Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3233203d3e20313331363537.roa
File:                     3130332e3135332e3137362e302f32332d3233203d3e20313331363537.roa (raw, json)
Hash identifier:          3KUNKDfCHHRu6RcA9/+fXaDM7dSkwkDxfLj5Ka7CxTA=
Subject key identifier:   B7:BA:9C:51:56:8D:2B:A2:21:E3:10:7C:D6:58:40:D6:B1:C9:41:10
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       5D3792946E6F13A59E456E08E438BE67158D32B6
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3233203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:18:55 +0000
ROA not before:           Mon 11 May 2026 17:13:55 +0000
ROA not after:            Mon 10 May 2027 17:18:55 +0000
asID:                     131657
IP address blocks:        103.153.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:37:92:94:6e:6f:13:a5:9e:45:6e:08:e4:38:be:67:15:8d:32:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:13:55 2026 GMT
            Not After : May 10 17:18:55 2027 GMT
        Subject: CN=B7BA9C51568D2BA221E3107CD65840D6B1C94110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:11:57:af:8e:bf:cb:4a:06:67:53:45:31:
                    58:4b:6a:d4:cc:72:37:47:c5:b4:1b:22:41:64:7c:
                    fb:ab:14:38:15:0e:24:e6:55:84:4f:3e:04:6b:1a:
                    35:ae:b4:a6:a6:78:72:20:87:c0:d2:f6:12:05:50:
                    98:5e:ff:ca:f1:ed:fb:27:cc:2a:b9:f2:02:5c:bb:
                    f1:f7:0a:22:8d:e5:2f:f8:16:a4:b1:0c:8a:4c:c6:
                    20:b0:72:c3:b5:43:95:60:cc:c2:3c:e7:94:29:dd:
                    de:6b:08:81:19:53:a6:05:0c:ad:da:4d:4c:f1:40:
                    b0:7d:3d:2a:37:a4:98:82:9b:12:ca:be:50:f3:fc:
                    e2:ed:46:55:5c:8d:fa:5a:33:38:df:c3:31:53:8c:
                    d2:72:f3:1c:24:11:8a:85:6e:55:06:31:9f:38:7f:
                    8d:2c:df:e3:1b:f5:b6:fb:cf:8d:98:b5:0e:54:c8:
                    e3:ac:42:aa:d6:d0:ce:cf:89:95:ca:e1:da:91:2d:
                    f7:4a:ca:3d:c5:5a:92:d9:96:86:f0:0d:33:d2:eb:
                    63:1b:f8:03:1a:ac:50:fd:23:44:eb:bf:4a:80:61:
                    f8:e3:67:29:0d:f2:ac:3a:d3:07:0c:2c:18:31:77:
                    7b:53:ea:d2:e4:34:60:e6:21:81:02:29:04:bb:78:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:9C:51:56:8D:2B:A2:21:E3:10:7C:D6:58:40:D6:B1:C9:41:10
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3233203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:b7:0c:51:9f:4c:20:7b:39:87:fc:af:8f:7a:e3:b2:59:
         be:09:b1:48:9e:2e:89:c8:37:ae:5a:6c:17:09:20:50:a9:fc:
         49:a1:d0:98:5b:23:26:ae:65:86:ce:30:0a:1b:f5:fe:78:47:
         e5:df:83:39:9c:d1:61:18:c6:69:18:be:51:5d:b2:e2:94:77:
         e0:21:23:11:d2:63:cd:87:ad:df:74:39:ef:8d:fc:2a:00:cf:
         93:09:bc:f1:ae:e1:48:15:79:e2:49:9f:f8:25:29:ec:e7:6d:
         9c:0d:4d:2a:c0:d4:15:46:15:b8:70:61:01:65:45:08:d0:a5:
         dd:5d:93:3d:3a:95:37:0f:69:cb:e7:dd:38:12:83:3d:6a:7e:
         fb:c8:09:e0:5d:93:80:fc:26:7a:e7:bf:28:0d:83:c0:f6:b3:
         ea:9b:c9:70:43:f7:c4:ec:ce:aa:0b:17:d8:23:1c:ee:06:68:
         91:55:11:ab:e5:fc:6e:78:3c:41:e9:43:d6:fb:df:6a:cf:ca:
         9f:dd:fd:91:6d:ae:e4:03:a3:47:32:b2:78:90:d3:6f:4c:38:
         8c:98:2e:b7:5e:bd:98:68:19:4a:21:65:0e:f8:bc:14:bb:9a:
         7b:ae:3e:6c:52:f9:b7:97:2a:60:24:8a:43:ea:19:0a:b3:55:
         cf:df:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:51:56 2026 by rpki-client