Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313334383233.roa
File:                     3130332e3135332e3137362e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          KgTlpzUFLSMTh4mumvbpbtdp21xfIjhaidVeyTyNT/Y=
Subject key identifier:   1E:28:DE:1F:48:89:3D:50:13:A0:17:1D:F1:C3:11:BE:2E:36:DD:59
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       0E0812719C3F81E66FFE6813A5C70E0C14780483
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:06:48 +0000
ROA not before:           Mon 11 May 2026 17:01:48 +0000
ROA not after:            Mon 10 May 2027 17:06:48 +0000
asID:                     134823
IP address blocks:        103.153.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:08:12:71:9c:3f:81:e6:6f:fe:68:13:a5:c7:0e:0c:14:78:04:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:01:48 2026 GMT
            Not After : May 10 17:06:48 2027 GMT
        Subject: CN=1E28DE1F48893D5013A0171DF1C311BE2E36DD59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:0f:fc:85:7d:f1:fa:ca:c2:dc:61:ee:ca:
                    9d:d3:da:ff:1b:b4:44:ee:a0:d3:a9:89:23:dd:9a:
                    f6:08:08:42:af:a9:f2:0e:1c:e6:20:c1:9f:c0:22:
                    0f:22:8a:9e:4e:68:fa:35:a4:66:a0:9c:81:38:32:
                    17:c6:b9:8b:fa:80:de:a4:bb:e6:ff:5f:2c:1d:96:
                    0f:a5:d4:20:3c:d2:dd:35:04:e9:01:4c:bb:26:0b:
                    15:24:73:12:d7:7a:33:94:cc:62:63:a3:7b:69:e4:
                    15:1f:4b:90:3b:ea:7c:34:f3:a9:3a:bd:ef:37:8c:
                    41:6d:08:74:20:a0:7a:e2:26:80:a8:57:3a:51:8e:
                    69:25:7f:5d:63:86:c9:d4:ca:cb:81:d9:45:7d:80:
                    54:cb:f2:90:0d:12:65:f8:c7:d1:67:aa:61:e4:ef:
                    3c:71:19:62:88:31:5e:0d:0a:5a:f6:5a:98:a8:9d:
                    40:49:34:c5:a3:0f:70:e6:e5:94:2e:b5:83:0f:24:
                    cd:f1:e6:ee:62:1c:71:61:0e:d6:ba:c7:56:8a:b8:
                    37:ab:38:49:01:4d:ec:c5:ed:c9:36:f3:c4:06:9f:
                    1f:c7:1f:54:70:0a:a6:66:fe:b1:fd:fa:fe:b3:61:
                    cb:d7:01:81:45:d5:c6:8a:f7:22:c5:a5:8b:34:90:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:28:DE:1F:48:89:3D:50:13:A0:17:1D:F1:C3:11:BE:2E:36:DD:59
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:75:b5:b7:ed:32:4e:24:68:a2:6a:4c:56:b8:eb:6a:dd:97:
         d0:b7:e0:dd:54:03:21:cc:3b:a4:84:36:8c:e1:20:3e:4e:ca:
         67:12:06:d0:38:fd:25:98:e8:2e:59:47:6d:ca:cc:51:1a:67:
         b0:b7:2f:d8:43:45:cd:f0:11:95:7b:80:e9:3f:48:f6:4e:da:
         03:85:e9:79:27:7e:bd:24:c2:21:25:21:15:b2:94:8d:38:e6:
         5c:5c:e2:ae:a9:d9:6f:8d:13:c2:de:57:b4:13:34:cd:0a:59:
         3d:40:05:23:4f:e0:f6:3e:95:db:58:fd:2c:09:d8:74:4c:7b:
         96:db:04:ab:69:b6:2f:e5:59:83:da:13:9f:f3:46:30:75:59:
         f1:ff:77:fc:04:40:9f:85:d8:f9:07:59:2a:39:59:07:0e:7d:
         0c:1a:11:91:a6:cb:25:77:9c:d2:08:61:61:05:2e:4c:f4:3a:
         27:c9:61:68:26:ad:5b:c3:f6:44:79:31:39:71:3b:15:e8:85:
         20:8b:bd:27:1c:dd:61:8d:3b:68:e6:ee:ac:36:c7:f8:ac:06:
         36:e6:7f:08:b7:35:9f:74:17:f6:68:22:20:7f:08:9d:5b:01:
         94:d5:91:c3:eb:7f:cb:2c:ea:fc:e1:93:f5:c0:9c:2b:e2:49:
         69:64:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:00 2026 by rpki-client