Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3234203d3e20313331363537.roa
File:                     3130332e3132322e3138382e302f32322d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          8TYv2ZXC430kU7eJ10dTTFzFSS4zpHDXEosY7UHwrpA=
Subject key identifier:   B2:B8:29:AC:33:09:4F:BD:C5:1D:22:18:08:76:D0:33:6B:B7:2A:3E
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       22A21DDD6C669021D250E099BBBB1CAB521F7F02
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:32:20 +0000
ROA not before:           Mon 11 May 2026 17:27:20 +0000
ROA not after:            Mon 10 May 2027 17:32:20 +0000
asID:                     131657
IP address blocks:        103.122.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a2:1d:dd:6c:66:90:21:d2:50:e0:99:bb:bb:1c:ab:52:1f:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:27:20 2026 GMT
            Not After : May 10 17:32:20 2027 GMT
        Subject: CN=B2B829AC33094FBDC51D22180876D0336BB72A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:a2:e1:9e:6e:d0:d9:0c:e3:ba:b2:61:34:
                    8c:a6:1f:04:34:dd:db:85:75:c5:01:63:d4:fe:4a:
                    aa:e3:6f:ea:95:54:4d:ae:ef:76:85:4a:22:c9:8e:
                    d0:b1:8d:0c:88:fc:43:72:75:ab:a8:6f:64:f6:5a:
                    36:73:6e:0f:d7:92:14:7f:26:e2:b3:14:39:8c:d1:
                    99:9e:0f:4b:e7:4d:0a:38:96:d9:16:0c:dc:34:6d:
                    4a:3d:97:5f:69:b9:41:ef:12:80:40:06:45:8e:78:
                    8e:3a:e5:c9:60:a9:66:23:ab:4d:c8:29:78:c1:2e:
                    46:77:a2:0a:4d:84:3e:90:b7:33:b8:ac:a5:52:3f:
                    35:53:f1:13:eb:95:14:de:74:89:3c:22:a6:ba:f0:
                    64:d6:4a:3d:09:be:11:e4:21:0e:6f:26:1d:80:47:
                    cd:33:f4:96:87:76:1d:cc:29:58:a0:bd:5c:8a:d0:
                    a8:59:f4:d7:55:a0:05:62:c5:63:0b:0d:e2:aa:85:
                    07:a3:13:00:0a:69:8c:38:76:37:94:54:77:83:0b:
                    2a:11:d3:87:99:29:98:96:53:f6:0a:4d:98:60:bd:
                    ac:31:58:f8:34:9b:56:0c:01:1c:5a:69:b9:c8:4f:
                    46:b7:54:c8:f7:11:22:0c:ac:9a:87:87:e8:5f:f9:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B8:29:AC:33:09:4F:BD:C5:1D:22:18:08:76:D0:33:6B:B7:2A:3E
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3138382e302f32322d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:c4:8b:a2:b0:1d:9f:d4:9b:04:47:00:18:40:87:2f:32:
         dc:26:5f:a8:8b:d9:c5:2b:c3:42:74:9c:57:70:87:ca:58:d0:
         18:3a:58:0a:28:50:a6:3d:95:c1:6c:a4:33:7f:43:02:a3:65:
         ae:79:f3:b7:91:86:42:77:48:1b:ed:01:f2:e7:08:5c:69:01:
         2b:d4:02:d0:be:b7:6e:b0:f9:1b:dc:fa:ba:d3:2c:59:fe:e4:
         cb:1f:79:37:ef:c4:fb:9f:36:f0:74:00:56:f1:2a:bf:a6:dd:
         3f:7a:01:97:8e:fb:39:80:6e:ac:d0:39:da:2b:7a:9a:79:02:
         e1:0c:bb:01:2b:1b:80:7e:32:0c:3f:88:3b:59:4b:33:46:ef:
         71:e1:01:66:38:fc:71:b3:02:b5:14:f3:1a:37:1e:af:60:80:
         4d:79:12:a1:6c:5a:0f:48:9c:6d:76:d2:61:ad:95:7a:f4:ca:
         70:bb:78:87:4b:a2:5c:c0:70:82:83:1d:41:37:83:4e:2d:dc:
         d8:41:61:c5:03:74:02:b2:c6:ec:89:b2:b5:22:17:de:3d:7a:
         54:52:ee:22:57:a2:83:86:e9:6b:73:57:58:98:d1:01:5f:6a:
         7f:89:cd:77:af:05:ad:4f:ed:c9:2f:a0:cb:65:5c:9b:91:35:
         2f:6f:bd:4b
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUIqId3WxmkCHSUOCZu7scq1IffwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA1MTExNzI3MjBaFw0yNzA1MTAxNzMyMjBaMDMxMTAvBgNV
BAMTKEIyQjgyOUFDMzMwOTRGQkRDNTFEMjIxODA4NzZEMDMzNkJCNzJBM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIvqLhnm7Q2QzjurJhNIymHwQ0
3duFdcUBY9T+Sqrjb+qVVE2u73aFSiLJjtCxjQyI/ENydauob2T2WjZzbg/XkhR/
JuKzFDmM0ZmeD0vnTQo4ltkWDNw0bUo9l19puUHvEoBABkWOeI465clgqWYjq03I
KXjBLkZ3ogpNhD6QtzO4rKVSPzVT8RPrlRTedIk8Iqa68GTWSj0JvhHkIQ5vJh2A
R80z9JaHdh3MKVigvVyK0KhZ9NdVoAVixWMLDeKqhQejEwAKaYw4djeUVHeDCyoR
04eZKZiWU/YKTZhgvawxWPg0m1YMARxaabnIT0a3VMj3ESIMrJqHh+hf+QBPAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUsrgprDMJT73FHSIYCHbQM2u3Kj4wHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPTkdEQS8wLzMxMzAzMzJlMzEz
MjMyMmUzMTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjM1Mzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAJnerwwDQYJKoZIhvcNAQELBQADggEBAKUexIuisB2f1JsERwAY
QIcvMtwmX6iL2cUrw0J0nFdwh8pY0Bg6WAooUKY9lcFspDN/QwKjZa5587eRhkJ3
SBvtAfLnCFxpASvUAtC+t26w+Rvc+rrTLFn+5MsfeTfvxPufNvB0AFbxKr+m3T96
AZeO+zmAbqzQOdorepp5AuEMuwErG4B+Mgw/iDtZSzNG73HhAWY4/HGzArUU8xo3
Hq9ggE15EqFsWg9InG120mGtlXr0ynC7eIdLolzAcIKDHUE3g04t3NhBYcUDdAKy
xuyJsrUiF949elRS7iJXooOG6WtzV1iY0QFfan+JzXevBa1P7ckvoMtlXJuRNS9v
vUs=
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:41 2026 by rpki-client