Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137322e302f32342d3234203d3e20313333393438.roa
File:                     3130332e3139372e3137322e302f32342d3234203d3e20313333393438.roa (raw, json)
Hash identifier:          P6ugxgoezf9IFx3brXBiWhiBJBuhpwWCqegX5sJmcpY=
Subject key identifier:   26:8C:25:6D:6E:79:6B:47:6B:08:1F:CF:37:0C:18:0B:1F:E6:9B:7D
Certificate issuer:       /CN=19781CD1C1CF520700CFF8065E6DE616BA1B3428
Certificate serial:       30F77A4F1083681B88E3F8ED739D1A8BDABF7413
Authority key identifier: 19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137322e302f32342d3234203d3e20313333393438.roa
Signing time:             Mon 11 May 2026 17:36:38 +0000
ROA not before:           Mon 11 May 2026 17:31:38 +0000
ROA not after:            Mon 10 May 2027 17:36:38 +0000
asID:                     133948
IP address blocks:        103.197.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.crl
                          rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f7:7a:4f:10:83:68:1b:88:e3:f8:ed:73:9d:1a:8b:da:bf:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19781CD1C1CF520700CFF8065E6DE616BA1B3428
        Validity
            Not Before: May 11 17:31:38 2026 GMT
            Not After : May 10 17:36:38 2027 GMT
        Subject: CN=268C256D6E796B476B081FCF370C180B1FE69B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:76:22:55:e0:37:7d:49:4f:04:34:b8:10:
                    4f:33:0b:2b:75:3f:c9:a5:ce:c0:32:54:da:de:ea:
                    2f:72:1d:b5:45:cd:df:cd:c9:e6:50:bf:b8:ba:91:
                    a5:b6:a6:4f:46:2a:b8:3f:51:b8:57:36:36:e8:19:
                    39:8d:9d:4c:62:5d:f3:53:e0:5b:a8:f9:1d:01:56:
                    d7:44:14:c4:bf:bf:30:93:25:7f:e7:42:c1:3c:da:
                    74:05:fc:cd:bf:d8:e4:41:cb:11:3f:d5:db:bc:6f:
                    23:9f:92:1d:30:29:49:35:fc:20:9e:1a:1c:3e:03:
                    f5:20:b1:5d:e7:a0:61:9e:e6:96:71:22:5b:34:50:
                    b0:cf:dd:a1:20:ed:ca:66:09:25:a9:35:77:88:73:
                    f0:36:d3:71:40:5a:ec:fa:2a:94:27:48:9f:50:18:
                    62:34:74:27:89:ca:4d:22:59:dc:56:7e:e1:11:1b:
                    96:8f:cf:f8:ba:71:61:e3:e8:a2:72:fa:76:a8:20:
                    94:cc:0b:95:33:1c:95:98:ff:aa:a3:57:54:57:1f:
                    b8:3f:13:03:89:ad:3e:29:10:58:5e:6f:d4:b3:4b:
                    e5:2b:e8:2e:cf:95:7d:88:a7:3a:f9:cc:93:c4:8e:
                    bf:40:b3:28:dc:60:d6:b4:31:1b:ab:1e:22:48:5e:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:25:6D:6E:79:6B:47:6B:08:1F:CF:37:0C:18:0B:1F:E6:9B:7D
            X509v3 Authority Key Identifier:
                keyid:19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137322e302f32342d3234203d3e20313333393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:ab:63:77:5f:ae:72:c9:4b:a4:dc:d0:c1:6a:28:4a:b0:
         cf:ad:b4:6a:cf:68:b9:36:e0:b5:fa:e0:23:db:68:e6:19:26:
         c4:2a:5f:e3:3e:48:10:42:23:a6:40:e5:8c:29:51:93:77:21:
         ea:b7:c2:54:67:aa:f7:3f:94:09:41:ae:eb:77:80:35:93:71:
         dc:44:f5:6e:dd:ec:f4:4f:59:1f:f9:33:84:69:87:0d:49:96:
         af:28:84:4e:a2:9c:84:41:bd:7f:9c:01:0c:4d:d5:c8:e0:c0:
         d5:c1:e6:79:5a:fc:fd:22:a1:f9:ac:d4:74:ee:43:e6:f3:c1:
         f3:f5:cf:9e:be:75:91:bf:64:f8:bd:aa:1f:d9:ee:b7:a7:ec:
         82:6e:c0:7f:5a:aa:37:61:fa:98:fd:25:8a:db:24:41:c2:48:
         be:db:d3:de:1f:78:b7:23:c2:b7:a4:a8:de:e1:df:34:f8:96:
         60:91:1c:7d:3f:36:c6:c9:a0:4e:94:67:56:0b:aa:76:de:f4:
         eb:2e:2a:2f:6e:ee:25:a1:77:0a:7c:61:cd:d4:0d:fc:95:90:
         6c:9a:d5:62:43:e0:21:a6:64:97:95:c4:00:7a:1b:91:64:22:
         57:ba:7f:2d:18:12:20:fd:f3:42:e6:16:e9:ff:93:0a:2d:41:
         f7:73:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:08 2026 by rpki-client