Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32342d3332203d3e20313331363537.roa
File:                     3130332e32332e3131302e302f32342d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          bNQwR1DZIw6V0JybB3Hv52Mhh8GTILQIDAxSknxqRZM=
Subject key identifier:   12:E0:50:30:C2:DC:65:EB:E2:A4:52:DE:D9:64:39:3C:8A:05:86:09
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       151B44A997526F34D84BA971AB1592F120EA09B0
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32342d3332203d3e20313331363537.roa
Signing time:             Tue 11 Aug 2026 08:24:00 +0000
ROA not before:           Tue 11 Aug 2026 08:19:00 +0000
ROA not after:            Tue 10 Aug 2027 08:24:00 +0000
asID:                     131657
IP address blocks:        103.23.110.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1b:44:a9:97:52:6f:34:d8:4b:a9:71:ab:15:92:f1:20:ea:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: Aug 11 08:19:00 2026 GMT
            Not After : Aug 10 08:24:00 2027 GMT
        Subject: CN=12E05030C2DC65EBE2A452DED964393C8A058609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:5b:11:f8:08:78:aa:75:9c:4b:5c:08:b5:
                    d9:2f:90:8c:73:e5:2f:56:b8:a5:f0:aa:e3:9e:78:
                    db:42:a9:05:aa:49:92:c6:65:dd:87:03:73:2d:d1:
                    11:70:b1:38:41:58:f2:c0:0d:51:b1:6b:f0:8a:5c:
                    c9:dd:e0:79:95:a6:fe:8b:19:33:c2:07:b1:dd:f6:
                    db:04:02:79:fd:35:80:82:09:d0:cb:a3:cd:0c:c7:
                    c2:82:25:49:d3:29:10:a7:16:06:8d:75:d0:ae:5d:
                    4a:c8:c7:36:51:8b:f7:fd:2d:a0:03:28:ab:64:6f:
                    c6:d1:71:26:f4:2a:11:00:76:f9:10:df:b3:46:49:
                    52:35:a9:ee:64:df:07:96:2f:6e:84:b3:3e:a0:fb:
                    9a:1a:6e:3d:c4:3c:5d:64:b4:91:9a:19:1a:a9:d5:
                    a0:c6:18:ef:12:7e:fa:5d:99:b9:aa:01:cb:e8:5b:
                    ff:d1:b6:42:24:f6:81:84:2b:df:70:56:54:25:27:
                    59:36:b3:f6:88:8f:61:c5:55:97:c7:44:10:eb:a4:
                    15:60:2b:a7:d9:01:82:16:74:54:4a:4a:af:d4:21:
                    66:42:d7:f1:31:f2:c7:47:d1:4c:0e:b0:51:2c:80:
                    f4:17:c6:0d:1b:6b:2d:e8:ac:ed:9c:cd:ab:e2:02:
                    c2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:50:30:C2:DC:65:EB:E2:A4:52:DE:D9:64:39:3C:8A:05:86:09
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131302e302f32342d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:49:d6:b2:3e:01:f1:93:ba:02:f0:70:34:ef:40:f0:cb:32:
         0a:8d:24:56:21:72:47:ab:cb:37:4d:14:74:e5:d3:34:2f:f6:
         3f:61:1a:f1:a1:33:97:78:0e:ac:5a:dd:c2:33:50:c5:f2:cb:
         27:1f:4c:3a:cb:c7:9d:29:1a:85:8f:66:d6:02:5c:85:39:bf:
         0e:c5:ad:06:a8:87:e5:01:eb:e0:f5:a7:c5:87:ca:5a:2e:e5:
         20:3b:b5:33:95:04:14:1c:ed:e4:21:b1:36:48:76:18:4c:84:
         47:6a:53:4e:df:41:5b:e6:5b:bc:3e:c1:90:7d:bc:66:83:7c:
         3d:cc:04:71:ed:6d:1e:b4:06:84:b5:97:9d:67:5a:f8:ec:92:
         9f:3d:43:75:4c:99:a7:57:7f:2d:c3:1d:75:f5:0a:6d:31:4a:
         b0:84:73:e0:20:70:f8:c3:ee:87:fc:e3:d5:77:61:54:8f:1a:
         17:d2:68:92:06:2d:55:77:25:58:f5:bf:57:6b:cc:61:8e:38:
         21:70:61:56:21:a8:c6:7e:79:66:cf:42:98:8c:c8:9e:04:fe:
         f9:79:14:51:1e:60:d7:f3:d1:17:f0:43:3d:07:60:97:5f:ba:
         8d:e6:d5:e9:16:78:a1:f5:d3:b5:65:c1:0f:9a:0d:74:dc:33:
         80:38:87:7f
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUFRtEqZdSbzTYS6lxqxWS8SDqCbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA4MTEwODE5MDBaFw0yNzA4MTAwODI0MDBaMDMxMTAvBgNV
BAMTKDEyRTA1MDMwQzJEQzY1RUJFMkE0NTJERUQ5NjQzOTNDOEEwNTg2MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYFsR+Ah4qnWcS1wItdkvkIxz
5S9WuKXwquOeeNtCqQWqSZLGZd2HA3Mt0RFwsThBWPLADVGxa/CKXMnd4HmVpv6L
GTPCB7Hd9tsEAnn9NYCCCdDLo80Mx8KCJUnTKRCnFgaNddCuXUrIxzZRi/f9LaAD
KKtkb8bRcSb0KhEAdvkQ37NGSVI1qe5k3weWL26Esz6g+5oabj3EPF1ktJGaGRqp
1aDGGO8SfvpdmbmqAcvoW//RtkIk9oGEK99wVlQlJ1k2s/aIj2HFVZfHRBDrpBVg
K6fZAYIWdFRKSq/UIWZC1/Ex8sdH0UwOsFEsgPQXxg0bay3orO2czaviAsKdAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUEuBQMMLcZevipFLe2WQ5PIoFhgkwHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RBLzAvMzEzMDMzMmUzMjMz
MmUzMTMxMzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM1Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnF24wDQYJKoZIhvcNAQELBQADggEBAJJJ1rI+AfGTugLwcDTvQPDL
MgqNJFYhckeryzdNFHTl0zQv9j9hGvGhM5d4Dqxa3cIzUMXyyycfTDrLx50pGoWP
ZtYCXIU5vw7FrQaoh+UB6+D1p8WHylou5SA7tTOVBBQc7eQhsTZIdhhMhEdqU07f
QVvmW7w+wZB9vGaDfD3MBHHtbR60BoS1l51nWvjskp89Q3VMmadXfy3DHXX1Cm0x
SrCEc+AgcPjD7of849V3YVSPGhfSaJIGLVV3JVj1v1drzGGOOCFwYVYhqMZ+eWbP
QpiMyJ4E/vl5FFEeYNfz0RfwQz0HYJdfuo3m1ekWeKH107VlwQ+aDXTcM4A4h38=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:07 2026 by rpki-client