Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32332d3332203d3e20313331363537.roa
File:                     3130332e32332e3131302e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          bS2XMjoqxs9/sH8kC5qI5DcGPVwuouICEI7BqWr4JPs=
Subject key identifier:   67:AB:BA:CB:8C:C9:C9:B7:AA:BD:3A:93:12:A4:A2:68:5B:9D:50:91
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       5FDB2FC20CA7F46431FAE105BE82FF4DEC9F4410
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32332d3332203d3e20313331363537.roa
Signing time:             Tue 11 Aug 2026 08:24:00 +0000
ROA not before:           Tue 11 Aug 2026 08:19:00 +0000
ROA not after:            Tue 10 Aug 2027 08:24:00 +0000
asID:                     131657
IP address blocks:        103.23.110.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:db:2f:c2:0c:a7:f4:64:31:fa:e1:05:be:82:ff:4d:ec:9f:44:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: Aug 11 08:19:00 2026 GMT
            Not After : Aug 10 08:24:00 2027 GMT
        Subject: CN=67ABBACB8CC9C9B7AABD3A9312A4A2685B9D5091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:79:21:57:4a:7d:bc:6a:43:f9:cf:b8:47:
                    79:e1:fc:57:89:48:ad:1a:79:8e:d8:f3:ee:4d:d0:
                    af:2f:03:c4:bc:1e:ff:93:4e:9f:c6:ff:61:47:c0:
                    56:d4:0d:c4:00:a4:ee:d5:3d:5e:9d:17:7c:2e:fe:
                    07:a2:94:29:aa:c7:91:57:0e:e5:51:81:9f:7c:65:
                    e1:fb:65:e7:fa:24:54:36:c9:63:d0:70:28:6c:f8:
                    84:c0:47:e2:38:85:1d:f6:12:36:36:8e:7d:1d:6c:
                    12:4e:97:da:8f:c4:6e:06:3b:6b:a9:23:7e:e5:a7:
                    d2:6e:f8:9f:19:00:07:f8:18:d4:0d:76:8b:c8:57:
                    fa:2f:b2:c5:a3:48:3d:0a:a2:4e:40:56:16:e7:6d:
                    64:59:22:cf:f8:6a:12:37:48:88:55:ce:78:69:dc:
                    0c:c0:cd:28:39:2a:1c:78:ae:d6:5c:0c:dc:21:a9:
                    1e:3f:46:fa:e2:de:69:96:da:21:17:68:c1:83:34:
                    1b:4b:85:5c:e7:87:f7:c0:af:3e:46:50:53:5a:95:
                    f9:9d:3a:f3:d7:b6:1f:f5:5d:8f:74:7a:f3:ce:e3:
                    0d:43:94:db:0a:a4:c6:f4:48:cb:f8:47:4e:d7:29:
                    52:7f:26:da:e9:b8:fb:92:97:a2:bd:11:95:4f:0b:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:BA:CB:8C:C9:C9:B7:AA:BD:3A:93:12:A4:A2:68:5B:9D:50:91
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32332d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:e5:ff:cc:4c:4f:e5:64:62:9e:f2:53:cf:df:8b:92:cc:
         75:ad:cc:c0:a1:72:ad:28:7f:02:f1:5c:a8:6d:11:7b:63:45:
         99:c6:f2:d6:93:ce:a5:99:63:04:15:20:02:37:3b:3a:44:b9:
         31:bd:fd:d5:41:10:34:b1:47:b1:b7:f1:53:15:19:43:29:92:
         0c:18:3a:b8:15:43:59:6e:48:d3:c9:08:69:05:d6:67:ed:92:
         ca:1b:f6:6c:8d:57:46:99:89:eb:45:42:c9:e1:10:32:bd:6e:
         43:d5:9e:8f:fa:ad:71:10:e0:9f:02:14:9c:b5:0f:18:6e:1c:
         61:0f:af:de:4d:63:c3:2d:62:3b:ae:c4:1e:02:f1:82:0c:b6:
         b4:f8:aa:4c:b8:f1:9f:8b:0b:0c:f3:c0:4f:19:96:62:14:7d:
         46:72:88:b4:8f:f5:d8:0b:7d:af:81:30:cd:db:4a:fd:36:72:
         f1:1d:9d:63:b6:d9:60:89:a1:6f:be:f5:be:6b:44:bc:a0:da:
         38:76:d9:ac:78:93:95:0a:a3:d9:d7:57:f1:a7:2c:a0:9d:90:
         14:08:fe:07:5c:c1:b3:b0:0f:64:ec:22:54:6e:97:03:a1:07:
         9e:4f:95:bc:7e:83:8f:20:3f:9d:a9:ed:72:3b:cb:66:a9:db:
         30:d2:c4:be
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUX9svwgyn9GQx+uEFvoL/TeyfRBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA4MTEwODE5MDBaFw0yNzA4MTAwODI0MDBaMDMxMTAvBgNV
BAMTKDY3QUJCQUNCOENDOUM5QjdBQUJEM0E5MzEyQTRBMjY4NUI5RDUwOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSXkhV0p9vGpD+c+4R3nh/FeJ
SK0aeY7Y8+5N0K8vA8S8Hv+TTp/G/2FHwFbUDcQApO7VPV6dF3wu/geilCmqx5FX
DuVRgZ98ZeH7Zef6JFQ2yWPQcChs+ITAR+I4hR32EjY2jn0dbBJOl9qPxG4GO2up
I37lp9Ju+J8ZAAf4GNQNdovIV/ovssWjSD0Kok5AVhbnbWRZIs/4ahI3SIhVznhp
3AzAzSg5Khx4rtZcDNwhqR4/Rvri3mmW2iEXaMGDNBtLhVznh/fArz5GUFNalfmd
OvPXth/1XY90evPO4w1DlNsKpMb0SMv4R07XKVJ/JtrpuPuSl6K9EZVPC4VxAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUZ6u6y4zJybeqvTqTEqSiaFudUJEwHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RBLzAvMzEzMDMzMmUzMjMz
MmUzMTMxMzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM1Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnF24wDQYJKoZIhvcNAQELBQADggEBAKFt5f/MTE/lZGKe8lPP34uS
zHWtzMChcq0ofwLxXKhtEXtjRZnG8taTzqWZYwQVIAI3OzpEuTG9/dVBEDSxR7G3
8VMVGUMpkgwYOrgVQ1luSNPJCGkF1mftksob9myNV0aZietFQsnhEDK9bkPVno/6
rXEQ4J8CFJy1DxhuHGEPr95NY8MtYjuuxB4C8YIMtrT4qky48Z+LCwzzwE8ZlmIU
fUZyiLSP9dgLfa+BMM3bSv02cvEdnWO22WCJoW++9b5rRLyg2jh22ax4k5UKo9nX
V/GnLKCdkBQI/gdcwbOwD2TsIlRulwOhB55Plbx+g48gP52p7XI7y2ap2zDSxL4=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:08 2026 by rpki-client