Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313334383233.roa
File:                     3130332e3135332e3137372e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          je+FEkFVPWBg1dIQQfdKSicJPihVEEVrnFiNVrM/gtE=
Subject key identifier:   25:5A:44:9B:F1:5D:DD:13:86:76:B4:3F:F5:F2:CB:15:9B:E1:BB:8E
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       0969DBAF93D6F2A8F0CED2FAD7750E2EF979C306
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:06:49 +0000
ROA not before:           Mon 11 May 2026 17:01:49 +0000
ROA not after:            Mon 10 May 2027 17:06:49 +0000
asID:                     134823
IP address blocks:        103.153.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:69:db:af:93:d6:f2:a8:f0:ce:d2:fa:d7:75:0e:2e:f9:79:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:01:49 2026 GMT
            Not After : May 10 17:06:49 2027 GMT
        Subject: CN=255A449BF15DDD138676B43FF5F2CB159BE1BB8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:7f:b0:6f:03:57:a5:54:77:58:c6:9f:d0:
                    a1:14:56:63:e7:16:1c:84:72:b2:ac:8b:56:82:35:
                    a5:c3:d1:7e:90:e4:ce:87:38:6c:0a:92:cd:b3:6b:
                    bb:f6:ec:7a:96:36:f8:9b:17:93:7f:0e:a7:cf:80:
                    95:eb:47:4b:d7:23:d4:c1:fc:b9:1c:be:39:90:b2:
                    ca:dd:91:42:c9:26:b6:22:71:15:df:04:34:47:db:
                    c0:7d:6d:3e:83:f5:10:62:c1:09:7d:66:3b:b1:0d:
                    19:c1:fc:0a:e0:c3:e2:43:01:91:62:11:3e:48:08:
                    2b:a7:18:70:9c:e1:c4:52:46:9b:5f:c1:bd:9b:56:
                    79:94:84:15:04:f1:36:47:42:44:bc:f9:af:8d:f8:
                    f7:c7:fc:59:50:4b:1d:81:c1:a7:44:aa:84:b8:2c:
                    a9:44:49:23:d7:9f:0e:74:69:a6:44:fb:0a:5e:11:
                    57:cd:f6:17:9d:d2:d4:6a:1b:e5:59:ae:c9:99:f5:
                    45:52:61:15:3a:09:39:57:96:85:3a:e0:ec:1c:27:
                    6f:1d:8b:71:35:fa:2e:3b:39:ff:38:9a:4d:d3:7d:
                    53:d4:c1:6a:5b:c8:c1:5e:33:a2:df:24:2e:1c:5f:
                    98:59:8f:bb:a5:83:43:74:f7:7f:e1:d3:57:28:68:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5A:44:9B:F1:5D:DD:13:86:76:B4:3F:F5:F2:CB:15:9B:E1:BB:8E
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:85:cc:87:8f:b3:a4:6e:6e:b2:e2:37:c9:86:2b:50:66:2c:
         26:ee:6e:40:c2:d4:5d:39:43:a3:21:5c:8e:12:14:c1:98:4d:
         ca:5d:2b:35:72:26:02:9e:4c:5e:a6:d0:3e:36:ef:d5:fd:ca:
         73:48:aa:7e:76:a5:6c:fd:b2:11:df:38:a0:34:69:46:4e:cf:
         ca:9c:bd:59:7a:3a:9d:fd:50:e9:05:8c:14:76:cc:7e:b8:cd:
         11:34:b3:4a:19:35:68:0f:70:74:50:f7:6e:9d:c3:50:c3:5b:
         1c:d4:0c:6c:1c:2c:19:56:d8:53:50:12:45:ca:f0:4c:4c:73:
         eb:4a:d8:e8:06:0f:1d:74:84:b2:b1:f6:66:b6:02:5c:ee:28:
         77:1e:c3:6b:e8:4f:57:9e:02:88:ef:19:bd:76:79:75:45:35:
         ab:5e:d1:22:01:d6:04:3b:16:35:53:93:44:42:86:2f:e0:39:
         c2:31:21:53:81:b7:9e:ff:50:25:f6:5b:f4:67:96:cf:91:15:
         7e:d8:a1:ca:e9:e1:6e:f8:4d:87:ea:63:f7:f6:e6:e0:51:4b:
         6e:74:02:e7:d8:28:e3:e1:4f:56:86:2d:7f:b8:0b:e7:36:7a:
         ec:98:3f:f3:28:ad:a5:55:c2:0f:6a:40:48:1d:30:05:90:02:
         82:97:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:55 2026 by rpki-client