Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037343833.roa
File:                     3130332e34322e3134342e302f32322d3234203d3e2037343833.roa (raw, json)
Hash identifier:          rgFsiPCeuTbr4yeDItGN0JB2GmcezifLDsT7ksjAxys=
Subject key identifier:   E2:32:10:4D:BF:3F:E4:7F:17:01:D4:9B:B0:1E:73:18:DE:93:65:B1
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       60B429F7DD1CB03B8E14E4F84142727A17511063
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037343833.roa
Signing time:             Thu 27 Aug 2026 11:24:00 +0000
ROA not before:           Thu 27 Aug 2026 11:19:00 +0000
ROA not after:            Thu 26 Aug 2027 11:24:00 +0000
asID:                     7483
IP address blocks:        103.42.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b4:29:f7:dd:1c:b0:3b:8e:14:e4:f8:41:42:72:7a:17:51:10:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Aug 27 11:19:00 2026 GMT
            Not After : Aug 26 11:24:00 2027 GMT
        Subject: CN=E232104DBF3FE47F1701D49BB01E7318DE9365B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:f3:4e:42:74:53:0c:4a:eb:aa:48:28:9c:
                    fb:73:ba:68:c2:b4:05:ce:aa:5a:c9:cf:8e:c6:ee:
                    26:a5:ea:aa:98:8d:ff:b7:b3:7a:2f:bc:b1:bd:28:
                    02:00:09:6d:c1:74:9b:46:e3:3a:f5:79:ed:45:d4:
                    c5:f5:88:fc:30:e7:18:a7:92:bf:64:e1:ed:d0:dd:
                    fc:bb:cf:63:53:5a:e9:e5:ad:2f:41:04:38:fb:d2:
                    eb:ca:e7:e7:fe:72:39:dc:58:5c:01:f4:72:62:58:
                    67:ad:ec:c4:51:e7:cf:c0:7f:ac:3c:01:47:5f:e7:
                    11:d8:fb:6e:76:18:1f:e3:20:52:d9:59:82:47:4a:
                    73:1c:99:b7:87:40:1c:0c:0b:e2:53:54:6b:ec:ad:
                    f6:6a:e3:38:b9:0f:c8:20:65:52:e8:65:ac:83:0f:
                    08:9e:a2:9a:1e:93:60:d7:6e:64:8a:4c:1a:0e:8e:
                    d7:45:e9:97:1b:96:fe:5e:1e:78:d1:f2:68:ac:1d:
                    22:64:1e:57:44:ba:83:0e:d7:59:21:a1:d4:0a:73:
                    f8:4d:6e:ac:74:3b:14:f3:89:88:a0:b3:8f:f5:aa:
                    e6:0d:d3:0d:0d:36:28:e0:c6:7a:d3:27:0d:19:d6:
                    97:b2:f7:f6:6c:fa:bd:f1:f0:b8:7b:78:6d:ba:64:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:10:4D:BF:3F:E4:7F:17:01:D4:9B:B0:1E:73:18:DE:93:65:B1
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:e8:04:87:c5:58:81:b1:13:0f:92:da:c4:eb:e4:87:dc:
         ae:4b:4a:51:75:3c:a9:57:d1:63:a8:39:29:f0:95:27:7e:49:
         32:f1:04:34:f3:24:cc:42:63:47:b0:d4:5b:9d:58:f8:a1:7f:
         74:be:ec:37:9c:56:ff:0e:f7:d2:db:5b:9d:f8:a3:c0:d7:0c:
         4f:ec:0d:a3:3a:7a:59:a5:27:2b:44:2f:ae:65:cb:2a:b0:44:
         e5:f6:42:1e:94:98:f2:98:08:d5:ce:24:9c:9e:26:61:c2:67:
         65:24:6f:b2:3f:bb:a2:b3:e8:af:02:32:c5:0c:64:84:35:36:
         a5:33:0a:ab:94:44:d8:0a:4c:3b:a3:5f:b3:9e:dc:c5:47:71:
         01:c0:d8:68:82:34:a3:b1:ee:c5:ca:35:99:55:56:04:79:dd:
         e6:70:4c:cd:53:d5:c5:51:86:56:69:ca:13:f9:09:ef:a1:52:
         4f:f7:fa:3f:53:9c:49:d6:57:af:67:ab:b5:4d:6b:3f:6d:c5:
         73:57:7c:f2:df:81:4d:86:e9:7c:21:58:21:9a:fd:5e:5c:79:
         8a:5e:bd:3f:6f:d6:5b:aa:4c:e7:fa:4c:4f:44:ed:c6:5a:15:
         93:54:ef:9a:57:ec:01:53:f5:62:5d:e6:ba:89:bb:10:9b:7e:
         b4:df:11:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:39 2026 by rpki-client