Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASIACLOUD/0/3130332e3133352e3131362e302f32322d3234203d3e203231383539.roa
File:                     3130332e3133352e3131362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier:          BM7CPZacqft69vTRduxwNjpxF/uqn2mu1JESb3s3gws=
Subject key identifier:   C6:E1:30:F6:E1:40:12:BB:A9:49:B4:74:21:FD:AC:CB:07:D1:1F:34
Certificate issuer:       /CN=93D669EECC68CD9CE817D7976BADC107AB3C5851
Certificate serial:       694DFC2A22D378DE00488FEDA2B478F7C7770BDE
Authority key identifier: 93:D6:69:EE:CC:68:CD:9C:E8:17:D7:97:6B:AD:C1:07:AB:3C:58:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93D669EECC68CD9CE817D7976BADC107AB3C5851.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/3130332e3133352e3131362e302f32322d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:56:45 +0000
ROA not before:           Mon 11 May 2026 17:51:45 +0000
ROA not after:            Mon 10 May 2027 17:56:45 +0000
asID:                     21859
IP address blocks:        103.135.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/93D669EECC68CD9CE817D7976BADC107AB3C5851.crl
                          rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/93D669EECC68CD9CE817D7976BADC107AB3C5851.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93D669EECC68CD9CE817D7976BADC107AB3C5851.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4d:fc:2a:22:d3:78:de:00:48:8f:ed:a2:b4:78:f7:c7:77:0b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D669EECC68CD9CE817D7976BADC107AB3C5851
        Validity
            Not Before: May 11 17:51:45 2026 GMT
            Not After : May 10 17:56:45 2027 GMT
        Subject: CN=C6E130F6E14012BBA949B47421FDACCB07D11F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:86:2f:91:23:63:da:43:da:c6:b8:73:46:
                    c9:a3:ba:06:22:e1:86:be:c9:7f:a0:15:dd:e1:f7:
                    43:c1:c8:99:70:7c:2e:16:fc:8a:85:99:c1:f4:2b:
                    8a:f8:ea:c4:0e:e3:cc:50:0a:ec:8a:5c:df:0a:75:
                    76:3f:f1:fd:a1:b3:6e:7b:34:1d:c8:30:6c:41:9e:
                    df:fa:78:06:6f:b3:45:77:d7:12:e9:b9:ff:fd:9d:
                    7f:af:9a:ce:7e:1a:43:7d:c9:6c:ff:8c:13:6a:69:
                    2c:b3:0e:9a:d8:43:ca:c6:0e:01:2c:65:d9:ec:d8:
                    1b:6a:d8:48:bd:0f:47:a9:ee:92:7e:ea:2b:69:b6:
                    07:f4:4a:30:ac:fb:be:b6:fb:41:7a:df:4b:91:23:
                    84:57:40:90:22:cb:3c:11:a6:5a:48:f1:e7:41:c6:
                    0f:1e:a0:67:f2:d4:e9:e0:4e:26:f0:32:e9:81:90:
                    45:c9:f7:12:4c:cd:83:3f:49:f6:6a:16:90:2c:b8:
                    ba:4f:a5:b3:68:20:43:86:45:4d:1c:39:c6:61:da:
                    b4:b2:41:26:a4:37:3a:78:fb:3b:48:01:6b:d0:62:
                    0c:c2:f1:66:38:2e:82:4c:0e:36:2a:a9:28:e4:ee:
                    ff:ff:9c:b1:90:02:3c:76:03:de:1d:e4:ad:74:d6:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:30:F6:E1:40:12:BB:A9:49:B4:74:21:FD:AC:CB:07:D1:1F:34
            X509v3 Authority Key Identifier:
                keyid:93:D6:69:EE:CC:68:CD:9C:E8:17:D7:97:6B:AD:C1:07:AB:3C:58:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/93D669EECC68CD9CE817D7976BADC107AB3C5851.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93D669EECC68CD9CE817D7976BADC107AB3C5851.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASIACLOUD/0/3130332e3133352e3131362e302f32322d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:ff:a0:2d:9d:87:e4:fb:26:11:ed:d6:d1:41:84:a2:8c:96:
         43:9b:e2:7e:f7:41:70:64:f9:8b:53:d7:af:3d:d1:c1:d3:67:
         e7:5b:e9:e0:8d:ce:d0:23:a6:d7:c1:0d:29:4f:bf:35:45:88:
         7c:4f:45:48:57:29:e3:36:d4:b8:29:aa:de:ec:c1:37:35:84:
         54:11:a2:fe:48:04:31:0c:3c:7d:47:07:cd:7b:fa:27:5e:8d:
         46:a5:8c:bc:aa:33:3e:97:c8:d3:0e:b7:76:38:f1:d3:3e:e9:
         d5:50:0a:14:5c:56:b1:67:d7:07:aa:41:56:d9:11:1a:b8:bd:
         13:50:e9:41:f8:b0:a8:10:f1:aa:a3:0d:74:df:52:76:d9:cb:
         cb:b6:01:d4:f8:7d:5f:2c:14:9a:91:bc:aa:36:12:64:0a:da:
         fa:9d:38:59:94:da:c9:fb:d4:1b:2c:a7:71:90:8f:37:f8:fa:
         37:99:63:d7:e2:5d:3f:16:b5:af:1a:11:ba:9f:01:14:e9:cd:
         c5:85:ca:db:d1:a3:dd:a5:25:8b:a4:e3:fb:22:7d:b1:a2:15:
         24:e3:b5:2a:19:d7:9e:62:5d:da:33:d0:1f:ac:a1:6a:56:90:
         1e:48:f1:eb:6a:da:22:ac:98:55:6e:20:46:e7:ef:ab:8c:93:
         21:63:7c:86
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUaU38KiLTeN4ASI/torR498d3C94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNENjY5RUVDQzY4Q0Q5Q0U4MTdENzk3NkJBREMxMDdB
QjNDNTg1MTAeFw0yNjA1MTExNzUxNDVaFw0yNzA1MTAxNzU2NDVaMDMxMTAvBgNV
BAMTKEM2RTEzMEY2RTE0MDEyQkJBOTQ5QjQ3NDIxRkRBQ0NCMDdEMTFGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkIYvkSNj2kPaxrhzRsmjugYi
4Ya+yX+gFd3h90PByJlwfC4W/IqFmcH0K4r46sQO48xQCuyKXN8KdXY/8f2hs257
NB3IMGxBnt/6eAZvs0V31xLpuf/9nX+vms5+GkN9yWz/jBNqaSyzDprYQ8rGDgEs
Zdns2Btq2Ei9D0ep7pJ+6itptgf0SjCs+762+0F630uRI4RXQJAiyzwRplpI8edB
xg8eoGfy1OngTibwMumBkEXJ9xJMzYM/SfZqFpAsuLpPpbNoIEOGRU0cOcZh2rSy
QSakNzp4+ztIAWvQYgzC8WY4LoJMDjYqqSjk7v//nLGQAjx2A94d5K101mW5AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUxuEw9uFAErupSbR0If2sywfRHzQwHwYDVR0j
BBgwFoAUk9Zp7sxozZzoF9eXa63BB6s8WFEwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVNJQUNM
T1VELzAvOTNENjY5RUVDQzY4Q0Q5Q0U4MTdENzk3NkJBREMxMDdBQjNDNTg1MS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS85M0Q2NjlFRUNDNjhDRDlDRTgxN0Q3OTc2
QkFEQzEwN0FCM0M1ODUxLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0FTSUFDTE9VRC8wLzMxMzAz
MzJlMzEzMzM1MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMxMzgz
NTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ4d0MA0GCSqGSIb3DQEBCwUAA4IBAQCl/6AtnYfk+yYR
7dbRQYSijJZDm+J+90FwZPmLU9evPdHB02fnW+ngjc7QI6bXwQ0pT781RYh8T0VI
VynjNtS4Kare7ME3NYRUEaL+SAQxDDx9RwfNe/onXo1GpYy8qjM+l8jTDrd2OPHT
PunVUAoUXFaxZ9cHqkFW2REauL0TUOlB+LCoEPGqow1031J22cvLtgHU+H1fLBSa
kbyqNhJkCtr6nThZlNrJ+9QbLKdxkI83+Po3mWPX4l0/FrWvGhG6nwEU6c3Fhcrb
0aPdpSWLpOP7In2xohUk47UqGdeeYl3aM9AfrKFqVpAeSPHratoirJhVbiBG5++r
jJMhY3yG
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:47 2026 by rpki-client