Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037353338.roa
File:                     3130332e34322e3134342e302f32322d3234203d3e2037353338.roa (raw, json)
Hash identifier:          3+c7LzOJ+7ykNIAhsdKuwGwgIARE1KUf6DWic0iVf7Y=
Subject key identifier:   A8:53:FE:71:EE:46:6A:CA:AE:0C:43:97:14:AA:5D:38:DF:D9:3D:F9
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       08B991AB20FECFA8372829D275C14A4CCE96CEC7
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037353338.roa
Signing time:             Thu 27 Aug 2026 09:04:00 +0000
ROA not before:           Thu 27 Aug 2026 08:59:00 +0000
ROA not after:            Thu 26 Aug 2027 09:04:00 +0000
asID:                     7538
IP address blocks:        103.42.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 15:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b9:91:ab:20:fe:cf:a8:37:28:29:d2:75:c1:4a:4c:ce:96:ce:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Aug 27 08:59:00 2026 GMT
            Not After : Aug 26 09:04:00 2027 GMT
        Subject: CN=A853FE71EE466ACAAE0C439714AA5D38DFD93DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:34:12:25:83:88:26:58:41:0b:89:b4:90:
                    28:bc:4f:33:50:e6:65:79:7f:0a:54:df:40:0d:25:
                    ff:b0:95:99:b7:40:5e:2b:c0:7d:f3:48:6d:c9:8c:
                    1f:70:13:89:0b:62:3d:b2:32:e0:3b:d6:ba:be:e9:
                    18:40:f0:44:ef:48:62:c0:c0:f7:77:0b:6e:39:df:
                    c9:22:f1:0e:aa:17:79:c8:b5:85:f8:47:8c:ab:3f:
                    e9:28:35:03:00:68:f9:64:e1:91:9c:35:09:28:f4:
                    3f:20:97:e5:27:a8:90:1c:1e:b1:55:2f:80:a2:8a:
                    c2:00:1e:ff:be:71:6f:f6:f6:be:99:8c:9c:87:cd:
                    7c:b0:25:85:41:5c:41:b5:9f:8a:32:e7:d0:40:cc:
                    cc:00:b1:32:76:da:00:ce:5b:63:c1:68:b6:0f:15:
                    66:cc:f4:73:5f:ab:a1:e8:ec:cd:7b:9c:8b:ed:c2:
                    5c:a8:52:9e:4e:03:b3:7a:ca:da:9d:55:38:44:c2:
                    15:3a:1f:3a:41:12:d1:fa:03:1c:47:dc:43:72:d4:
                    9f:c4:00:45:f2:1b:5f:dc:f9:b5:62:22:35:87:bf:
                    cf:13:12:6f:a7:5b:f8:30:ab:3f:f1:0a:80:43:f8:
                    01:08:3f:08:5c:69:da:53:d1:59:1b:1e:44:8c:02:
                    6d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:FE:71:EE:46:6A:CA:AE:0C:43:97:14:AA:5D:38:DF:D9:3D:F9
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32322d3234203d3e2037353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:90:3f:38:1f:3a:f6:e1:5d:5e:37:ee:12:3f:45:65:f3:e9:
         bf:59:e1:49:01:7c:6f:75:0c:4b:8b:b9:ab:48:f0:aa:48:05:
         5c:82:cb:e0:6b:91:51:88:64:a3:80:71:88:d0:10:9d:2d:01:
         bd:5c:2b:a3:29:a9:b2:17:e3:1c:46:8a:7e:87:e4:cf:63:6d:
         d1:07:56:84:25:bd:a6:4b:e3:3f:bd:6c:0b:34:af:28:69:57:
         46:4c:91:78:ff:21:d6:d4:6b:b4:3e:48:76:53:3b:26:9b:18:
         c8:07:54:69:de:9d:08:e0:d5:ef:58:e9:d0:c0:55:6d:2d:eb:
         b2:6b:5c:b4:47:e5:c1:83:e0:b1:2f:9f:c6:45:d0:bc:78:95:
         d2:c7:11:ea:1e:16:cf:af:01:a4:b9:08:c8:a7:08:f5:0d:ff:
         af:18:c2:ca:ef:0a:23:5c:16:74:90:a5:a0:f8:3c:40:d5:00:
         63:f0:f3:ba:ca:45:72:ae:0b:4d:a1:8c:12:e3:5a:e8:2a:57:
         a7:9f:c5:ce:40:ce:ed:3f:20:4d:6c:69:6f:0f:0d:c9:46:e8:
         ec:d0:6e:e7:22:d6:8f:66:00:b4:d0:15:9f:63:3a:7d:1f:20:
         72:b3:7c:13:9a:07:0b:30:6d:98:46:0c:c2:87:83:14:d2:05:
         f5:78:53:0c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUCLmRqyD+z6g3KCnSdcFKTM6WzscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA4MjcwODU5MDBaFw0yNzA4MjYwOTA0MDBaMDMxMTAvBgNV
BAMTKEE4NTNGRTcxRUU0NjZBQ0FBRTBDNDM5NzE0QUE1RDM4REZEOTNERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71DQSJYOIJlhBC4m0kCi8TzNQ
5mV5fwpU30ANJf+wlZm3QF4rwH3zSG3JjB9wE4kLYj2yMuA71rq+6RhA8ETvSGLA
wPd3C24538ki8Q6qF3nItYX4R4yrP+koNQMAaPlk4ZGcNQko9D8gl+UnqJAcHrFV
L4CiisIAHv++cW/29r6ZjJyHzXywJYVBXEG1n4oy59BAzMwAsTJ22gDOW2PBaLYP
FWbM9HNfq6Ho7M17nIvtwlyoUp5OA7N6ytqdVThEwhU6HzpBEtH6AxxH3ENy1J/E
AEXyG1/c+bViIjWHv88TEm+nW/gwqz/xCoBD+AEIPwhcadpT0VkbHkSMAm1zAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUqFP+ce5GasquDEOXFKpdON/ZPfkwHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4Zg
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lDTE9VRC8wLzMxMzAzMzJl
MzQzMjJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzczNTMzMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnKpAwDQYJKoZIhvcNAQELBQADggEBAGSQPzgfOvbhXV437hI/RWXz
6b9Z4UkBfG91DEuLuatI8KpIBVyCy+BrkVGIZKOAcYjQEJ0tAb1cK6MpqbIX4xxG
in6H5M9jbdEHVoQlvaZL4z+9bAs0ryhpV0ZMkXj/IdbUa7Q+SHZTOyabGMgHVGne
nQjg1e9Y6dDAVW0t67JrXLRH5cGD4LEvn8ZF0Lx4ldLHEeoeFs+vAaS5CMinCPUN
/68YwsrvCiNcFnSQpaD4PEDVAGPw87rKRXKuC02hjBLjWugqV6efxc5Azu0/IE1s
aW8PDclG6OzQbuci1o9mALTQFZ9jOn0fIHKzfBOaBwswbZhGDMKHgxTSBfV4Uww=
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:27 2026 by rpki-client