Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323136313338.roa
File:                     3130332e3139362e3137332e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier:          Az+bcjXCHDnbJz8MRwqlf0Tl2aEkOMkAl6ZqFdvb0u0=
Subject key identifier:   23:8F:E8:88:94:3B:87:42:82:40:98:6F:62:63:06:0B:8F:17:2F:42
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       12404B1B1E1D6FF6668C879E7DC698356F469A7A
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323136313338.roa
Signing time:             Fri 28 Aug 2026 02:04:01 +0000
ROA not before:           Fri 28 Aug 2026 01:59:01 +0000
ROA not after:            Fri 27 Aug 2027 02:04:01 +0000
asID:                     216138
IP address blocks:        103.196.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 18:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:40:4b:1b:1e:1d:6f:f6:66:8c:87:9e:7d:c6:98:35:6f:46:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 28 01:59:01 2026 GMT
            Not After : Aug 27 02:04:01 2027 GMT
        Subject: CN=238FE888943B87428240986F6263060B8F172F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:88:14:b6:ee:27:d4:f0:48:01:8c:65:ae:
                    b2:ca:14:e1:8d:09:80:7b:c8:3a:9b:34:6e:57:d1:
                    be:11:30:da:7c:aa:bb:8f:1f:fb:46:dd:50:86:a6:
                    7f:d9:0b:d2:73:ae:db:33:23:cc:3b:c3:04:88:db:
                    95:2e:f9:e6:83:7f:53:ad:68:9f:82:9d:a9:d5:88:
                    16:e3:42:6a:b8:bf:e8:c8:70:65:15:8c:41:6f:12:
                    e8:4d:55:72:31:c9:76:a2:e9:22:6d:f0:c4:62:96:
                    4b:e0:0f:ed:90:7a:dc:f7:29:f9:29:a8:5a:1f:b6:
                    79:ee:a1:76:48:0c:74:ac:9e:a0:01:ea:0e:75:83:
                    2a:b4:31:32:ba:6d:bd:85:19:76:67:4d:ed:e0:35:
                    e5:50:4b:75:35:d5:88:3c:13:3f:e0:1f:2d:e3:9e:
                    40:a2:82:a8:48:92:d4:17:48:88:c7:dc:4a:e3:ff:
                    ee:a8:40:b5:f7:82:99:27:43:61:ff:cb:58:de:12:
                    0a:4a:d8:89:d2:fb:29:55:ef:81:68:60:cb:db:28:
                    42:84:8d:77:98:ee:82:0d:23:62:8a:52:91:31:b4:
                    be:7e:0d:50:e6:0d:2c:b0:0c:46:a1:68:ae:22:18:
                    f7:d4:24:61:f3:d8:71:b7:2f:6b:a8:6f:55:ce:c5:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8F:E8:88:94:3B:87:42:82:40:98:6F:62:63:06:0B:8F:17:2F:42
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:90:ec:1d:bd:da:07:fb:c0:57:73:ed:ba:20:fc:85:8e:85:
         77:c9:9f:5d:b1:1b:de:c6:57:9e:c4:c4:42:43:05:2f:ad:56:
         de:41:f6:6c:16:e3:1e:25:8f:de:47:6e:54:1c:2f:23:60:e9:
         77:bd:0c:a7:1b:19:c3:14:9f:06:14:7c:e5:56:c5:b7:8a:30:
         27:1b:80:9b:e6:41:d5:3a:f2:15:93:23:45:b4:41:60:6e:b8:
         83:2a:8f:ee:fa:8d:e9:3e:ff:9f:b6:46:c0:63:84:75:35:a8:
         f3:07:90:c2:00:8f:6a:73:53:a1:d3:8e:18:37:4a:6c:62:dc:
         21:a8:95:3c:ab:5b:b8:f8:10:08:0e:d3:9b:76:3c:a4:eb:22:
         92:6c:38:5e:40:e8:d8:b1:78:3d:f9:e7:b1:86:fa:8f:28:1b:
         87:12:49:25:0c:e4:5e:49:01:03:7a:61:a6:2f:12:a3:a2:df:
         51:96:64:b1:87:ff:c6:15:be:18:ea:7d:bb:6c:d5:60:11:af:
         03:d1:03:09:a7:28:93:6e:d8:9f:ad:54:df:34:63:0a:00:2d:
         b3:39:54:0d:fb:3b:2c:de:3c:d1:f7:54:41:c4:e7:6f:fc:8e:
         50:f7:8e:52:25:fa:7d:d2:8a:4e:cc:71:32:58:91:f4:fb:f2:
         93:e6:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:08 2026 by rpki-client