Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/34332e3235312e35362e302f32322d3234203d3e2037343833.roa
File:                     34332e3235312e35362e302f32322d3234203d3e2037343833.roa (raw, json)
Hash identifier:          akLn/vvosmbU91+7u21mqe2nHpctgoYjOCx8eXUIBew=
Subject key identifier:   57:A7:FB:8A:9F:E9:FC:72:EF:47:3B:25:F4:85:1B:0F:23:8E:9D:55
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       1F5AB496C76906B33AE091B8D37A8B18EBCFCDDF
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/34332e3235312e35362e302f32322d3234203d3e2037343833.roa
Signing time:             Mon 11 May 2026 17:36:51 +0000
ROA not before:           Mon 11 May 2026 17:31:51 +0000
ROA not after:            Mon 10 May 2027 17:36:51 +0000
asID:                     7483
IP address blocks:        43.251.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:b4:96:c7:69:06:b3:3a:e0:91:b8:d3:7a:8b:18:eb:cf:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:31:51 2026 GMT
            Not After : May 10 17:36:51 2027 GMT
        Subject: CN=57A7FB8A9FE9FC72EF473B25F4851B0F238E9D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:a4:5e:83:94:83:4e:48:8b:d5:2b:e7:d7:
                    8d:e4:b4:35:55:b0:e1:f3:07:8a:54:01:7e:ef:00:
                    12:69:40:83:c9:a7:b6:67:fc:42:9c:77:2d:33:ca:
                    50:a0:2d:10:d4:62:91:5a:94:4c:58:90:99:7b:88:
                    51:8c:65:fd:1b:77:2f:45:bb:fb:d1:f7:3e:d4:5d:
                    c8:eb:96:b9:8b:f3:35:f2:d2:61:53:be:8a:31:f4:
                    f4:8d:1d:df:ac:51:7f:21:8e:a5:cd:59:94:13:8f:
                    15:a3:23:d2:ac:d3:9a:1f:72:8d:ac:c4:d8:01:17:
                    45:21:67:29:a0:2f:b8:b7:77:aa:66:8c:a3:a6:db:
                    4f:40:5e:c4:a3:96:fa:dd:d0:a6:3e:5f:f4:5f:fa:
                    90:69:7e:c6:42:c5:c3:0f:37:21:21:db:3e:87:71:
                    b9:ed:a5:25:70:fd:e8:75:e2:56:ab:3a:06:64:67:
                    ba:89:c1:22:33:77:7f:87:04:c4:29:73:80:d4:64:
                    63:8e:b6:aa:6f:97:3f:6e:05:10:9f:2a:4a:53:59:
                    fa:92:6c:c7:b7:7d:f3:68:ed:8c:ca:26:df:ea:5a:
                    a6:56:09:a6:5c:3d:c9:51:6f:9b:a0:29:db:9f:ac:
                    23:98:7c:6f:5d:99:c6:3e:f9:f8:14:be:68:8d:2b:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:FB:8A:9F:E9:FC:72:EF:47:3B:25:F4:85:1B:0F:23:8E:9D:55
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/34332e3235312e35362e302f32322d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:47:ff:4b:c8:8e:6c:d1:f6:0c:e7:a4:d5:cc:d2:3b:50:
         48:06:c9:ab:58:0c:cc:d5:8c:b0:46:7b:12:88:66:7f:03:f5:
         ec:b6:27:2b:5e:dc:2e:6d:a6:19:08:78:08:7e:40:ff:de:64:
         26:f0:ff:f6:a3:6c:9d:9f:fb:cc:f7:cb:b3:7f:cb:0f:37:75:
         74:f9:78:04:1f:90:e3:5d:75:c3:bb:89:67:35:9f:dd:06:23:
         c5:9e:df:ce:5f:2e:fd:c9:85:76:ac:54:92:8f:93:50:a6:3b:
         2c:e2:3e:7d:d3:d7:cc:f1:ef:88:99:31:66:1c:f5:98:11:a7:
         47:d9:4d:fb:19:26:23:55:0c:86:6f:12:0a:0a:bf:be:5d:ba:
         d4:c6:54:7a:2f:9e:97:bd:de:5a:29:16:e5:7e:6d:2c:06:16:
         59:16:cb:a0:89:8a:73:e6:11:e8:e4:55:ae:b9:53:d3:e9:77:
         c9:d0:31:7e:ea:16:16:fd:17:b2:92:bd:9b:cf:f4:70:fc:c9:
         33:c5:dc:70:a9:34:c6:8e:6c:0c:dd:ad:a3:98:3d:48:bc:55:
         a3:9c:97:ae:9c:c3:72:43:39:37:16:17:a2:a8:ec:a7:04:9a:
         8c:25:74:bc:8b:2d:38:7a:ee:c5:2b:d1:54:61:c4:fc:5b:f9:
         06:f1:70:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:04 2026 by rpki-client