Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa
File:                     3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier:          d34Q2UulZ4eJlNCu1vP1Opx2ZBdNq8uwEVu6G8FzMpg=
Subject key identifier:   29:F1:90:6A:38:6F:53:59:00:14:C6:2C:EB:6C:6C:F6:68:0B:F7:C6
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       490112D68C0DE20ABD0372B26E46A0A5107873A1
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:56:43 +0000
ROA not before:           Mon 11 May 2026 17:51:43 +0000
ROA not after:            Mon 10 May 2027 17:56:43 +0000
asID:                     21859
IP address blocks:        103.129.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:01:12:d6:8c:0d:e2:0a:bd:03:72:b2:6e:46:a0:a5:10:78:73:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: May 11 17:51:43 2026 GMT
            Not After : May 10 17:56:43 2027 GMT
        Subject: CN=29F1906A386F53590014C62CEB6C6CF6680BF7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:3b:8e:38:fe:4f:02:70:70:ce:3e:53:14:
                    b1:1d:11:5f:2f:8a:a5:b1:d5:f8:ad:fa:24:57:35:
                    eb:e7:f1:ab:cc:b9:89:e1:d7:de:c8:cc:4c:00:fd:
                    c9:e6:82:15:a1:aa:cd:ae:6d:c9:86:0c:4b:b8:d8:
                    27:0c:7c:2e:50:2d:90:71:3e:79:e7:98:40:cb:34:
                    56:06:f0:c5:35:67:19:33:0d:4f:bf:87:26:72:b9:
                    69:8c:1b:2b:74:c2:44:16:14:24:78:4b:96:fa:cf:
                    12:52:0c:58:9c:94:82:01:34:bc:6a:b1:2f:76:f9:
                    37:f5:8f:69:dc:d0:a1:36:04:a8:ee:cc:ff:18:bb:
                    45:66:b2:7f:6d:84:76:09:79:16:fa:87:49:17:7f:
                    31:82:db:30:ef:c3:40:e7:3c:c1:21:bb:d2:d5:d8:
                    05:9f:1d:e3:c6:6a:c8:93:0a:18:73:c3:d0:7d:0c:
                    21:e1:f8:38:0b:12:d0:2b:e2:fa:bd:bf:5c:79:46:
                    c1:b8:34:f3:45:b6:9e:ff:4b:12:ae:18:7d:e8:f2:
                    d2:75:41:94:4b:f4:20:17:51:8e:00:2f:38:1c:62:
                    1c:8d:5f:19:22:85:8a:08:28:bb:71:0c:d3:d7:93:
                    bb:48:f7:ca:d1:a7:d3:ba:f3:b8:a5:f0:86:96:24:
                    be:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F1:90:6A:38:6F:53:59:00:14:C6:2C:EB:6C:6C:F6:68:0B:F7:C6
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e3132392e3133362e302f32322d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:3d:ac:64:97:af:d7:cd:6c:8e:9a:d8:f3:75:ca:24:e4:
         90:25:b1:30:93:48:fc:16:60:cf:6e:3f:b2:24:63:33:46:61:
         78:ef:86:e3:39:0c:47:6d:0c:f4:c5:f8:72:18:61:1a:ec:a0:
         74:7b:87:66:e7:3f:8a:e1:89:c4:d3:00:82:3c:e3:7c:db:61:
         52:3e:9f:06:8d:97:4c:98:70:04:38:23:e6:8d:b5:83:5a:de:
         ab:e3:b9:b9:af:66:6a:09:78:64:6f:d3:0b:b7:45:14:cf:94:
         08:c7:0b:1a:36:9d:57:45:2c:8d:d2:f3:f6:e4:9a:67:4e:0d:
         1b:94:00:49:c3:c5:b5:b5:0a:55:ec:1a:54:a5:79:45:14:05:
         57:17:03:e2:d8:c3:f2:15:da:58:e9:7b:c7:ac:16:4e:54:24:
         7b:27:56:0b:b9:5b:de:e8:2c:f8:a3:20:2e:cc:c1:12:a2:02:
         de:39:1b:0c:1b:7f:a0:92:ad:cf:60:1d:b6:82:52:0d:b2:82:
         56:4f:f4:a4:a0:00:e8:3d:1f:89:a8:ac:f4:26:b3:4e:f5:e1:
         e2:4d:51:25:04:2e:e3:81:38:18:f5:d6:48:8e:5d:6f:17:d3:
         24:08:65:42:9b:9f:e6:e4:98:8d:c3:5b:7e:b4:c2:24:4f:b4:
         7b:06:fc:7e
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUSQES1owN4gq9A3KybkagpRB4c6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA1MTExNzUxNDNaFw0yNzA1MTAxNzU2NDNaMDMxMTAvBgNV
BAMTKDI5RjE5MDZBMzg2RjUzNTkwMDE0QzYyQ0VCNkM2Q0Y2NjgwQkY3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHDuOOP5PAnBwzj5TFLEdEV8v
iqWx1fit+iRXNevn8avMuYnh197IzEwA/cnmghWhqs2ubcmGDEu42CcMfC5QLZBx
PnnnmEDLNFYG8MU1ZxkzDU+/hyZyuWmMGyt0wkQWFCR4S5b6zxJSDFiclIIBNLxq
sS92+Tf1j2nc0KE2BKjuzP8Yu0Vmsn9thHYJeRb6h0kXfzGC2zDvw0DnPMEhu9LV
2AWfHePGasiTChhzw9B9DCHh+DgLEtAr4vq9v1x5RsG4NPNFtp7/SxKuGH3o8tJ1
QZRL9CAXUY4ALzgcYhyNXxkihYoIKLtxDNPXk7tI98rRp9O687il8IaWJL7HAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUKfGQajhvU1kAFMYs62xs9mgL98YwHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG
ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xPVUQvMC8zMTMwMzMy
ZTMxMzIzOTJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMTM4MzUz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmeBiDANBgkqhkiG9w0BAQsFAAOCAQEAiPY9rGSXr9fNbI6a
2PN1yiTkkCWxMJNI/BZgz24/siRjM0ZheO+G4zkMR20M9MX4chhhGuygdHuHZuc/
iuGJxNMAgjzjfNthUj6fBo2XTJhwBDgj5o21g1req+O5ua9magl4ZG/TC7dFFM+U
CMcLGjadV0UsjdLz9uSaZ04NG5QAScPFtbUKVewaVKV5RRQFVxcD4tjD8hXaWOl7
x6wWTlQkeydWC7lb3ugs+KMgLszBEqIC3jkbDBt/oJKtz2AdtoJSDbKCVk/0pKAA
6D0fiais9CazTvXh4k1RJQQu44E4GPXWSI5dbxfTJAhlQpuf5uSYjcNbfrTCJE+0
ewb8fg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:58 2026 by rpki-client