Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136312e302f32342d3234203d3e20333935373933.roa
File:                     3130332e3132392e3136312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          Id7X2F/nmFq+xBn8Uq24NSjPCsO/QgNJ/yuqDFrzdU0=
Subject key identifier:   57:A7:89:C2:68:33:94:13:81:51:DE:97:43:A8:3D:E4:33:88:8A:0C
Certificate issuer:       /CN=A7A7EEF7E5627111AA1595BF2BD416299AA94638
Certificate serial:       1DA6F8F440CB95440DCECCC03CBEBF7DA2FCF4E1
Authority key identifier: A7:A7:EE:F7:E5:62:71:11:AA:15:95:BF:2B:D4:16:29:9A:A9:46:38
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136312e302f32342d3234203d3e20333935373933.roa
Signing time:             Mon 11 May 2026 17:38:49 +0000
ROA not before:           Mon 11 May 2026 17:33:49 +0000
ROA not after:            Mon 10 May 2027 17:38:49 +0000
asID:                     395793
IP address blocks:        103.129.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.crl
                          rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a6:f8:f4:40:cb:95:44:0d:ce:cc:c0:3c:be:bf:7d:a2:fc:f4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7A7EEF7E5627111AA1595BF2BD416299AA94638
        Validity
            Not Before: May 11 17:33:49 2026 GMT
            Not After : May 10 17:38:49 2027 GMT
        Subject: CN=57A789C2683394138151DE9743A83DE433888A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:6d:a2:f7:5c:e3:a8:bb:af:15:84:88:3a:
                    0c:84:de:73:4f:91:0c:b1:f6:92:74:80:f2:d1:9f:
                    03:29:c8:06:30:83:1f:b3:b1:39:f2:06:82:66:24:
                    71:3a:34:e0:c6:61:ce:c5:a9:db:8d:04:a9:a1:63:
                    4a:c3:31:1d:b3:66:28:b0:65:08:d3:15:b3:4b:f4:
                    a6:7b:7d:8f:1b:68:29:6e:23:6a:b6:e8:66:73:cf:
                    7d:19:b6:ae:11:7b:07:6d:31:56:16:e2:b3:1a:47:
                    a0:f9:a8:89:72:08:60:3b:4c:da:42:44:1e:dc:77:
                    97:de:ad:0d:99:60:38:9e:41:fe:4d:f8:7a:58:74:
                    51:13:10:43:eb:79:3e:5c:0c:ac:ca:4a:3d:70:a1:
                    08:e3:d5:47:c8:29:82:dc:34:cb:94:c0:e4:53:3b:
                    58:ef:fb:e8:fd:52:b8:88:65:90:2b:51:b9:4d:66:
                    de:a8:57:03:07:db:b1:87:f6:bd:8c:b1:8e:86:a7:
                    f1:e7:6a:ce:89:41:ec:91:65:2a:0f:06:c6:07:ed:
                    79:9d:7c:ce:a9:e9:46:c4:f0:06:03:e6:a2:97:d0:
                    95:47:a7:9a:8a:f7:2d:aa:4b:e6:38:03:cf:0b:bf:
                    23:9a:92:3c:8e:a4:e2:a5:d7:83:cc:cc:6a:ef:41:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A7:89:C2:68:33:94:13:81:51:DE:97:43:A8:3D:E4:33:88:8A:0C
            X509v3 Authority Key Identifier:
                keyid:A7:A7:EE:F7:E5:62:71:11:AA:15:95:BF:2B:D4:16:29:9A:A9:46:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/A7A7EEF7E5627111AA1595BF2BD416299AA94638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7A7EEF7E5627111AA1595BF2BD416299AA94638.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MORICLOUD/0/3130332e3132392e3136312e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:f4:68:3b:dc:e8:a3:b4:9e:54:fa:c1:eb:4c:9c:60:ff:
         01:3a:1b:e6:04:e1:76:67:a0:d7:66:27:7b:ce:cf:36:86:5c:
         fe:ce:b4:a8:47:43:ec:a8:86:85:0d:46:4d:11:5e:41:90:77:
         1d:e6:ea:6f:f5:39:b6:ec:f4:f9:46:16:d5:c8:35:32:36:76:
         e0:62:17:09:38:98:f2:07:f8:6a:e9:c0:9d:de:1c:2b:de:cf:
         51:b8:2c:bd:b4:46:a7:66:88:8d:cb:ea:31:b5:f7:dd:91:9c:
         7d:14:90:42:0d:b3:f5:85:73:c9:19:8f:85:54:07:15:be:99:
         8d:ea:c2:a9:06:77:86:c7:f6:40:b8:16:56:a7:d7:5d:85:49:
         da:08:e7:c9:fc:22:23:90:70:26:d7:e0:67:53:72:05:9f:73:
         e0:0b:82:71:32:3f:7f:35:a6:3b:64:5f:e8:e0:b8:8e:bd:99:
         55:42:a3:70:df:4b:3f:57:2d:98:0c:81:22:38:a8:33:b6:92:
         e1:42:a5:29:f4:df:bf:8f:6a:db:62:7e:68:b4:3f:c6:e9:a7:
         58:b7:d2:49:94:dc:73:d3:ec:a4:9a:c8:65:53:6a:fa:00:b0:
         b7:ce:56:d1:3e:90:b0:89:65:b4:55:b0:55:f0:44:49:44:fa:
         f8:cd:87:23
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUHab49EDLlUQNzszAPL6/faL89OEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdBN0VFRjdFNTYyNzExMUFBMTU5NUJGMkJENDE2Mjk5
QUE5NDYzODAeFw0yNjA1MTExNzMzNDlaFw0yNzA1MTAxNzM4NDlaMDMxMTAvBgNV
BAMTKDU3QTc4OUMyNjgzMzk0MTM4MTUxREU5NzQzQTgzREU0MzM4ODhBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhm2i91zjqLuvFYSIOgyE3nNP
kQyx9pJ0gPLRnwMpyAYwgx+zsTnyBoJmJHE6NODGYc7FqduNBKmhY0rDMR2zZiiw
ZQjTFbNL9KZ7fY8baCluI2q26GZzz30Ztq4RewdtMVYW4rMaR6D5qIlyCGA7TNpC
RB7cd5ferQ2ZYDieQf5N+HpYdFETEEPreT5cDKzKSj1woQjj1UfIKYLcNMuUwORT
O1jv++j9UriIZZArUblNZt6oVwMH27GH9r2MsY6Gp/Hnas6JQeyRZSoPBsYH7Xmd
fM6p6UbE8AYD5qKX0JVHp5qK9y2qS+Y4A88LvyOakjyOpOKl14PMzGrvQS1FAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUV6eJwmgzlBOBUd6XQ6g95DOIigwwHwYDVR0j
BBgwFoAUp6fu9+VicRGqFZW/K9QWKZqpRjgwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9SSUNM
T1VELzAvQTdBN0VFRjdFNTYyNzExMUFBMTU5NUJGMkJENDE2Mjk5QUE5NDYzOC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BN0E3RUVGN0U1NjI3MTExQUExNTk1QkYy
QkQ0MTYyOTlBQTk0NjM4LmNlcjCBgwYIKwYBBQUHAQsEdzB1MHMGCCsGAQUFBzAL
hmdyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01PUklDTE9VRC8wLzMxMzAz
MzJlMzEzMjM5MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzUz
NzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABngaEwDQYJKoZIhvcNAQELBQADggEBAKZz9Gg73Oij
tJ5U+sHrTJxg/wE6G+YE4XZnoNdmJ3vOzzaGXP7OtKhHQ+yohoUNRk0RXkGQdx3m
6m/1Obbs9PlGFtXINTI2duBiFwk4mPIH+GrpwJ3eHCvez1G4LL20RqdmiI3L6jG1
992RnH0UkEINs/WFc8kZj4VUBxW+mY3qwqkGd4bH9kC4Flan112FSdoI58n8IiOQ
cCbX4GdTcgWfc+ALgnEyP381pjtkX+jguI69mVVCo3DfSz9XLZgMgSI4qDO2kuFC
pSn037+Pattifmi0P8bpp1i30kmU3HPT7KSayGVTavoAsLfOVtE+kLCJZbRVsFXw
RElE+vjNhyM=
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:44 2026 by rpki-client