Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136302e302f32322d3232203d3e20323134373636.roa
File:                     3130332e3132392e3136302e302f32322d3232203d3e20323134373636.roa (raw, json)
Hash identifier:          nlDNs5Ke5x3PXL/v1m7KjqZhOZITz9KjuM3P2ib3jkY=
Subject key identifier:   52:52:41:9D:14:EF:D1:86:30:39:FE:0F:9E:7D:B2:03:03:B8:28:3B
Certificate issuer:       /CN=A7A7EEF7E5627111AA1595BF2BD416299AA94638
Certificate serial:       378946D8E9030FBC934D9EE969F054E2D3F2DA23
Authority key identifier: A7:A7:EE:F7:E5:62:71:11:AA:15:95:BF:2B:D4:16:29:9A:A9:46:38
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136302e302f32322d3232203d3e20323134373636.roa
Signing time:             Mon 11 May 2026 17:37:25 +0000
ROA not before:           Mon 11 May 2026 17:32:25 +0000
ROA not after:            Mon 10 May 2027 17:37:25 +0000
asID:                     214766
IP address blocks:        103.129.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.crl
                          rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:46:d8:e9:03:0f:bc:93:4d:9e:e9:69:f0:54:e2:d3:f2:da:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A7EEF7E5627111AA1595BF2BD416299AA94638
        Validity
            Not Before: May 11 17:32:25 2026 GMT
            Not After : May 10 17:37:25 2027 GMT
        Subject: CN=5252419D14EFD1863039FE0F9E7DB20303B8283B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:76:9b:32:1c:cc:73:14:8f:ea:d0:ac:8d:
                    17:54:d2:29:8b:14:a6:07:1b:42:f9:b3:38:32:b0:
                    96:17:a4:83:05:02:51:f1:1a:71:99:6e:2d:18:ea:
                    38:f7:b6:de:24:fb:98:20:74:e2:60:f8:7a:2d:37:
                    c2:2d:05:39:aa:aa:9c:24:ba:32:9e:a8:30:b4:0e:
                    6e:c9:ce:3f:6e:81:c0:d3:45:28:65:a7:c6:b5:57:
                    cc:71:8a:a9:90:e6:dd:a1:de:6f:73:f1:aa:0e:42:
                    87:2c:8a:1f:88:2b:e1:57:c5:3d:d2:55:d2:f2:73:
                    29:b8:dc:38:3b:5e:30:3e:5e:3a:26:5f:42:9d:54:
                    a3:15:4e:56:cd:75:2a:36:f6:df:d9:57:4d:32:a1:
                    56:72:a5:98:79:5d:4e:70:f4:ac:89:37:e2:10:1f:
                    20:19:28:38:61:9e:85:39:37:99:6b:f9:d1:7a:a1:
                    d9:b2:08:a8:84:5c:43:a2:45:4e:15:81:d0:4c:ec:
                    a3:9e:10:ba:c4:e5:c9:dc:79:76:b3:b5:c5:be:e0:
                    92:9c:0f:f5:c2:15:cc:bd:a9:cb:01:22:48:7e:6c:
                    90:4d:94:be:0c:a7:3d:60:38:35:07:9b:21:88:99:
                    7b:09:81:7a:05:1e:3c:9b:e5:7a:4d:58:60:22:55:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:41:9D:14:EF:D1:86:30:39:FE:0F:9E:7D:B2:03:03:B8:28:3B
            X509v3 Authority Key Identifier:
                keyid:A7:A7:EE:F7:E5:62:71:11:AA:15:95:BF:2B:D4:16:29:9A:A9:46:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136302e302f32322d3232203d3e20323134373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:10:98:29:a0:53:ec:bf:2e:d8:43:73:6e:7b:a1:10:9e:fd:
         cb:ce:7b:30:45:85:3a:95:f8:20:b1:fb:b8:98:b8:c2:c3:a0:
         2e:5a:c5:cd:ff:24:d0:b2:fa:f2:2c:34:96:be:41:df:df:be:
         0f:41:be:84:c8:88:c2:14:3a:93:5f:e8:8a:a6:7e:3f:2b:49:
         cf:32:63:7f:5e:5b:76:5b:42:08:38:9a:b6:46:a8:4d:3e:35:
         ae:40:e1:22:5f:b4:83:6f:cc:da:db:47:49:ff:e0:2a:47:75:
         56:cd:9c:32:df:e8:a0:8c:fe:0a:71:2a:f8:d4:2c:82:31:84:
         6e:23:bc:94:7f:0e:b9:be:78:d9:74:b7:7e:87:4e:4c:00:ae:
         9e:ba:8a:3d:c1:97:48:fd:94:90:b4:30:d7:8c:ab:13:d4:68:
         dc:a2:3b:e3:1b:9a:de:e4:d2:72:59:f5:23:34:f1:9c:88:6d:
         ad:c4:51:7d:4e:44:9e:7f:97:2d:46:eb:16:67:bf:8c:04:d0:
         e0:d4:3a:21:db:fe:7d:ec:54:91:6e:05:ba:11:a8:c5:9e:8d:
         57:50:2c:8e:9b:5d:e1:36:65:f2:11:19:d9:12:48:dd:49:ee:
         05:58:a4:cc:d7:58:1b:60:6a:15:2e:63:2b:a3:52:2d:82:9b:
         fe:28:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:34 2026 by rpki-client