:60:eb:
                    e3:21:ec:a6:2b:8e:f3:43:f3:e1:ab:2f:53:1e:dd:
                    0f:26:10:3f:b5:61:f9:59:a9:f3:56:53:09:17:73:
                    d6:bb:96:1b:07:63:3a:a5:cf:2e:ee:f1:84:06:47:
                    71:1f:8f:f8:59:71:0c:59:a4:13:3c:e5:1b:4a:e8:
                    e7:16:d6:b3:a7:e5:a2:0d:2b:c5:fb:6e:c4:02:e4:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:EB:55:D5:B6:0D:4C:43:39:EA:D0:AB:22:95:EE:BF:E1:E1:09
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3232203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:b5:cd:94:ba:8e:de:95:18:28:d0:ad:a4:48:9a:61:3c:
         ee:c9:c6:87:f0:9b:a5:cc:78:81:cf:ec:d8:7d:ad:10:13:a4:
         6e:e8:59:b9:de:0e:59:64:8f:ef:91:a2:f0:dc:e3:83:bb:eb:
         4c:3e:a0:07:40:43:c2:91:83:1d:f5:65:70:2a:b5:64:b2:f2:
         15:52:f2:c5:96:09:bc:08:fc:00:ac:1f:f3:a5:79:ff:23:82:
         d1:1e:e3:46:25:76:3b:93:d4:4a:28:19:5f:d1:c7:81:2f:68:
         32:09:54:f4:b8:61:7e:e0:78:00:50:39:d0:9a:01:76:2f:de:
         d5:e1:cf:7d:72:22:e3:fd:4a:bf:b0:cb:cd:88:1f:c5:db:5d:
         f1:68:3d:57:f0:d1:f3:d8:83:1f:1e:8b:ad:33:40:9a:76:30:
         c7:fd:ec:2b:d7:40:e6:c4:34:40:fa:be:e0:64:79:b6:10:fd:
         11:af:c0:f0:98:b1:bf:c9:55:a9:d1:47:23:86:3f:11:5f:86:
         77:83:51:e4:80:02:4c:36:e2:2f:5f:20:7c:70:d8:10:b8:ea:
         0b:25:52:9b:d3:e6:f2:09:85:5f:19:5c:04:cd:28:c4:5c:b4:
         8c:bd:e2:16:14:50:90:9d:45:a2:bd:f0:dd:7f:71:0e:1a:0a:
         4d:67:eb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:07 2026 by rpki-client