Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3332203d3e20313331363537.roa
File:                     3130332e3135332e3137362e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          Z5wnkjdvxO6UQKROxkmHeVSwd5CfkjkSvOkP9DhtZuk=
Subject key identifier:   70:91:F7:2C:31:C4:C0:12:42:76:34:EC:E3:EA:A4:13:9B:8D:9E:75
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       0F19353B9B738592C53FF8C9A2677399300B9C29
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:26:31 +0000
ROA not before:           Mon 11 May 2026 17:21:31 +0000
ROA not after:            Mon 10 May 2027 17:26:31 +0000
asID:                     131657
IP address blocks:        103.153.176.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:35:3b:9b:73:85:92:c5:3f:f8:c9:a2:67:73:99:30:0b:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:21:31 2026 GMT
            Not After : May 10 17:26:31 2027 GMT
        Subject: CN=7091F72C31C4C012427634ECE3EAA4139B8D9E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:dd:08:d7:42:d4:a4:1d:62:1f:79:a4:6a:
                    b1:66:d6:a2:2a:e6:d8:3e:b3:19:2c:ca:38:47:e2:
                    ff:21:be:87:e4:44:26:a4:c9:a9:13:9c:74:72:7d:
                    0f:47:45:97:79:e6:d4:66:95:19:b6:e3:10:b4:e0:
                    03:35:0a:49:41:bd:90:2c:1d:a3:f6:fe:1e:d6:56:
                    69:65:38:e7:1b:ed:d9:c6:2e:bf:f2:31:21:0b:d2:
                    ae:2e:58:ad:b7:21:c9:c8:96:05:d6:0f:87:01:c3:
                    53:bb:99:8f:41:a7:a9:b7:aa:a1:9d:bf:2d:3e:ce:
                    8e:df:cd:99:43:2f:63:6e:c8:35:eb:25:8e:e0:97:
                    22:0d:38:d2:3d:28:7a:a9:db:cf:43:fb:4d:49:55:
                    0e:c7:aa:f5:ff:c3:4a:04:7e:e4:9e:75:73:25:da:
                    31:69:9a:80:cf:12:9e:79:ed:d1:4b:90:7b:3a:3b:
                    8e:7b:83:aa:d7:fb:39:95:e8:9a:8a:81:61:8c:29:
                    f0:fb:78:4f:49:35:0f:52:47:32:65:ba:3c:62:1a:
                    2c:b9:56:0b:f1:65:14:62:1d:8a:69:72:18:81:ca:
                    d6:ca:4a:65:d4:5f:44:9d:68:35:87:32:ec:2c:90:
                    c5:da:86:cb:66:49:3d:bb:b4:c0:46:0b:67:4b:21:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:F7:2C:31:C4:C0:12:42:76:34:EC:E3:EA:A4:13:9B:8D:9E:75
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32332d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:79:15:dc:48:45:3b:09:ef:70:a2:95:ea:87:55:f1:b3:c6:
         3f:6b:b4:ef:89:1d:b6:d7:4a:ed:e3:d8:a0:2e:26:46:68:26:
         19:7e:47:c0:fb:08:5c:9e:6b:6b:f2:54:b1:5d:cf:a2:09:aa:
         86:8d:87:06:c0:14:23:6c:2a:48:be:ce:50:a3:96:83:2e:38:
         fe:67:6a:74:18:70:06:3a:76:8b:03:65:95:7f:39:0c:19:29:
         47:79:53:66:5d:02:b1:38:43:14:9e:ad:49:35:1b:d1:40:6d:
         1d:72:e8:a7:22:d6:d8:b8:56:35:f2:af:20:56:de:da:89:9f:
         27:3a:da:54:7f:3d:cc:90:45:04:87:5d:06:fb:45:72:2b:6a:
         e7:97:3b:f0:be:e4:b8:6a:fb:57:b1:78:0c:4b:92:56:34:5a:
         cd:9b:ad:00:e3:73:fd:6d:c8:87:61:e8:59:b9:d7:6d:45:da:
         6f:7f:7a:b0:d9:cb:82:79:8b:c2:1d:da:b3:69:cf:e8:b3:56:
         42:a6:1b:cf:76:c0:c1:58:a0:b3:4a:b2:a6:0b:cf:89:06:4c:
         e1:be:29:03:d5:bf:23:b1:71:c7:2b:34:fa:70:ab:ed:da:46:
         5d:57:5c:22:11:b1:61:d6:a0:d4:50:ae:e2:a1:9b:24:f4:80:
         df:67:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:24 2026 by rpki-client