Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131312e302f32342d3332203d3e20313331363537.roa
File:                     3130332e32332e3131312e302f32342d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          WWsp8L2xTuapB5eIq+RyXpAYoYm4HPbkIDOoeGSjByY=
Subject key identifier:   A4:22:9B:04:3B:81:D6:57:5D:AE:11:DC:50:C0:B7:D6:96:D4:72:2F
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       22A344211E16FD2BF81DBECC4C3C779E1FFE4C1B
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131312e302f32342d3332203d3e20313331363537.roa
Signing time:             Tue 11 Aug 2026 08:24:01 +0000
ROA not before:           Tue 11 Aug 2026 08:19:01 +0000
ROA not after:            Tue 10 Aug 2027 08:24:01 +0000
asID:                     131657
IP address blocks:        103.23.111.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:44:21:1e:16:fd:2b:f8:1d:be:cc:4c:3c:77:9e:1f:fe:4c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: Aug 11 08:19:01 2026 GMT
            Not After : Aug 10 08:24:01 2027 GMT
        Subject: CN=A4229B043B81D6575DAE11DC50C0B7D696D4722F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:48:9c:46:ff:5f:ca:d9:7d:c0:1e:1c:9e:
                    0f:68:8a:cf:7f:96:17:87:da:b9:af:1e:21:ca:10:
                    bc:95:e7:98:10:89:ac:3d:94:c1:d8:4e:00:c6:a2:
                    e0:07:64:bc:14:8c:50:47:94:b0:e3:98:1c:86:06:
                    55:f6:d9:72:19:58:df:44:f0:a6:4b:06:e8:3a:e9:
                    27:4d:8e:7a:aa:84:0e:60:c1:bb:0c:c3:38:be:2d:
                    7c:ee:65:5f:12:07:fd:8c:e9:ce:b5:7d:a9:fc:72:
                    06:f6:87:26:8c:02:e4:23:9d:c2:fd:7d:1f:0c:d1:
                    25:ac:c9:fc:ec:e3:87:f4:20:05:23:7f:04:2f:7a:
                    da:5a:ee:a2:40:01:d4:30:16:69:1a:53:34:14:b6:
                    b2:8f:7a:97:f4:63:c0:18:df:fa:b1:70:81:52:a1:
                    27:77:4d:4e:88:b7:f7:cb:a5:9a:c4:65:36:57:22:
                    3f:4f:c9:4b:56:40:b2:89:84:0f:b6:cc:a3:40:55:
                    a5:42:68:44:b5:7e:a9:17:b2:0f:f0:a2:fb:fd:46:
                    3e:32:ee:76:e5:14:ea:b4:b2:d9:a7:f0:44:fd:92:
                    73:f1:a2:98:7d:3d:70:82:a7:86:2a:a5:f4:db:fb:
                    e9:1f:0c:22:0c:32:d6:ad:ec:ed:ef:94:69:0e:d4:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:9B:04:3B:81:D6:57:5D:AE:11:DC:50:C0:B7:D6:96:D4:72:2F
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e32332e3131312e302f32342d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:33:a7:fc:61:31:88:a0:d5:2f:4d:9c:43:7e:1d:8b:de:f5:
         74:c5:76:1a:19:d0:f3:35:60:0e:49:7b:46:40:b8:82:26:cb:
         83:4a:8d:a4:28:d5:a2:f7:62:3e:6e:8e:b7:a1:21:25:69:41:
         ec:cd:0f:f4:ae:d4:3e:39:41:8c:b6:ab:84:55:41:7d:66:8b:
         d5:f8:d7:22:1e:19:c2:17:ac:42:81:45:55:36:cc:ca:39:a8:
         2a:ac:81:0d:40:99:66:06:04:07:6e:68:a7:08:ae:2e:c6:ae:
         04:eb:e8:f6:ce:c2:26:a2:19:fa:6a:f9:eb:c8:a0:f6:5e:17:
         db:63:ff:db:85:99:0d:ef:e3:dc:88:36:4b:48:e1:5e:f8:50:
         15:81:d8:61:cb:17:37:93:1b:87:58:14:18:b2:2d:36:00:6f:
         ef:8c:02:fa:70:d6:bb:81:b9:93:b5:a7:d6:c9:ad:13:27:9d:
         88:fc:bd:ac:c3:c5:4e:df:53:66:5e:fe:46:d8:6f:27:2f:eb:
         5c:bb:25:68:2c:02:23:9d:5f:ee:7d:1b:65:ac:aa:00:db:74:
         d9:bd:b7:de:21:72:9b:57:e1:37:b4:2b:ef:11:36:67:2d:da:
         5a:2c:6e:f2:c7:ca:54:6c:51:cb:4e:7c:00:89:39:f7:ca:fe:
         86:d8:ff:81
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUIqNEIR4W/Sv4Hb7MTDx3nh/+TBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA4MTEwODE5MDFaFw0yNzA4MTAwODI0MDFaMDMxMTAvBgNV
BAMTKEE0MjI5QjA0M0I4MUQ2NTc1REFFMTFEQzUwQzBCN0Q2OTZENDcyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y0icRv9fytl9wB4cng9ois9/
lheH2rmvHiHKELyV55gQiaw9lMHYTgDGouAHZLwUjFBHlLDjmByGBlX22XIZWN9E
8KZLBug66SdNjnqqhA5gwbsMwzi+LXzuZV8SB/2M6c61fan8cgb2hyaMAuQjncL9
fR8M0SWsyfzs44f0IAUjfwQvetpa7qJAAdQwFmkaUzQUtrKPepf0Y8AY3/qxcIFS
oSd3TU6It/fLpZrEZTZXIj9PyUtWQLKJhA+2zKNAVaVCaES1fqkXsg/wovv9Rj4y
7nblFOq0stmn8ET9knPxoph9PXCCp4YqpfTb++kfDCIMMtat7O3vlGkO1OMnAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUpCKbBDuB1lddrhHcUMC31pbUci8wHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RBLzAvMzEzMDMzMmUzMjMz
MmUzMTMxMzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM1Mzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnF28wDQYJKoZIhvcNAQELBQADggEBABszp/xhMYig1S9NnEN+HYve
9XTFdhoZ0PM1YA5Je0ZAuIImy4NKjaQo1aL3Yj5ujrehISVpQezND/Su1D45QYy2
q4RVQX1mi9X41yIeGcIXrEKBRVU2zMo5qCqsgQ1AmWYGBAduaKcIri7GrgTr6PbO
wiaiGfpq+evIoPZeF9tj/9uFmQ3v49yINktI4V74UBWB2GHLFzeTG4dYFBiyLTYA
b++MAvpw1ruBuZO1p9bJrRMnnYj8vazDxU7fU2Ze/kbYbycv61y7JWgsAiOdX+59
G2WsqgDbdNm9t94hcptX4Te0K+8RNmct2losbvLHylRsUctOfACJOffK/obY/4E=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:06 2026 by rpki-client