Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa
File:                     3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa (raw, json)
Hash identifier:          79PoPZy/77IT5WD76AUx+MEeM+xzNJP96a+mmKgIqlY=
Subject key identifier:   08:38:6C:55:AA:EA:2D:06:07:3A:14:DE:55:4E:88:D3:25:70:42:F5
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       3F7AB479E3A24DCCCBC2483A3D057D59D599C05C
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa
Signing time:             Mon 11 May 2026 17:06:30 +0000
ROA not before:           Mon 11 May 2026 17:01:30 +0000
ROA not after:            Mon 10 May 2027 17:06:30 +0000
asID:                     131618
IP address blocks:        103.129.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:b4:79:e3:a2:4d:cc:cb:c2:48:3a:3d:05:7d:59:d5:99:c0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:01:30 2026 GMT
            Not After : May 10 17:06:30 2027 GMT
        Subject: CN=08386C55AAEA2D06073A14DE554E88D3257042F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:cf:dc:44:d7:65:56:55:41:44:c3:bb:f0:
                    d2:b7:e5:10:38:10:da:f5:1d:2f:e4:b3:c1:81:bc:
                    d1:70:49:e4:e3:5b:8e:05:dc:89:5c:23:a5:04:10:
                    50:bc:50:78:d3:fa:16:54:73:74:36:22:ad:de:0f:
                    19:51:07:f7:6a:75:84:c0:84:00:82:56:3c:82:09:
                    62:05:d7:4f:db:3d:97:95:5c:a5:4c:5c:af:bb:67:
                    9d:a0:71:e9:c0:7a:6d:8a:1c:49:d9:ce:b7:5d:81:
                    04:8f:ab:8c:ef:08:90:3f:45:3b:17:93:89:03:12:
                    37:61:fd:42:dc:f8:2d:e1:3d:34:c4:da:a1:95:49:
                    78:f6:7c:c3:98:6c:36:cd:fe:74:3f:3a:71:51:ef:
                    79:b1:b0:55:e0:72:7c:47:41:85:b5:bf:be:bb:4c:
                    5f:a6:22:c3:db:1e:e1:9d:a9:9d:0d:40:08:79:3a:
                    56:0e:45:4e:0d:61:38:77:cb:49:3f:1f:bf:4f:58:
                    ae:7c:59:6a:4b:e5:1a:25:b1:36:46:5c:ea:1b:8a:
                    7c:60:7d:30:cd:a6:3d:e7:04:ec:48:bc:8e:7c:8d:
                    ef:ee:5d:e8:f0:71:8d:a0:50:68:e5:41:0e:ea:c9:
                    74:b7:87:a2:30:e0:c5:cd:17:fe:37:60:6b:19:dd:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:6C:55:AA:EA:2D:06:07:3A:14:DE:55:4E:88:D3:25:70:42:F5
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e20313331363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:8c:0d:d0:1b:ee:f3:f3:ba:77:d1:9e:13:6b:a8:21:7e:
         d3:91:bb:e4:2d:33:bf:9c:4d:52:61:4a:d3:03:b8:ac:2e:65:
         68:6a:0c:b6:ae:75:5f:54:f3:d0:06:ce:11:76:4b:dc:db:bc:
         6b:72:d4:21:69:7a:80:74:ee:e5:b6:b7:c6:4b:36:88:45:a3:
         a4:53:7d:34:34:49:29:c2:a0:7a:f5:b8:63:62:1c:e1:e2:ad:
         8f:27:91:98:d1:a9:ff:b4:8e:9b:a7:6a:de:49:db:47:4a:d8:
         65:bd:64:5b:0e:4f:9d:6d:a4:b3:a3:5e:d8:51:ad:5b:da:48:
         59:7a:23:a3:df:46:bf:ee:30:6e:0c:5d:53:d2:7c:2f:a3:36:
         94:b4:c2:38:d1:7b:d2:30:ef:74:83:3a:54:b8:45:7a:a0:f5:
         8a:14:da:a1:b8:13:3d:2f:19:4b:60:79:4b:f6:bc:ba:a3:d9:
         03:d7:95:ac:69:3e:05:6c:13:1c:7c:3b:a4:99:14:99:32:64:
         c4:85:70:c1:de:93:77:a3:de:41:dd:5e:ad:93:00:b4:30:ca:
         54:dd:e1:fa:5d:cb:0b:bd:43:f6:96:9d:33:d5:3a:3a:5b:aa:
         a2:17:af:42:ce:0c:b6:bf:b8:39:fa:ca:3f:66:6a:ae:46:fc:
         dd:66:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:34 2026 by rpki-client