Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138392e302f32342d3234203d3e20313331363537.roa
File:                     3130332e3132322e3138392e302f32342d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          TMWZ7vt9ckCq7r+ehVpMh5BSP7Leuu2oBQm3o0Nu0ow=
Subject key identifier:   99:DB:C5:F8:5B:0D:96:D4:78:04:0B:AC:6A:2C:C5:C2:46:06:CD:4B
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       62A9A6FAB97CCC6E0A891F2A736CFD4F76316A9E
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138392e302f32342d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:32:22 +0000
ROA not before:           Mon 11 May 2026 17:27:22 +0000
ROA not after:            Mon 10 May 2027 17:32:22 +0000
asID:                     131657
IP address blocks:        103.122.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a9:a6:fa:b9:7c:cc:6e:0a:89:1f:2a:73:6c:fd:4f:76:31:6a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:27:22 2026 GMT
            Not After : May 10 17:32:22 2027 GMT
        Subject: CN=99DBC5F85B0D96D478040BAC6A2CC5C24606CD4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:bc:9e:9e:80:a1:eb:a8:50:f2:54:d0:bc:
                    4e:b8:f9:ad:87:2f:47:2d:49:72:54:6c:8a:2b:4d:
                    d1:75:b6:23:1b:c1:97:76:e4:66:91:68:4c:73:f4:
                    9b:2e:b5:34:08:e2:eb:41:3f:f6:6e:32:36:cb:ba:
                    67:1a:3e:4a:81:59:13:0d:c7:45:a8:9f:f2:c6:5e:
                    26:31:c5:38:45:b7:8a:5d:5d:7d:aa:73:99:47:23:
                    9b:85:e3:d9:24:d5:c1:99:73:d7:b8:f1:34:d5:41:
                    b1:20:1f:f9:13:de:6d:2d:cd:3b:f8:76:a3:8a:64:
                    0a:37:e9:85:df:78:5c:e5:8f:46:c7:e9:e9:d8:cc:
                    35:c1:0a:ad:1f:f0:3d:87:13:82:a6:88:f0:74:92:
                    b4:33:aa:e4:27:38:b8:95:f7:7a:20:bc:04:d8:91:
                    ae:f7:95:f2:f6:d3:50:cc:ab:85:ec:d7:9b:3d:45:
                    16:3a:a3:ec:42:c0:97:40:01:84:39:55:74:13:f6:
                    dd:fd:59:97:74:f0:de:9d:34:99:03:de:d3:99:77:
                    63:ff:2d:9c:f5:60:6c:e1:f0:a5:c3:97:64:0d:1b:
                    b4:63:1b:0f:b4:79:26:78:07:3a:f9:d2:5b:15:c4:
                    dc:53:91:14:09:4e:61:f1:ae:e7:df:2b:a4:02:4c:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DB:C5:F8:5B:0D:96:D4:78:04:0B:AC:6A:2C:C5:C2:46:06:CD:4B
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138392e302f32342d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:5e:79:b8:22:51:a5:c6:56:50:c5:37:b7:5e:13:09:83:
         3e:e2:10:19:64:4c:f2:aa:7e:e9:2b:ed:8b:ea:35:74:4f:83:
         43:fc:fd:a6:f8:cb:61:91:9c:16:a5:86:e9:3a:b3:90:72:f8:
         ff:8f:ad:41:8d:63:3a:94:fa:04:98:56:73:b5:92:4e:8e:9f:
         88:8a:8f:3d:c3:9b:8d:32:b0:69:fc:af:a8:b5:4a:5c:cd:2d:
         b9:3c:86:0e:08:63:3a:6e:3e:bb:10:d3:18:e1:2e:3d:35:1a:
         98:5e:07:de:19:9e:39:1b:b0:be:38:a8:46:38:a8:22:96:22:
         c3:c9:74:2d:0f:f1:f5:b3:a1:21:b2:26:5c:81:93:d3:46:9e:
         95:99:48:0d:a5:81:19:25:6b:29:47:61:97:99:46:5b:f7:b0:
         8e:59:9f:39:e3:8a:f6:60:1b:9b:79:3f:ee:67:73:58:e6:ad:
         2b:d2:1c:81:b1:a7:26:96:82:5e:bc:19:40:f1:b1:30:1c:04:
         2b:68:75:d4:80:df:af:99:85:2e:41:a0:65:78:56:c2:66:b8:
         19:54:1e:3e:7a:e4:0a:50:7c:a2:30:25:e3:93:86:e4:6e:3c:
         c6:69:60:0c:8a:c7:9c:b1:74:a4:1a:20:0f:83:cb:3e:12:1c:
         e7:4b:ef:db
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUYqmm+rl8zG4KiR8qc2z9T3Yxap4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA1MTExNzI3MjJaFw0yNzA1MTAxNzMyMjJaMDMxMTAvBgNV
BAMTKDk5REJDNUY4NUIwRDk2RDQ3ODA0MEJBQzZBMkNDNUMyNDYwNkNENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4obyenoCh66hQ8lTQvE64+a2H
L0ctSXJUbIorTdF1tiMbwZd25GaRaExz9JsutTQI4utBP/ZuMjbLumcaPkqBWRMN
x0Won/LGXiYxxThFt4pdXX2qc5lHI5uF49kk1cGZc9e48TTVQbEgH/kT3m0tzTv4
dqOKZAo36YXfeFzlj0bH6enYzDXBCq0f8D2HE4KmiPB0krQzquQnOLiV93ogvATY
ka73lfL201DMq4Xs15s9RRY6o+xCwJdAAYQ5VXQT9t39WZd08N6dNJkD3tOZd2P/
LZz1YGzh8KXDl2QNG7RjGw+0eSZ4Bzr50lsVxNxTkRQJTmHxruffK6QCTJwZAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUmdvF+FsNltR4BAusaizFwkYGzUswHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPTkdEQS8wLzMxMzAzMzJlMzEz
MjMyMmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNjM1Mzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBABner0wDQYJKoZIhvcNAQELBQADggEBAGWrXnm4IlGlxlZQxTe3
XhMJgz7iEBlkTPKqfukr7YvqNXRPg0P8/ab4y2GRnBalhuk6s5By+P+PrUGNYzqU
+gSYVnO1kk6On4iKjz3Dm40ysGn8r6i1SlzNLbk8hg4IYzpuPrsQ0xjhLj01Gphe
B94ZnjkbsL44qEY4qCKWIsPJdC0P8fWzoSGyJlyBk9NGnpWZSA2lgRklaylHYZeZ
Rlv3sI5ZnznjivZgG5t5P+5nc1jmrSvSHIGxpyaWgl68GUDxsTAcBCtoddSA36+Z
hS5BoGV4VsJmuBlUHj565ApQfKIwJeOThuRuPMZpYAyKx5yxdKQaIA+Dyz4SHOdL
79s=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:36 2026 by rpki-client