Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa
File:                     3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa (raw, json)
Hash identifier:          lYNt12/rSEz4/dlS37gzJuWq+YruDJ0h47+wB84GJ48=
Subject key identifier:   A8:23:57:39:F6:B8:E3:59:54:15:1F:A2:1B:BF:BF:CC:54:19:83:52
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       1A64DCAAE234F31DE8385A3E1A0AA04C6DDFFA54
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa
Signing time:             Mon 11 May 2026 17:10:12 +0000
ROA not before:           Mon 11 May 2026 17:05:12 +0000
ROA not after:            Mon 10 May 2027 17:10:12 +0000
asID:                     17418
IP address blocks:        103.153.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:dc:aa:e2:34:f3:1d:e8:38:5a:3e:1a:0a:a0:4c:6d:df:fa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:05:12 2026 GMT
            Not After : May 10 17:10:12 2027 GMT
        Subject: CN=A8235739F6B8E35954151FA21BBFBFCC54198352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a6:d1:d3:78:1a:4c:ff:77:32:e0:9a:54:a9:
                    c5:7b:c3:f2:90:7d:5f:ee:b8:1c:9f:97:5c:4b:49:
                    19:22:7f:7a:20:fd:88:3e:d9:a9:00:96:d6:fc:d6:
                    67:b7:82:2b:81:cf:f0:70:ef:20:ba:c4:58:c5:1a:
                    21:3f:0f:2d:4f:8b:b2:91:6f:c8:9e:68:c0:2e:7e:
                    14:e6:fc:ef:08:31:a9:be:7f:3f:b0:0a:ae:9f:1f:
                    ba:5a:c3:2e:51:71:0e:6e:8f:13:e7:4c:17:88:49:
                    90:76:a5:c5:4e:c1:eb:8b:b2:c3:5f:f0:99:58:f4:
                    dd:66:d2:e8:0f:cd:f9:0b:eb:d3:51:72:81:49:a4:
                    81:a3:05:46:d4:e9:51:6f:fa:cc:03:63:8f:91:c3:
                    24:b1:90:43:dc:3b:94:66:38:fb:aa:88:29:1c:47:
                    e6:0c:c6:a2:32:6f:9f:3c:08:97:8b:d6:b1:be:d0:
                    f8:23:be:ad:d1:76:f3:dd:40:01:c9:2f:9c:a4:96:
                    74:b5:5e:fa:0e:6a:f3:38:a2:2e:0b:59:e1:7c:a7:
                    d6:5b:03:c3:15:e9:b3:2c:bf:fd:2c:e5:54:53:ec:
                    f2:c0:db:17:1e:37:0d:e8:19:70:e6:6b:99:81:3f:
                    b7:88:2d:1f:ec:9b:42:b7:52:ac:9d:31:19:e6:c0:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:57:39:F6:B8:E3:59:54:15:1F:A2:1B:BF:BF:CC:54:19:83:52
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:2a:5e:02:64:0f:c7:58:3e:cd:42:2f:4d:18:f3:1d:29:47:
         cd:ed:ea:a0:17:ed:9f:8d:a6:1e:d8:e7:b9:72:7f:ef:c9:37:
         98:9d:d9:bf:7b:b1:5c:2e:1c:74:24:3b:04:63:8a:1a:4f:27:
         74:73:9e:ce:31:03:ec:c1:b1:56:38:58:0c:6c:8c:0b:cb:ca:
         59:fd:48:1e:c4:31:73:6c:88:54:91:df:73:7a:d5:d9:ed:bc:
         6b:53:c9:17:cc:4d:79:a8:51:d3:81:d9:04:55:4a:cd:09:f2:
         52:b4:9f:0c:fd:c8:50:6f:d0:26:4c:4d:14:70:f1:90:85:43:
         e1:f0:51:2e:bd:3a:55:19:b1:ca:95:a3:71:e1:46:f5:8b:f4:
         b8:9d:0f:ed:53:02:0f:d8:4c:fb:fc:d8:64:7b:59:87:d2:51:
         78:29:8e:b7:f4:be:cd:3a:a5:65:f2:fa:1c:cf:51:03:45:8b:
         59:9a:65:4a:41:d4:88:83:4b:46:3a:7f:94:0b:ae:03:c9:67:
         d2:20:cf:b2:81:f0:aa:2a:66:78:85:f6:1e:4a:44:b6:7f:3e:
         89:ff:d9:52:b2:d1:75:ce:15:33:b2:27:f4:4f:94:7a:e5:85:
         5a:89:89:ca:22:05:d6:07:4c:c0:01:b3:b6:48:3c:88:0e:1b:
         15:b2:9b:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:58 2026 by rpki-client