Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa
File:                     3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa (raw, json)
Hash identifier:          CqveRmGYQfxhmNEyMRmCyx7NNn2LU6o50JUzxQzmudE=
Subject key identifier:   FC:21:6E:CF:1D:70:6A:5E:59:B6:42:AF:E2:CA:00:B1:70:52:2A:07
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       014DF96C3D80FD69264D8DA331345AB5B53AB0B6
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:06:49 +0000
ROA not before:           Mon 11 May 2026 17:01:49 +0000
ROA not after:            Mon 10 May 2027 17:06:49 +0000
asID:                     131657
IP address blocks:        103.153.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4d:f9:6c:3d:80:fd:69:26:4d:8d:a3:31:34:5a:b5:b5:3a:b0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:01:49 2026 GMT
            Not After : May 10 17:06:49 2027 GMT
        Subject: CN=FC216ECF1D706A5E59B642AFE2CA00B170522A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:77:da:c4:ea:a5:3b:55:dd:c3:bd:05:5d:
                    bf:b0:e8:2f:9a:81:b5:c4:ae:38:cd:de:6c:a7:10:
                    60:97:43:87:22:73:b0:1b:9c:51:4b:ad:5d:06:f6:
                    c5:00:cc:b4:70:8a:57:4d:33:a0:97:12:b5:9f:d7:
                    f9:51:6b:f5:bb:e1:77:e5:23:83:1d:78:5c:93:29:
                    ac:db:6a:7c:5c:c6:d5:3c:5d:02:ec:d6:15:17:ce:
                    ab:c2:71:99:6e:49:1d:80:0f:c3:b8:32:b4:ea:ba:
                    97:b6:1c:38:25:be:c9:e8:f5:75:9e:0c:0d:54:68:
                    47:bb:6f:c2:37:69:ea:26:b5:f8:47:0b:97:06:e1:
                    cd:3a:45:a8:43:bc:b6:fe:9a:3e:11:ec:7a:f7:0b:
                    2e:ca:4d:9f:b4:15:65:14:3a:3f:59:42:ea:05:1d:
                    65:d2:3e:c0:ef:a2:96:c2:4b:07:5e:ab:9f:fa:f3:
                    d3:1b:05:12:78:af:5c:20:b6:6d:17:b7:5a:ea:8f:
                    5a:f7:50:34:2d:46:2f:24:72:13:62:36:6a:cd:b9:
                    e9:ae:d1:0b:55:99:d6:41:48:08:bf:5a:e2:c9:ef:
                    6e:4b:f6:86:be:de:42:d8:1f:5f:20:c7:b7:11:38:
                    52:8d:46:79:89:c0:26:5c:ef:6d:8f:0f:01:86:82:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:21:6E:CF:1D:70:6A:5E:59:B6:42:AF:E2:CA:00:B1:70:52:2A:07
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:76:85:01:27:67:95:fc:a1:0c:c4:9e:1e:d3:48:19:75:a4:
         9d:cb:55:ae:c0:fc:b7:7a:f0:14:82:e0:bd:07:5c:43:72:3d:
         c5:6d:ac:23:4f:c5:5a:ea:c9:b0:b9:6a:53:88:c1:41:87:e7:
         4f:8d:2c:f6:ca:06:97:ff:cb:4a:56:4a:f8:70:42:f7:18:44:
         11:a0:30:a9:be:f3:16:41:0e:ca:61:2b:8c:ea:36:80:3f:b7:
         b3:96:0f:7d:4b:a5:fe:a6:40:c1:4d:92:74:4b:45:a6:5c:75:
         f1:11:d4:00:ac:10:c1:ec:53:18:bb:ae:23:97:68:6e:76:23:
         91:a6:bf:70:49:6d:40:e0:bc:cc:b9:85:e0:0d:4d:da:a4:bf:
         14:0b:33:f3:14:80:fa:59:af:86:bc:38:56:66:b7:50:94:93:
         e9:f7:7b:53:6c:08:f7:04:a7:42:ba:36:e7:30:cc:93:01:6e:
         19:ab:a7:9b:81:85:03:ee:76:f3:3e:0f:1e:04:93:0d:cc:cd:
         14:8c:66:0b:58:9e:8b:90:ae:54:c3:19:86:0a:1b:64:08:37:
         36:23:1b:4b:17:98:5d:1e:91:74:cd:7f:fc:18:f5:6c:df:c0:
         e0:84:e6:55:c3:46:47:32:4a:39:ad:68:3b:61:bf:45:dd:85:
         93:29:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:52 2026 by rpki-client