Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137342e302f32332d3234203d3e203338383531.roa
File:                     3130332e3139372e3137342e302f32332d3234203d3e203338383531.roa (raw, json)
Hash identifier:          kuDonqxfg2UrPb4hsNWTmtmSYJ4xyGmLlWcTcMJec14=
Subject key identifier:   4D:3F:1B:9B:3A:4F:70:85:03:34:78:9C:EF:2B:F5:46:45:F5:F7:4D
Certificate issuer:       /CN=19781CD1C1CF520700CFF8065E6DE616BA1B3428
Certificate serial:       1235816C6BB6B26E5608CDD299037265538061E7
Authority key identifier: 19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137342e302f32332d3234203d3e203338383531.roa
Signing time:             Mon 11 May 2026 17:09:01 +0000
ROA not before:           Mon 11 May 2026 17:04:01 +0000
ROA not after:            Mon 10 May 2027 17:09:01 +0000
asID:                     38851
IP address blocks:        103.197.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.crl
                          rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:81:6c:6b:b6:b2:6e:56:08:cd:d2:99:03:72:65:53:80:61:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19781CD1C1CF520700CFF8065E6DE616BA1B3428
        Validity
            Not Before: May 11 17:04:01 2026 GMT
            Not After : May 10 17:09:01 2027 GMT
        Subject: CN=4D3F1B9B3A4F70850334789CEF2BF54645F5F74D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:05:a3:e4:e4:82:da:47:d7:47:25:4c:ea:
                    ba:39:38:84:a6:25:d3:87:ee:19:fe:f1:e1:4a:29:
                    7d:e6:99:73:02:73:a8:a2:cb:05:00:2d:d5:aa:11:
                    da:a9:d8:c9:9c:df:b3:b0:8f:41:d6:8f:92:8b:d5:
                    c5:01:19:c5:89:87:66:98:70:2a:7c:64:c5:63:b8:
                    38:92:71:16:88:5c:f0:50:ae:29:2e:08:fb:6d:92:
                    c5:b6:88:00:c6:52:98:63:a7:e1:cf:a5:76:40:9e:
                    1d:38:58:50:75:19:c2:b4:bb:64:39:25:c2:29:7b:
                    cf:f0:48:19:e1:ff:a2:dd:2d:e4:ec:b7:73:fd:0d:
                    c3:38:f4:10:c1:24:7e:45:df:cf:1b:17:50:87:1c:
                    0e:a9:69:6c:5d:85:1c:a6:5c:25:a9:68:3e:fc:63:
                    15:2b:79:93:8a:ee:9b:85:b8:5b:f0:6b:23:10:b2:
                    d4:a0:fa:31:29:8e:93:f6:1a:e6:a9:96:ad:8a:1c:
                    44:58:48:1d:c0:cf:9b:bd:fa:ac:33:17:47:7b:8e:
                    c5:c7:bb:21:a5:de:42:9c:c9:13:27:40:85:cb:e1:
                    b5:1f:93:74:4a:1b:4b:58:6b:79:ae:30:93:e0:7d:
                    53:9e:f6:66:e8:16:55:f6:7d:0d:46:87:64:e6:e2:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:1B:9B:3A:4F:70:85:03:34:78:9C:EF:2B:F5:46:45:F5:F7:4D
            X509v3 Authority Key Identifier:
                keyid:19:78:1C:D1:C1:CF:52:07:00:CF:F8:06:5E:6D:E6:16:BA:1B:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/19781CD1C1CF520700CFF8065E6DE616BA1B3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19781CD1C1CF520700CFF8065E6DE616BA1B3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGJAY/0/3130332e3139372e3137342e302f32332d3234203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:8d:82:4b:8a:66:8f:1f:54:3f:1c:91:f6:b4:1b:96:68:
         20:3b:8b:e7:aa:b6:27:37:92:fd:be:7f:f1:01:e5:40:3b:53:
         e2:99:5d:6e:d9:c0:01:fa:aa:a1:e6:8d:f8:4b:21:59:b4:07:
         07:21:bc:f4:e8:5c:25:d4:db:92:16:10:86:05:71:1e:ce:0a:
         fb:27:0c:ed:ee:30:9b:f3:78:a6:29:3f:d9:d8:34:e8:a3:0b:
         86:14:c5:d7:f3:bb:bc:db:c4:1f:43:3b:7d:85:3d:0b:c2:99:
         45:26:33:b7:a9:f1:9f:f6:49:66:ab:b1:5a:91:3d:a0:85:98:
         c6:36:41:55:c2:ae:31:4f:db:0e:3d:9e:4a:b1:ee:d9:ac:33:
         ab:3d:35:a3:1b:2a:f6:7c:50:fa:5b:4d:6a:cc:9d:aa:c1:ae:
         a2:1d:3e:9a:78:39:b5:b5:f9:67:0c:f9:3b:43:68:ca:16:1d:
         5c:73:8e:25:d1:4c:0e:e8:d5:8c:2d:8c:74:10:f7:2d:4e:56:
         99:96:de:77:6d:2d:34:b0:99:1e:70:04:54:57:8d:b5:a4:c0:
         72:99:39:be:c9:b7:08:1f:eb:66:f6:3c:63:24:99:c5:e7:1f:
         f7:e2:22:3f:8b:ce:39:df:b9:29:e6:21:9a:28:0a:35:49:77:
         61:b3:bf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:39 2026 by rpki-client