Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231332e302f32342d3234203d3e20333936393832.roa
File:                     3130332e3136392e3231332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          ZxvAmy4henJ71v/ldShglvyMUbXVA/JGcArJBanwC7w=
Subject key identifier:   A4:85:8F:C2:C1:7F:D5:EA:CB:DE:7B:2F:A2:86:3C:D0:79:37:64:C4
Certificate issuer:       /CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
Certificate serial:       309D5BB4347C42B7702F16212B171438642CE917
Authority key identifier: E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231332e302f32342d3234203d3e20333936393832.roa
Signing time:             Mon 11 May 2026 17:10:30 +0000
ROA not before:           Mon 11 May 2026 17:05:30 +0000
ROA not after:            Mon 10 May 2027 17:10:30 +0000
asID:                     396982
IP address blocks:        103.169.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl
                          rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:5b:b4:34:7c:42:b7:70:2f:16:21:2b:17:14:38:64:2c:e9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5012B68C820EFC5CDC103851BAB3C1C17C258CE
        Validity
            Not Before: May 11 17:05:30 2026 GMT
            Not After : May 10 17:10:30 2027 GMT
        Subject: CN=A4858FC2C17FD5EACBDE7B2FA2863CD0793764C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:75:cc:23:45:0e:e2:28:98:41:48:0e:6d:
                    30:92:59:ba:68:5e:44:f4:40:78:61:83:03:f5:f8:
                    c5:69:0f:a9:2c:fb:9f:bd:18:52:c0:7c:2d:d6:e4:
                    c8:cc:7b:ad:77:f4:e6:d1:b4:c6:b5:01:75:21:b2:
                    00:67:2c:45:9a:32:a9:9d:f8:bd:e0:35:7f:8b:7a:
                    0b:eb:60:bb:b5:8b:13:0d:ed:6a:dd:fb:53:ee:6e:
                    3f:8b:b2:41:39:fa:63:cd:d8:06:d4:78:c9:66:a1:
                    4c:5d:31:8e:3f:e8:5b:d9:3e:f5:cf:4e:47:14:90:
                    98:bb:ab:5d:15:57:90:d8:e4:b7:95:15:69:5c:3c:
                    64:52:51:33:a1:43:d3:cb:24:cb:8d:37:92:b8:72:
                    03:7b:b5:7c:25:a9:9d:56:03:a0:d7:61:b9:d2:a1:
                    63:d0:39:5a:09:ea:9f:99:d9:19:c1:f5:1e:eb:3a:
                    2d:d4:f8:f3:a1:d7:f7:2e:11:38:0d:75:72:29:48:
                    13:e7:81:8d:2a:0e:80:91:34:11:66:57:e8:76:17:
                    98:be:18:16:31:aa:82:16:15:83:2e:ca:82:a0:1f:
                    60:27:9a:bd:d7:15:65:ae:9c:ef:f6:ee:78:fa:68:
                    d3:ac:18:dd:bc:27:4e:5b:37:ee:de:ec:88:98:77:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:85:8F:C2:C1:7F:D5:EA:CB:DE:7B:2F:A2:86:3C:D0:79:37:64:C4
            X509v3 Authority Key Identifier:
                keyid:E5:01:2B:68:C8:20:EF:C5:CD:C1:03:85:1B:AB:3C:1C:17:C2:58:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5012B68C820EFC5CDC103851BAB3C1C17C258CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HAPPYMONEY/0/3130332e3136392e3231332e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:99:ae:22:d2:db:b3:1c:6e:86:d0:cb:a2:5e:7e:fc:a2:
         14:ab:f4:9c:4a:ab:fa:81:43:c8:13:29:ce:1b:dc:7b:e0:7b:
         7c:6b:93:a3:44:f4:a6:ec:47:d3:fe:5b:4b:65:0b:94:59:e1:
         cf:0b:85:d0:04:a2:06:a7:bd:2c:41:11:76:5f:b7:76:3d:f4:
         2b:08:56:7d:fc:60:48:0a:62:b4:4a:b6:2b:95:a4:2e:a6:56:
         77:f6:b6:07:21:6a:33:4b:89:be:92:3b:b4:68:f1:8c:79:7d:
         b0:08:bd:ab:1f:40:d3:4e:ff:a4:e4:45:7e:7f:bf:77:17:ab:
         e9:83:5d:da:97:7c:a6:ae:e3:7f:66:1d:ca:02:25:42:c0:a4:
         58:ea:94:0b:e2:81:d5:e6:e2:e6:f8:ab:81:d7:1b:d7:99:c8:
         1e:de:71:9d:a2:23:a3:d8:47:33:ab:2f:43:c9:f5:cd:6e:a2:
         ce:c6:43:07:d6:38:71:58:07:9f:31:8b:13:6d:00:b7:3a:3a:
         7c:58:a4:89:d2:6e:25:ea:96:02:24:34:8c:41:f1:8e:c2:79:
         34:09:2e:07:cf:30:48:5a:d4:ca:5d:bc:2c:1b:3f:86:69:e5:
         67:80:93:ff:0d:ee:5c:e1:99:ba:29:b6:ec:16:cd:b3:d5:41:
         e3:fa:43:52
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUMJ1btDR8QrdwLxYhKxcUOGQs6RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwMTJCNjhDODIwRUZDNUNEQzEwMzg1MUJBQjNDMUMx
N0MyNThDRTAeFw0yNjA1MTExNzA1MzBaFw0yNzA1MTAxNzEwMzBaMDMxMTAvBgNV
BAMTKEE0ODU4RkMyQzE3RkQ1RUFDQkRFN0IyRkEyODYzQ0QwNzkzNzY0QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+3XMI0UO4iiYQUgObTCSWbpo
XkT0QHhhgwP1+MVpD6ks+5+9GFLAfC3W5MjMe6139ObRtMa1AXUhsgBnLEWaMqmd
+L3gNX+LegvrYLu1ixMN7Wrd+1Pubj+LskE5+mPN2AbUeMlmoUxdMY4/6FvZPvXP
TkcUkJi7q10VV5DY5LeVFWlcPGRSUTOhQ9PLJMuNN5K4cgN7tXwlqZ1WA6DXYbnS
oWPQOVoJ6p+Z2RnB9R7rOi3U+POh1/cuETgNdXIpSBPngY0qDoCRNBFmV+h2F5i+
GBYxqoIWFYMuyoKgH2Anmr3XFWWunO/27nj6aNOsGN28J05bN+7e7IiYd37/AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUpIWPwsF/1erL3nsvooY80Hk3ZMQwHwYDVR0j
BBgwFoAU5QEraMgg78XNwQOFG6s8HBfCWM4wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEFQUFlN
T05FWS8wL0U1MDEyQjY4QzgyMEVGQzVDREMxMDM4NTFCQUIzQzFDMTdDMjU4Q0Uu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTUwMTJCNjhDODIwRUZDNUNEQzEwMzg1
MUJBQjNDMUMxN0MyNThDRS5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcw
C4ZocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IQVBQWU1PTkVZLzAvMzEz
MDMzMmUzMTM2MzkyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkz
NjM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAGep1TANBgkqhkiG9w0BAQsFAAOCAQEADuaZriLS
27McbobQy6JefvyiFKv0nEqr+oFDyBMpzhvce+B7fGuTo0T0puxH0/5bS2ULlFnh
zwuF0ASiBqe9LEERdl+3dj30KwhWffxgSApitEq2K5WkLqZWd/a2ByFqM0uJvpI7
tGjxjHl9sAi9qx9A007/pORFfn+/dxer6YNd2pd8pq7jf2YdygIlQsCkWOqUC+KB
1ebi5virgdcb15nIHt5xnaIjo9hHM6svQ8n1zW6izsZDB9Y4cVgHnzGLE20Atzo6
fFikidJuJeqWAiQ0jEHxjsJ5NAkuB88wSFrUyl28LBs/hmnlZ4CT/w3uXOGZuim2
7BbNs9VB4/pDUg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:51:39 2026 by rpki-client