Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa
File:                     3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa (raw, json)
Hash identifier:          RZ7kBT16+wE8seH0d5q0kxhk2j29Dq8UYgJwAnrOu+4=
Subject key identifier:   76:A0:7B:96:DE:69:66:C0:D9:EC:6F:2E:19:84:09:FE:45:89:A7:8D
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       7900EF3EEB6A1750D0F24854BD92E1291135B3BE
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa
Signing time:             Mon 11 May 2026 17:56:39 +0000
ROA not before:           Mon 11 May 2026 17:51:39 +0000
ROA not after:            Mon 10 May 2027 17:56:39 +0000
asID:                     150288
IP address blocks:        103.129.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:00:ef:3e:eb:6a:17:50:d0:f2:48:54:bd:92:e1:29:11:35:b3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:51:39 2026 GMT
            Not After : May 10 17:56:39 2027 GMT
        Subject: CN=76A07B96DE6966C0D9EC6F2E198409FE4589A78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:82:6f:f9:9d:b7:68:d6:61:7d:ce:69:cf:
                    97:4b:ff:3e:96:24:4b:71:cb:c1:e2:48:10:43:1f:
                    1d:00:c0:3e:fb:a4:04:d0:ed:e4:bb:22:ee:2e:c2:
                    f3:c6:59:d3:32:4a:4f:47:3e:86:a6:7a:7c:ee:95:
                    2c:47:ea:c3:dd:2d:91:ec:01:60:20:13:b0:32:5d:
                    c7:d7:3f:67:d6:24:52:9b:50:48:8d:a7:92:9a:01:
                    46:b1:99:d9:ea:c4:0b:97:e7:67:65:8a:6b:9f:31:
                    13:01:f8:9e:6e:58:41:d8:16:69:6d:3b:7a:bc:9d:
                    36:ed:11:81:79:d7:3e:73:35:50:72:f0:fe:eb:03:
                    3c:bd:4f:7c:a4:34:63:71:99:24:e3:09:0c:65:1d:
                    6a:37:18:66:41:df:d4:da:3a:8e:de:6a:b7:54:55:
                    0c:ad:3f:18:32:7f:fc:bc:f6:11:f8:4d:fd:fc:5c:
                    4d:c1:66:35:7a:40:d2:5e:5b:a5:2c:d8:a5:76:23:
                    d7:c0:01:b1:8f:1c:b1:80:b5:8c:92:31:af:87:78:
                    6f:7d:d2:26:65:f3:ad:dd:cd:2b:5e:14:5c:33:f1:
                    9c:87:3b:fa:aa:6c:5b:24:b1:8e:0a:cb:b3:5a:e5:
                    a3:e4:a4:aa:9e:b6:f5:3c:2c:09:3a:79:8b:8e:ec:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:7B:96:DE:69:66:C0:D9:EC:6F:2E:19:84:09:FE:45:89:A7:8D
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313530323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:1d:16:7a:c9:39:39:61:1a:a9:6c:ff:ce:8b:e2:c2:ff:01:
         62:49:bb:f8:65:96:83:73:8e:43:75:ad:bc:40:1d:9c:8b:ff:
         c9:30:0e:0f:cb:b9:11:65:74:25:c4:e6:f9:5b:c6:62:fe:62:
         63:8a:26:4e:e4:91:7f:3a:e1:f3:b3:c6:d3:9a:2d:9d:3e:e8:
         6b:4e:d6:69:79:1a:74:bc:3a:02:e4:24:08:a8:d5:3b:74:5e:
         ff:31:2a:05:ed:f3:9c:4c:89:eb:50:6b:71:b3:9b:8b:6d:6a:
         f2:b9:ad:c9:4a:d3:6f:ad:a0:69:80:66:d2:82:01:27:62:46:
         f2:ad:e3:9f:28:28:6e:a7:b9:57:dc:8d:41:6b:ed:0b:eb:fd:
         d4:5a:4a:5e:aa:b0:0e:65:a7:6a:48:82:89:b8:09:b5:a0:35:
         48:dc:d0:68:6b:0a:fd:37:2d:5b:68:8b:83:67:5f:17:3e:4f:
         a2:e7:e8:3f:66:71:19:b9:ea:d4:35:e4:5d:6d:dc:ea:64:f6:
         04:1d:fb:87:65:78:33:36:e2:ae:35:10:5b:c8:7c:9a:37:0a:
         eb:26:41:4c:31:49:dc:e1:a3:6f:4b:4c:5e:e0:24:5e:18:c0:
         ec:a5:33:7f:36:ea:4b:b4:55:e4:70:67:cb:62:62:8a:3d:06:
         73:3f:ba:2f
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUeQDvPutqF1DQ8khUvZLhKRE1s74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA1MTExNzUxMzlaFw0yNzA1MTAxNzU2MzlaMDMxMTAvBgNV
BAMTKDc2QTA3Qjk2REU2OTY2QzBEOUVDNkYyRTE5ODQwOUZFNDU4OUE3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3K4Jv+Z23aNZhfc5pz5dL/z6W
JEtxy8HiSBBDHx0AwD77pATQ7eS7Iu4uwvPGWdMySk9HPoamenzulSxH6sPdLZHs
AWAgE7AyXcfXP2fWJFKbUEiNp5KaAUaxmdnqxAuX52dlimufMRMB+J5uWEHYFmlt
O3q8nTbtEYF51z5zNVBy8P7rAzy9T3ykNGNxmSTjCQxlHWo3GGZB39TaOo7eardU
VQytPxgyf/y89hH4Tf38XE3BZjV6QNJeW6Us2KV2I9fAAbGPHLGAtYySMa+HeG99
0iZl863dzSteFFwz8ZyHO/qqbFsksY4Ky7Na5aPkpKqetvU8LAk6eYuO7PvFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUdqB7lt5pZsDZ7G8uGYQJ/kWJp40wHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xPVUQvMC8zMTMwMzMy
ZTMxMzIzOTJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNTMwMzIz
ODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ4GIMA0GCSqGSIb3DQEBCwUAA4IBAQBwHRZ6yTk5YRqp
bP/Oi+LC/wFiSbv4ZZaDc45Dda28QB2ci//JMA4Py7kRZXQlxOb5W8Zi/mJjiiZO
5JF/OuHzs8bTmi2dPuhrTtZpeRp0vDoC5CQIqNU7dF7/MSoF7fOcTInrUGtxs5uL
bWryua3JStNvraBpgGbSggEnYkbyreOfKChup7lX3I1Ba+0L6/3UWkpeqrAOZadq
SIKJuAm1oDVI3NBoawr9Ny1baIuDZ18XPk+i5+g/ZnEZuerUNeRdbdzqZPYEHfuH
ZXgzNuKuNRBbyHyaNwrrJkFMMUnc4aNvS0xe4CReGMDspTN/NupLtFXkcGfLYmKK
PQZzP7ov
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:51 2026 by rpki-client