Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3234203d3e20313331363537.roa
File:                     3130332e3135332e3137362e302f32332d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          bMQY5g1f80QMq0GYC6pdFs+gg6qkE9fK5hhfjzW3rcc=
Subject key identifier:   2A:FB:09:F1:6B:97:CB:BF:E3:08:10:EE:0B:74:AB:CE:A5:FC:38:B9
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       2B4647B461BB4073D2E295058105696929063C5A
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:15:30 +0000
ROA not before:           Mon 11 May 2026 17:10:30 +0000
ROA not after:            Mon 10 May 2027 17:15:30 +0000
asID:                     131657
IP address blocks:        103.153.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:46:47:b4:61:bb:40:73:d2:e2:95:05:81:05:69:69:29:06:3c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:10:30 2026 GMT
            Not After : May 10 17:15:30 2027 GMT
        Subject: CN=2AFB09F16B97CBBFE30810EE0B74ABCEA5FC38B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:de:45:fc:74:1a:c7:71:e1:58:d9:08:c5:
                    cf:7a:1c:fd:e8:fa:d2:d2:63:b8:ff:f4:10:2c:5e:
                    08:45:0d:79:83:04:82:43:2e:07:99:1f:1e:97:61:
                    6a:0a:d7:93:79:d4:52:5b:85:43:37:50:93:70:68:
                    40:a3:27:0e:24:64:a8:03:c2:61:71:44:6e:3e:dc:
                    92:2c:65:f4:4f:de:bf:45:7b:a3:b0:10:f3:eb:4d:
                    a1:1c:59:a7:03:30:5f:17:de:ed:10:2a:5a:2a:d1:
                    41:a4:e1:2d:39:2c:28:5c:e4:c1:72:9e:8e:b0:9e:
                    74:ea:3e:39:7e:a2:ee:89:85:8f:60:1d:f9:57:bb:
                    f4:ee:25:7c:e5:46:35:a8:ad:e7:c7:d9:43:b9:c2:
                    23:ce:ff:74:27:36:29:d6:e7:6a:27:ef:90:ce:2a:
                    af:a9:9b:b8:8e:f0:6c:9e:32:a7:1d:77:dd:a9:e2:
                    a0:f5:55:0f:94:b5:61:2b:5a:09:d9:58:9c:71:5e:
                    11:5d:30:86:38:4e:32:e5:97:23:f1:de:58:54:31:
                    70:55:c4:57:97:9a:25:36:36:d5:d5:6e:58:93:d5:
                    f5:29:02:80:16:52:95:12:fd:32:e6:ee:9c:2b:27:
                    9a:48:16:c3:7a:e8:05:38:fd:3f:c6:e9:c2:05:c8:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FB:09:F1:6B:97:CB:BF:E3:08:10:EE:0B:74:AB:CE:A5:FC:38:B9
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:61:5e:c3:f6:3f:f9:08:e4:99:8b:54:c2:cc:ab:d2:90:
         ec:bd:44:69:58:b1:9e:ea:1c:94:46:c3:04:14:84:dc:d3:1e:
         50:10:10:13:3a:a0:cf:94:e0:4c:22:1a:d9:f9:b0:99:ec:94:
         d7:9e:67:de:6b:97:a5:99:b7:2c:c0:04:66:24:2d:cd:a6:2e:
         56:c8:f8:6c:06:7a:47:95:d9:b4:0e:67:31:e8:46:d5:e2:fd:
         27:15:2e:18:f9:62:85:9a:80:06:ac:eb:7c:bb:e7:0f:45:87:
         bb:bc:28:e1:81:bc:90:db:7f:cb:7d:2e:d4:47:0a:71:c6:27:
         16:fe:15:5c:89:04:74:a8:b2:23:a4:75:59:55:f4:8b:43:f8:
         f6:be:8c:b0:d4:02:f1:56:ae:e9:a3:1f:dc:36:fb:93:0a:9b:
         06:b4:0f:7d:f9:5f:85:c9:dd:59:a8:58:a8:d5:4d:94:7c:e6:
         05:c0:2d:24:c4:18:e2:51:53:2b:73:c4:4a:7c:e5:c9:ca:4c:
         94:94:ce:09:c5:7a:05:d4:55:86:69:2a:c0:df:9e:9d:cf:65:
         ee:79:eb:e4:e7:f8:34:9f:c2:27:b1:42:ec:df:c8:49:fd:71:
         e2:09:70:80:76:34:66:35:44:69:b0:e9:4f:10:7e:0b:92:39:
         46:b5:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:39 2026 by rpki-client