Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313331363537.roa
File:                     3130332e3135332e3137372e302f32342d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          WLRdCMEDveSN/UyOVsHkrdGdVqVF6NOP9qVRIS433U4=
Subject key identifier:   43:AB:75:EB:7D:24:FF:57:DC:20:EA:0A:2A:93:26:F5:78:D8:3A:4D
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       0F3DB6817CA97FF19196135B7B4EE6016BDD4A09
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:06:50 +0000
ROA not before:           Mon 11 May 2026 17:01:50 +0000
ROA not after:            Mon 10 May 2027 17:06:50 +0000
asID:                     131657
IP address blocks:        103.153.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:b6:81:7c:a9:7f:f1:91:96:13:5b:7b:4e:e6:01:6b:dd:4a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:01:50 2026 GMT
            Not After : May 10 17:06:50 2027 GMT
        Subject: CN=43AB75EB7D24FF57DC20EA0A2A9326F578D83A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:73:1d:bb:b7:1b:e7:7a:2a:01:36:d4:68:
                    10:c6:03:d3:d0:16:68:60:03:0b:f1:38:40:cf:1d:
                    bc:54:08:23:57:c7:db:b2:cc:39:fe:32:bc:6b:49:
                    64:cb:5c:87:80:30:6a:ce:03:cd:b6:08:5b:be:bd:
                    49:0f:60:d7:12:ee:75:da:45:6e:33:e0:9c:24:7f:
                    62:3a:b8:90:0c:d5:16:19:59:33:8e:81:4d:ca:84:
                    2e:f7:55:c3:a1:ed:f6:57:f7:f2:bc:11:f8:e9:74:
                    af:54:03:05:dc:ac:fe:31:67:b7:04:ad:39:93:e4:
                    0e:cb:65:a2:13:0f:3c:f8:20:25:4a:8e:3c:87:66:
                    dd:0a:d9:36:36:53:58:f6:ae:b5:ef:1a:04:f9:fa:
                    fe:2f:37:71:3a:5d:50:8f:28:e7:5f:bd:3f:20:74:
                    15:f6:ba:7b:7d:7d:cc:c3:f0:6e:e1:36:30:2c:89:
                    46:6a:50:75:6e:aa:89:de:41:13:e5:ac:89:12:78:
                    24:8d:d0:a4:7f:8d:b1:05:69:d2:73:51:e0:03:d3:
                    3d:19:48:a2:74:3d:f1:4d:51:bf:c5:80:3c:b4:4f:
                    c3:4e:e7:f0:24:de:a0:16:e1:80:d4:c9:58:e7:1a:
                    8c:f3:ba:f8:f0:84:91:e5:ed:0c:e2:39:5b:5e:cd:
                    f8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:75:EB:7D:24:FF:57:DC:20:EA:0A:2A:93:26:F5:78:D8:3A:4D
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:1d:f2:fa:4c:71:ed:1b:92:f9:34:bf:5e:9e:9b:0e:87:
         cf:85:eb:a4:55:cd:69:22:b7:20:fb:d6:f1:eb:4c:af:51:0a:
         23:66:4c:65:de:b0:97:e1:f3:f0:c0:3f:1b:a3:b6:be:3f:1b:
         fb:cd:5f:27:3e:18:f8:37:47:78:c7:c9:e3:71:70:e3:83:02:
         7a:c5:14:76:d5:31:0a:e1:66:bd:a8:92:de:2e:5a:4d:b5:92:
         19:68:f2:41:c0:a1:07:9c:a4:f7:1a:18:63:65:03:d0:3f:e4:
         03:06:ff:46:4d:c1:55:93:1d:f1:b3:20:36:3e:15:16:0f:35:
         3d:48:0f:a8:fb:5b:91:9b:eb:36:59:22:fa:c3:59:09:f8:bc:
         e6:47:88:d8:38:25:4a:da:7f:b0:92:31:6b:e3:4a:f7:5b:6d:
         bc:f2:9d:03:53:b5:0a:7f:53:8d:04:72:ab:37:37:e3:a8:57:
         25:ee:6d:b7:90:86:37:4e:44:6b:73:4f:2c:00:b5:e9:de:e1:
         9e:8c:12:9a:d0:c1:c1:21:03:e5:03:93:d5:12:1f:81:15:80:
         09:a1:bd:32:77:64:5b:dc:b7:f1:a8:61:01:c6:db:76:0b:d1:
         d1:39:05:f3:91:ee:9d:ec:df:fb:9e:34:bb:57:eb:1d:fc:53:
         db:3e:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:39 2026 by rpki-client