Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e203231383539.roa
File:                     3232332e32362e382e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          YbHuVrtrdZu1dhcHDV88cbkWMaQs42zmk+vjdbNYrQM=
Subject key identifier:   77:61:91:A2:E2:64:CD:D9:40:37:0A:07:EF:93:30:A4:DC:31:AC:45
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       25527D335C425B90061B6DA9AA1893FA736209EE
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:56:39 +0000
ROA not before:           Mon 11 May 2026 17:51:39 +0000
ROA not after:            Mon 10 May 2027 17:56:39 +0000
asID:                     21859
IP address blocks:        223.26.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:52:7d:33:5c:42:5b:90:06:1b:6d:a9:aa:18:93:fa:73:62:09:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:51:39 2026 GMT
            Not After : May 10 17:56:39 2027 GMT
        Subject: CN=776191A2E264CDD940370A07EF9330A4DC31AC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:d9:ef:c1:a5:a8:b5:e3:20:b5:de:55:fb:
                    33:74:2f:dc:1e:e3:f9:ea:e5:17:ff:fe:e7:32:c2:
                    23:19:5a:88:1f:c6:e4:dc:93:bd:cb:53:95:ae:db:
                    e0:b7:cd:77:e6:8e:d4:35:14:a4:89:b4:38:67:e4:
                    e0:84:32:68:d8:93:92:6d:48:90:cc:8b:00:7c:0e:
                    b7:46:0b:68:cc:4e:a7:a1:63:69:60:98:f2:2d:8e:
                    a2:88:dc:25:6a:fa:f5:76:0b:80:92:c8:99:29:ba:
                    c6:96:46:18:c9:60:74:76:d8:8b:c4:6e:21:3c:34:
                    08:eb:50:8a:b2:87:81:a7:33:53:01:31:bb:00:9b:
                    93:a7:af:8a:30:09:1c:16:5d:5e:69:fd:48:7f:9b:
                    ab:c8:f1:15:d4:04:a8:b7:b8:88:19:ec:aa:71:42:
                    68:c4:9a:e9:9c:3c:55:e5:3b:8a:ba:48:88:1a:b8:
                    4d:60:ff:68:62:44:2b:d4:b2:8c:f9:0d:e7:75:bc:
                    77:e2:7b:71:72:ff:5e:7e:7c:9d:a2:89:ee:1c:4b:
                    f6:d4:1e:67:9d:bb:ec:49:4a:01:36:c9:fa:5b:32:
                    38:9f:bd:6d:73:81:89:e3:cc:df:70:ef:7e:f6:8b:
                    cb:52:c2:b3:8a:d7:6d:03:21:b7:52:04:08:77:0b:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:61:91:A2:E2:64:CD:D9:40:37:0A:07:EF:93:30:A4:DC:31:AC:45
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3232332e32362e382e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:22:2f:31:5f:4c:12:a3:36:93:c0:6b:3e:a0:e7:00:e1:02:
         35:96:9d:f5:0f:2d:22:90:6d:a8:18:12:1f:e0:64:57:b8:37:
         3f:2f:5e:26:23:2a:82:b1:c0:3e:3b:54:c1:a2:bf:ff:46:23:
         4d:36:69:05:46:27:42:c0:b4:52:6e:24:62:ee:30:48:70:07:
         21:f6:32:9e:be:49:1a:c7:5b:c0:cd:ee:f7:0d:df:48:a4:71:
         d2:75:84:30:16:17:c9:52:01:38:a0:e8:85:99:0c:38:f4:7d:
         f2:89:ad:45:91:b3:39:c4:f2:33:bb:d0:8f:b9:cd:9c:ae:9e:
         9c:51:76:8b:f6:24:71:58:b8:6c:71:14:8e:ed:1e:80:89:63:
         c0:41:77:cd:5f:9c:81:29:eb:01:90:92:cc:23:e5:dc:c3:29:
         a9:7d:5e:a7:bc:4e:5e:47:10:02:c8:15:e7:cb:ac:af:ea:d5:
         30:ec:f5:e1:0a:f4:5a:0c:62:34:f3:ef:53:68:f1:a7:da:ee:
         49:62:1b:fd:68:16:2c:a5:c0:ea:ae:46:4d:5a:11:1c:e0:d9:
         9c:94:c1:29:ef:bb:12:63:05:a3:6d:00:a7:7b:96:14:aa:38:
         26:19:29:9a:8e:ad:fe:58:2f:ca:59:c2:d2:e0:f0:9a:c1:45:
         cb:17:71:f1
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUJVJ9M1xCW5AGG22pqhiT+nNiCe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA1MTExNzUxMzlaFw0yNzA1MTAxNzU2MzlaMDMxMTAvBgNV
BAMTKDc3NjE5MUEyRTI2NENERDk0MDM3MEEwN0VGOTMzMEE0REMzMUFDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqn9nvwaWoteMgtd5V+zN0L9we
4/nq5Rf//ucywiMZWogfxuTck73LU5Wu2+C3zXfmjtQ1FKSJtDhn5OCEMmjYk5Jt
SJDMiwB8DrdGC2jMTqehY2lgmPItjqKI3CVq+vV2C4CSyJkpusaWRhjJYHR22IvE
biE8NAjrUIqyh4GnM1MBMbsAm5Onr4owCRwWXV5p/Uh/m6vI8RXUBKi3uIgZ7Kpx
QmjEmumcPFXlO4q6SIgauE1g/2hiRCvUsoz5Ded1vHfie3Fy/15+fJ2iie4cS/bU
Hmedu+xJSgE2yfpbMjifvW1zgYnjzN9w7372i8tSwrOK120DIbdSBAh3C4JxAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUd2GRouJkzdlANwoH75MwpNwxrEUwHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4Ze
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lDTE9VRC8wLzMyMzIzMzJl
MzIzNjJlMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQB3xoIMA0GCSqGSIb3DQEBCwUAA4IBAQBYIi8xX0wSozaTwGs+oOcA4QI1
lp31Dy0ikG2oGBIf4GRXuDc/L14mIyqCscA+O1TBor//RiNNNmkFRidCwLRSbiRi
7jBIcAch9jKevkkax1vAze73Dd9IpHHSdYQwFhfJUgE4oOiFmQw49H3yia1FkbM5
xPIzu9CPuc2crp6cUXaL9iRxWLhscRSO7R6AiWPAQXfNX5yBKesBkJLMI+Xcwymp
fV6nvE5eRxACyBXny6yv6tUw7PXhCvRaDGI08+9TaPGn2u5JYhv9aBYspcDqrkZN
WhEc4NmclMEp77sSYwWjbQCne5YUqjgmGSmajq3+WC/KWcLS4PCawUXLF3Hx
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:16 2026 by rpki-client