Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa
File:                     3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          VQlT7hFtqPGajT67XxCOTVwXp/UmsAH9JUezdXTgoDc=
Subject key identifier:   38:E3:7A:B9:7E:72:FC:2F:A5:CD:DC:88:C7:0B:50:0E:0A:86:8F:63
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       11903FEA252AC5F097631AE3AB6F1B621525E5B5
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:57:01 +0000
ROA not before:           Mon 11 May 2026 17:52:01 +0000
ROA not after:            Mon 10 May 2027 17:57:01 +0000
asID:                     21859
IP address blocks:        202.148.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:3f:ea:25:2a:c5:f0:97:63:1a:e3:ab:6f:1b:62:15:25:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:52:01 2026 GMT
            Not After : May 10 17:57:01 2027 GMT
        Subject: CN=38E37AB97E72FC2FA5CDDC88C70B500E0A868F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:72:0b:a4:71:a6:36:02:dc:19:1b:53:dc:
                    0f:74:a8:9a:97:82:8b:2e:ff:5b:cb:30:3f:92:03:
                    d1:39:dd:9c:e2:e1:68:ee:6f:b2:f1:aa:57:6e:a2:
                    88:af:93:4a:45:ee:0b:29:c4:5c:03:b0:df:b9:b0:
                    ae:ed:c5:c4:bf:a9:5d:61:d2:88:de:78:2d:0c:63:
                    5c:76:eb:60:b4:40:54:db:f5:65:7d:c4:e0:d5:af:
                    4e:3e:81:88:50:74:7f:6b:3d:84:35:87:48:ac:cf:
                    6f:46:aa:8a:ee:c8:b0:14:16:07:ec:c5:a7:9f:48:
                    66:f1:f7:36:ac:db:a2:2f:6e:73:0f:0f:4d:83:ac:
                    12:e0:8e:75:83:06:2c:9c:cd:74:90:d0:b6:a0:29:
                    b6:7d:3e:cd:8a:51:c7:a8:aa:09:73:07:a4:a4:10:
                    99:70:09:fe:1a:13:d5:a5:dd:e4:07:ec:c8:6f:97:
                    00:9c:e7:32:a4:4a:37:1a:f0:d5:30:cd:a6:bb:2a:
                    19:d4:ff:02:cd:25:91:16:6f:41:ce:51:df:ab:88:
                    41:40:ac:5a:a6:c4:ea:08:18:b1:ae:aa:a9:09:2d:
                    b5:7a:65:6e:34:26:5f:02:74:b8:ca:ed:c6:e7:ff:
                    7e:1f:a5:a9:84:35:9c:28:67:43:4c:28:83:f3:02:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:7A:B9:7E:72:FC:2F:A5:CD:DC:88:C7:0B:50:0E:0A:86:8F:63
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3230322e3134382e3231362e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:b1:69:73:fb:db:69:80:44:0a:14:f8:be:87:19:5d:a1:
         76:72:9d:e6:ed:ec:bf:fe:3a:5c:cf:08:9b:e2:85:da:f0:9c:
         7c:1f:54:04:a0:5c:cf:7e:a1:97:44:5d:eb:79:44:92:b6:2d:
         53:c1:60:c2:9e:73:86:b6:aa:ed:05:0d:b4:db:db:25:3f:cb:
         a0:cc:a3:49:43:14:14:2e:59:02:bc:31:81:38:96:38:9a:fd:
         98:69:df:0d:d2:13:72:7a:8e:23:be:22:17:b9:c7:84:d6:59:
         51:d4:df:9d:b3:b1:f0:c9:bc:b3:ec:3a:7a:01:4a:c3:8e:bf:
         6c:91:d4:fa:81:b0:81:92:d2:06:61:44:38:fe:7a:02:60:08:
         aa:53:3d:e4:db:45:f5:a8:78:18:fb:6a:68:0f:ca:4c:f8:d9:
         15:ff:bd:01:d5:50:fe:c5:4b:a4:9c:ad:04:30:f1:09:c9:67:
         d7:0a:30:e6:f8:6a:f6:1c:9c:92:6c:90:a5:87:ef:97:5a:a3:
         e6:63:64:76:9d:e2:d9:b4:9c:b1:13:a2:4f:5f:5a:1a:6d:48:
         37:60:54:a5:de:8e:c6:37:7b:0a:a6:2c:0f:a4:7d:dd:e0:e8:
         be:5f:27:38:6c:e4:ab:30:3e:b7:33:a9:e1:96:45:fa:5b:d4:
         67:54:e2:ac
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUEZA/6iUqxfCXYxrjq28bYhUl5bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA1MTExNzUyMDFaFw0yNzA1MTAxNzU3MDFaMDMxMTAvBgNV
BAMTKDM4RTM3QUI5N0U3MkZDMkZBNUNEREM4OEM3MEI1MDBFMEE4NjhGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa3HILpHGmNgLcGRtT3A90qJqX
gosu/1vLMD+SA9E53Zzi4Wjub7Lxqlduooivk0pF7gspxFwDsN+5sK7txcS/qV1h
0ojeeC0MY1x262C0QFTb9WV9xODVr04+gYhQdH9rPYQ1h0isz29GqoruyLAUFgfs
xaefSGbx9zas26IvbnMPD02DrBLgjnWDBiyczXSQ0LagKbZ9Ps2KUceoqglzB6Sk
EJlwCf4aE9Wl3eQH7MhvlwCc5zKkSjca8NUwzaa7KhnU/wLNJZEWb0HOUd+riEFA
rFqmxOoIGLGuqqkJLbV6ZW40Jl8CdLjK7cbn/34fpamENZwoZ0NMKIPzApPbAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUOON6uX5y/C+lzdyIxwtQDgqGj2MwHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG
ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xPVUQvMC8zMjMwMzIy
ZTMxMzQzODJlMzIzMTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTM4MzUz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcqU2DANBgkqhkiG9w0BAQsFAAOCAQEAnJqxaXP722mARAoU
+L6HGV2hdnKd5u3sv/46XM8Im+KF2vCcfB9UBKBcz36hl0Rd63lEkrYtU8Fgwp5z
hraq7QUNtNvbJT/LoMyjSUMUFC5ZArwxgTiWOJr9mGnfDdITcnqOI74iF7nHhNZZ
UdTfnbOx8Mm8s+w6egFKw46/bJHU+oGwgZLSBmFEOP56AmAIqlM95NtF9ah4GPtq
aA/KTPjZFf+9AdVQ/sVLpJytBDDxCcln1wow5vhq9hyckmyQpYfvl1qj5mNkdp3i
2bScsROiT19aGm1IN2BUpd6Oxjd7CqYsD6R93eDovl8nOGzkqzA+tzOp4ZZF+lvU
Z1TirA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:18 2026 by rpki-client