Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32342d3234203d3e20313331363537.roa
File:                     3130332e3132322e3138382e302f32342d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          9uKAaxvb7RoEqQVYlyscl4eH00BIiM1uNdPBT5cMRzo=
Subject key identifier:   44:8D:00:B7:66:30:E4:4A:82:46:F5:BB:A9:60:E6:EE:F4:1A:66:21
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       0DB5C95AF05F2FA5AC8A9D96F0F52BC80AFB179D
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32342d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:32:20 +0000
ROA not before:           Mon 11 May 2026 17:27:20 +0000
ROA not after:            Mon 10 May 2027 17:32:20 +0000
asID:                     131657
IP address blocks:        103.122.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:c9:5a:f0:5f:2f:a5:ac:8a:9d:96:f0:f5:2b:c8:0a:fb:17:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:27:20 2026 GMT
            Not After : May 10 17:32:20 2027 GMT
        Subject: CN=448D00B76630E44A8246F5BBA960E6EEF41A6621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:72:ba:13:52:f5:22:61:e7:4f:2d:35:8f:
                    fe:29:54:93:9c:90:06:02:56:14:3d:d0:d5:87:95:
                    f3:36:45:81:6d:70:ca:ce:eb:e2:c4:4b:dd:49:5d:
                    18:70:e5:ca:f6:9f:7b:68:e7:a8:2d:2c:8c:ef:56:
                    c7:ad:c8:de:c3:4c:46:64:4b:77:fe:e2:e8:59:45:
                    d7:92:a5:8a:9a:d7:3e:49:fc:12:0b:6d:ac:8d:b8:
                    80:9f:e7:8c:41:34:13:82:e3:8a:26:bf:b8:43:c1:
                    d0:c3:e6:24:d0:94:5a:2d:68:00:0b:ef:3a:21:c3:
                    b5:9b:3a:da:c0:a1:1d:1d:b5:f8:4a:12:66:51:c6:
                    5b:ce:b9:cf:d1:a2:dc:a2:2c:98:4d:19:a5:73:b2:
                    12:86:6f:30:2c:0d:d0:a4:d9:3b:b3:d8:3f:7c:06:
                    03:f5:e2:13:29:23:f7:d1:1d:a3:23:49:c2:b7:2b:
                    5a:81:00:25:90:68:64:e5:1d:13:96:d9:0f:4f:a5:
                    ab:14:27:4a:cf:75:28:c2:5b:46:f1:ec:fa:27:89:
                    3d:75:cb:f4:4b:46:f9:33:79:f4:77:03:4a:e2:3a:
                    75:db:bb:f2:40:fe:89:0b:3f:12:df:14:49:12:55:
                    2d:fb:56:20:65:bc:6c:fe:d2:18:19:03:cb:04:ad:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:00:B7:66:30:E4:4A:82:46:F5:BB:A9:60:E6:EE:F4:1A:66:21
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32342d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:d2:0f:77:5f:d8:7d:5d:d4:57:f8:62:88:b0:4c:42:a2:
         ae:8e:68:b6:67:a9:70:ca:2e:0a:0d:bd:b8:a9:d4:4b:e7:1d:
         10:bb:c8:b1:5f:5a:52:47:aa:6b:c9:7b:8a:e3:ef:8d:d0:a5:
         ea:de:d1:3f:2c:d8:54:22:b0:f2:58:e4:3e:5d:aa:5a:32:25:
         5b:ee:b9:06:59:7a:d0:93:33:c1:b0:e7:8d:78:89:5b:14:ce:
         93:a8:af:c0:34:a2:4e:d7:b3:17:e9:b8:35:0d:52:7b:b5:1b:
         b3:03:21:fc:e0:34:1a:a1:47:a3:ad:3f:1f:ca:d7:28:5a:06:
         22:ac:ac:46:52:b3:da:fe:37:ee:58:60:33:2d:f2:9b:67:99:
         6f:41:63:3b:6a:6e:9a:d0:78:fa:68:cf:a9:ca:b1:11:70:7d:
         ab:f9:56:2f:c7:54:5a:ea:9d:b8:46:69:3a:3c:92:69:23:29:
         c8:ab:8d:7b:25:f6:27:ec:77:87:07:48:98:ac:28:20:f1:23:
         3b:06:34:ee:8d:b5:ae:92:e5:b4:d8:ca:71:b3:3d:d3:c3:db:
         e8:56:4d:44:e8:22:a6:4e:8b:1f:c1:e7:7f:55:a5:44:8f:b3:
         3c:7c:82:0f:ae:87:15:80:93:81:16:81:e1:a3:38:16:54:8c:
         61:27:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:39 2026 by rpki-client