Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32342d3234203d3e2037343833.roa
File:                     3130332e34322e3134342e302f32342d3234203d3e2037343833.roa (raw, json)
Hash identifier:          cgb3chUP3JqfYq0b1LvjxVctXBWKiOzejJyOVV0Lan4=
Subject key identifier:   1A:76:97:CA:89:DA:47:01:D4:D0:84:2F:DF:9F:91:B4:D6:3A:3A:BE
Certificate issuer:       /CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
Certificate serial:       2460E1C9115C6B20385DB6A122203FAF90DFF892
Authority key identifier: 9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32342d3234203d3e2037343833.roa
Signing time:             Thu 27 Aug 2026 11:44:00 +0000
ROA not before:           Thu 27 Aug 2026 11:39:00 +0000
ROA not after:            Thu 26 Aug 2027 11:44:00 +0000
asID:                     7483
IP address blocks:        103.42.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl
                          rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:60:e1:c9:11:5c:6b:20:38:5d:b6:a1:22:20:3f:af:90:df:f8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C80748B2DAEA7CC222759E116AA34AFACC7EA09
        Validity
            Not Before: Aug 27 11:39:00 2026 GMT
            Not After : Aug 26 11:44:00 2027 GMT
        Subject: CN=1A7697CA89DA4701D4D0842FDF9F91B4D63A3ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:59:84:ef:9a:22:31:25:e2:fd:71:1f:1e:
                    02:ca:59:96:38:a4:f2:5a:2a:f9:6c:0b:08:ab:f0:
                    eb:ff:9b:bf:2e:0b:35:14:90:fd:13:6e:c6:05:7e:
                    32:a8:7f:ab:95:e2:11:d4:a3:ed:77:1f:0f:3c:8f:
                    58:bd:56:16:f3:1c:35:ca:79:18:d0:22:28:95:4d:
                    f1:27:54:00:5b:4a:68:83:33:21:77:89:56:16:73:
                    24:a0:d3:27:20:ce:a3:2d:01:ac:52:a9:7b:3f:3a:
                    65:73:ce:27:9a:7c:db:1e:21:0a:23:e1:1f:85:c1:
                    5c:31:cc:9c:cc:03:d0:6c:ef:d3:e3:05:c0:9b:08:
                    8c:12:16:fb:8a:19:65:f8:3b:c6:54:91:2b:13:a5:
                    27:0f:cd:f1:ea:a6:54:58:5a:cd:de:a6:7e:f9:85:
                    65:b6:bb:28:84:dd:e2:6e:2e:6a:0c:98:3e:33:33:
                    f7:41:11:49:18:39:42:07:ec:a6:41:c2:a0:7a:8b:
                    df:20:e3:8e:12:31:92:28:71:e6:71:3f:c9:96:cb:
                    91:2d:53:5d:8c:11:9b:69:34:27:48:ad:e5:9e:34:
                    12:08:c7:b6:95:ff:07:32:35:43:89:9b:db:cf:b9:
                    06:33:7d:bf:92:7f:4c:5a:36:a3:f7:98:48:04:36:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:97:CA:89:DA:47:01:D4:D0:84:2F:DF:9F:91:B4:D6:3A:3A:BE
            X509v3 Authority Key Identifier:
                keyid:9C:80:74:8B:2D:AE:A7:CC:22:27:59:E1:16:AA:34:AF:AC:C7:EA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C80748B2DAEA7CC222759E116AA34AFACC7EA09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYCLOUD/0/3130332e34322e3134342e302f32342d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:58:29:07:4c:e6:40:b1:17:6d:cc:7a:af:b4:cd:aa:54:
         3b:ba:38:c0:d6:35:08:ff:eb:38:9b:6c:d1:07:04:97:42:53:
         75:13:c0:ff:93:5b:e1:66:f4:5a:98:38:92:f2:52:72:b0:92:
         9e:6a:61:e2:00:f6:20:b1:f9:74:2f:c9:de:ac:09:19:44:65:
         07:2e:8b:07:31:32:11:ed:6c:f9:8d:5a:69:ec:f7:28:ca:6c:
         1d:0e:ab:23:68:19:3b:de:b0:2c:3f:91:07:0b:40:8c:84:e7:
         fe:93:27:44:eb:b1:d7:7a:19:f0:5f:2d:e6:99:39:c9:59:93:
         1a:da:82:fd:ff:ca:91:4a:c3:01:0b:9e:8f:95:56:02:c0:23:
         36:ee:b1:52:72:97:3d:18:5b:95:37:49:34:71:24:db:01:a9:
         c7:e2:bb:a4:3b:09:92:dc:b3:06:5d:22:37:ec:e6:97:42:39:
         a0:85:7c:66:74:de:ae:4b:60:24:91:d9:0f:93:ac:15:a0:b4:
         07:f2:b1:0a:a4:e3:a4:19:1a:c8:a6:35:15:6f:c7:d3:8a:f0:
         cf:4c:52:ba:68:01:f2:c8:25:3b:24:c2:83:80:14:75:89:75:
         b1:da:01:a5:b0:67:2d:79:ff:75:c9:62:cd:37:1a:4f:13:53:
         39:e2:bc:2b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUJGDhyRFcayA4XbahIiA/r5Df+JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MDc0OEIyREFFQTdDQzIyMjc1OUUxMTZBQTM0QUZB
Q0M3RUEwOTAeFw0yNjA4MjcxMTM5MDBaFw0yNzA4MjYxMTQ0MDBaMDMxMTAvBgNV
BAMTKDFBNzY5N0NBODlEQTQ3MDFENEQwODQyRkRGOUY5MUI0RDYzQTNBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMlmE75oiMSXi/XEfHgLKWZY4
pPJaKvlsCwir8Ov/m78uCzUUkP0TbsYFfjKof6uV4hHUo+13Hw88j1i9VhbzHDXK
eRjQIiiVTfEnVABbSmiDMyF3iVYWcySg0ycgzqMtAaxSqXs/OmVzzieafNseIQoj
4R+FwVwxzJzMA9Bs79PjBcCbCIwSFvuKGWX4O8ZUkSsTpScPzfHqplRYWs3epn75
hWW2uyiE3eJuLmoMmD4zM/dBEUkYOUIH7KZBwqB6i98g444SMZIoceZxP8mWy5Et
U12MEZtpNCdIreWeNBIIx7aV/wcyNUOJm9vPuQYzfb+Sf0xaNqP3mEgENv6/AgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUGnaXyonaRwHU0IQv35+RtNY6Or4wHwYDVR0j
BBgwFoAUnIB0iy2up8wiJ1nhFqo0r6zH6gkwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0tZQ0xP
VUQvMC85QzgwNzQ4QjJEQUVBN0NDMjIyNzU5RTExNkFBMzRBRkFDQzdFQTA5LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzlDODA3NDhCMkRBRUE3Q0MyMjI3NTlFMTE2
QUEzNEFGQUNDN0VBMDkuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4Zg
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TS1lDTE9VRC8wLzMxMzAzMzJl
MzQzMjJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczNDM4MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABnKpAwDQYJKoZIhvcNAQELBQADggEBAAN/WCkHTOZAsRdtzHqvtM2q
VDu6OMDWNQj/6zibbNEHBJdCU3UTwP+TW+Fm9FqYOJLyUnKwkp5qYeIA9iCx+XQv
yd6sCRlEZQcuiwcxMhHtbPmNWmns9yjKbB0OqyNoGTvesCw/kQcLQIyE5/6TJ0Tr
sdd6GfBfLeaZOclZkxragv3/ypFKwwELno+VVgLAIzbusVJylz0YW5U3STRxJNsB
qcfiu6Q7CZLcswZdIjfs5pdCOaCFfGZ03q5LYCSR2Q+TrBWgtAfysQqk46QZGsim
NRVvx9OK8M9MUrpoAfLIJTskwoOAFHWJdbHaAaWwZy15/3XJYs03Gk8TUznivCs=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:23 2026 by rpki-client