Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e203137343138.roa
File:                     3130332e3135332e3137372e302f32342d3234203d3e203137343138.roa (raw, json)
Hash identifier:          LE1OgWnzNxZzPojCrBIcDsP3Ce15PaVR3L/Vyqytzx8=
Subject key identifier:   CB:6A:A5:8E:54:71:B0:D3:2C:04:44:63:3E:BB:F8:2D:2F:65:37:DD
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       3EF61DFCB91FC4F4134774743D369882EA313D57
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e203137343138.roa
Signing time:             Mon 11 May 2026 17:10:12 +0000
ROA not before:           Mon 11 May 2026 17:05:12 +0000
ROA not after:            Mon 10 May 2027 17:10:12 +0000
asID:                     17418
IP address blocks:        103.153.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:1d:fc:b9:1f:c4:f4:13:47:74:74:3d:36:98:82:ea:31:3d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:05:12 2026 GMT
            Not After : May 10 17:10:12 2027 GMT
        Subject: CN=CB6AA58E5471B0D32C0444633EBBF82D2F6537DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:6e:96:2b:42:8b:56:81:d6:44:d9:2d:3c:
                    99:18:d3:f6:74:60:af:cc:0e:1a:ce:12:bd:71:10:
                    e4:d2:28:b6:04:cb:45:d0:be:7b:5a:c3:0b:f6:17:
                    3e:64:e6:0f:f3:1a:9b:e6:4c:98:a0:6e:96:a9:b3:
                    f3:df:48:46:3d:0a:a6:50:9d:61:21:22:27:44:71:
                    95:44:08:d8:f8:dc:be:ec:c4:2a:90:ac:25:f1:95:
                    51:84:a8:50:73:7e:d2:11:c3:d7:84:b1:f6:28:d2:
                    41:50:b2:f3:be:ce:ed:ef:6f:99:f5:6d:5b:d8:2f:
                    df:61:d3:28:06:2b:cd:7d:be:1b:f4:0c:97:4c:65:
                    c8:93:b3:ea:18:64:d0:11:53:be:09:5b:cb:32:a4:
                    b0:58:aa:05:04:9f:22:bc:df:e3:f3:19:56:8c:e9:
                    3b:a5:84:14:e9:0c:49:ca:ea:61:5b:05:71:8e:13:
                    47:7c:0f:f6:29:a5:00:41:79:ce:6e:ca:a7:cd:77:
                    0c:98:fa:bb:11:c9:76:30:de:ec:de:e8:2c:56:f9:
                    55:36:e0:d3:c4:bf:5f:24:2c:b1:a5:86:09:60:4f:
                    6f:a7:4c:b3:26:d8:8b:6e:2b:32:31:c3:f1:80:72:
                    7c:d6:52:04:9f:92:b9:2b:ec:95:3a:b1:0c:43:9a:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6A:A5:8E:54:71:B0:D3:2C:04:44:63:3E:BB:F8:2D:2F:65:37:DD
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137372e302f32342d3234203d3e203137343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:fd:09:82:6b:38:0c:ca:8a:8b:ae:90:3a:8a:f2:25:27:
         f5:0d:fb:11:90:cb:28:87:5a:d6:e4:8a:19:b2:5c:5c:c5:6a:
         e7:e3:4b:d7:42:0f:b6:93:83:83:a6:99:b3:87:06:c3:0f:b3:
         b7:ee:73:61:79:5e:71:c5:47:3f:b7:00:db:61:d4:5b:c4:ee:
         12:fe:fa:a3:11:db:6f:c4:10:18:1e:35:36:d5:c4:13:89:df:
         73:a4:4c:ec:a0:1d:31:11:11:0b:57:14:2c:30:55:9c:c8:f0:
         5f:55:e3:f5:f8:6a:22:85:09:30:e1:de:07:93:b9:0d:43:c1:
         00:d7:96:a9:53:fc:15:4f:c2:95:b9:47:02:cc:ea:ba:37:f4:
         41:5d:7f:70:39:6d:c1:da:a7:29:8f:7d:39:26:9c:66:34:33:
         2f:ad:6a:6c:91:41:41:ac:a5:d0:fe:8f:67:c3:2b:56:5d:87:
         c3:6e:2e:a2:b0:88:88:f2:14:94:c0:c3:a2:39:15:a9:97:1b:
         ce:52:73:81:18:19:f3:18:2e:46:4e:a0:dc:ac:59:57:d8:d6:
         f4:1b:7f:e7:f9:50:72:78:08:78:65:f5:6b:5a:0f:f2:32:bd:
         7d:97:c4:05:84:5d:45:8c:47:22:fb:ce:7e:98:4d:0a:d7:11:
         f3:17:7f:b5
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUPvYd/LkfxPQTR3R0PTaYguoxPVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJB
MkI3RkE3MTAeFw0yNjA1MTExNzA1MTJaFw0yNzA1MTAxNzEwMTJaMDMxMTAvBgNV
BAMTKENCNkFBNThFNTQ3MUIwRDMyQzA0NDQ2MzNFQkJGODJEMkY2NTM3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNG6WK0KLVoHWRNktPJkY0/Z0
YK/MDhrOEr1xEOTSKLYEy0XQvntawwv2Fz5k5g/zGpvmTJigbpaps/PfSEY9CqZQ
nWEhIidEcZVECNj43L7sxCqQrCXxlVGEqFBzftIRw9eEsfYo0kFQsvO+zu3vb5n1
bVvYL99h0ygGK819vhv0DJdMZciTs+oYZNARU74JW8sypLBYqgUEnyK83+PzGVaM
6TulhBTpDEnK6mFbBXGOE0d8D/YppQBBec5uyqfNdwyY+rsRyXYw3uze6CxW+VU2
4NPEv18kLLGlhglgT2+nTLMm2ItuKzIxw/GAcnzWUgSfkrkr7JU6sQxDmg7FAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUy2qljlRxsNMsBERjPrv4LS9lN90wHwYDVR0j
BBgwFoAUXcY0h4ieP7jnk5R4QT1MC6K3+nEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RB
LzAvNURDNjM0ODc4ODlFM0ZCOEU3OTM5NDc4NDEzRDRDMEJBMkI3RkE3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81REM2MzQ4Nzg4OUUzRkI4RTc5Mzk0Nzg0MTNE
NEMwQkEyQjdGQTcxLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9OR0RBLzAvMzEzMDMzMmUzMTM1
MzMyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczNDMxMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnmbEwDQYJKoZIhvcNAQELBQADggEBALNj/QmCazgMyoqLrpA6ivIl
J/UN+xGQyyiHWtbkihmyXFzFaufjS9dCD7aTg4OmmbOHBsMPs7fuc2F5XnHFRz+3
ANth1FvE7hL++qMR22/EEBgeNTbVxBOJ33OkTOygHTEREQtXFCwwVZzI8F9V4/X4
aiKFCTDh3geTuQ1DwQDXlqlT/BVPwpW5RwLM6ro39EFdf3A5bcHapymPfTkmnGY0
My+tamyRQUGspdD+j2fDK1Zdh8NuLqKwiIjyFJTAw6I5FamXG85Sc4EYGfMYLkZO
oNysWVfY1vQbf+f5UHJ4CHhl9WtaD/IyvX2XxAWEXUWMRyL7zn6YTQrXEfMXf7U=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:35 2026 by rpki-client