Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3234203d3e20313331363330.roa
File:                     3130332e35312e38382e302f32332d3234203d3e20313331363330.roa (raw, json)
Hash identifier:          DlGmRbwa0dyETCaet9KIW4lgF+OR7M2trB7QkobAPjI=
Subject key identifier:   6F:50:60:20:D0:C7:F4:1D:1A:22:8E:C6:D5:43:4B:21:8A:7C:CB:E2
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       7AD52EE901AE2B8006738743502DCBEC38C66E78
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3234203d3e20313331363330.roa
Signing time:             Mon 10 Aug 2026 02:04:02 +0000
ROA not before:           Mon 10 Aug 2026 01:59:02 +0000
ROA not after:            Mon 09 Aug 2027 02:04:02 +0000
asID:                     131630
IP address blocks:        103.51.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d5:2e:e9:01:ae:2b:80:06:73:87:43:50:2d:cb:ec:38:c6:6e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 10 01:59:02 2026 GMT
            Not After : Aug  9 02:04:02 2027 GMT
        Subject: CN=6F506020D0C7F41D1A228EC6D5434B218A7CCBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:a4:6b:62:32:10:e5:94:e7:0a:fe:a8:b4:
                    71:78:3f:aa:63:f6:90:76:c3:9c:54:e3:4b:71:c0:
                    e7:55:89:7f:a8:c1:78:36:7a:84:7b:21:5c:ad:88:
                    00:40:26:39:f3:e3:1a:8c:1f:2a:fb:2d:84:13:33:
                    86:d0:4f:8a:41:73:5e:c1:85:dc:1f:28:c0:9b:a9:
                    0c:de:20:16:b6:46:bd:d9:e3:b3:d8:ad:9f:74:f0:
                    5a:c6:40:e7:13:19:77:11:44:eb:6a:72:12:5f:db:
                    17:17:5d:f4:1d:d0:23:f7:0f:e3:e3:21:e7:e2:de:
                    8b:67:23:ca:96:c4:d5:6c:1f:22:e8:19:c9:27:aa:
                    06:2d:02:b1:a3:aa:75:c0:9a:06:a9:80:45:ec:35:
                    0a:87:3a:9f:1a:78:b1:74:0a:92:a7:70:2f:8f:44:
                    31:5b:0c:2f:52:85:98:91:c5:3e:01:32:18:eb:e8:
                    e6:58:22:7c:df:f9:d6:1b:b3:2d:de:b0:1c:c5:cc:
                    1f:59:78:a6:17:ed:e9:92:21:e9:1e:05:c8:eb:29:
                    e8:37:61:ee:5c:fd:cc:69:2c:6c:ec:aa:ac:3a:f0:
                    cb:ed:a4:b7:ee:53:af:1d:1c:8d:5e:94:83:ab:00:
                    08:85:e9:f4:c6:e5:5c:b3:c9:58:01:37:39:0b:0a:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:60:20:D0:C7:F4:1D:1A:22:8E:C6:D5:43:4B:21:8A:7C:CB:E2
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3234203d3e20313331363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:5f:48:cc:72:c7:eb:e5:18:3f:8a:f6:a1:f6:ec:d3:b9:
         77:0d:43:c1:92:6d:c1:7d:01:6b:17:a3:4b:e5:d8:de:94:c9:
         ed:02:6c:2a:8c:b8:f6:95:13:45:aa:9f:08:7f:f8:aa:3a:33:
         e8:fa:74:ce:af:eb:41:c5:f7:8a:fa:6d:36:e7:77:89:23:a4:
         48:91:1a:d9:95:6f:e9:b2:44:56:9e:fe:0a:8a:f6:74:94:8b:
         d7:b0:2f:c0:39:92:94:72:16:ae:6b:3a:db:8e:87:2d:25:e0:
         eb:3f:78:0c:c6:da:27:81:26:35:e5:df:7a:d1:22:32:8f:19:
         67:2c:6d:5d:44:21:be:fb:b4:bd:b3:aa:96:4b:85:c0:01:79:
         0f:ad:a7:9d:c4:4d:b8:b9:f3:cc:95:f8:8a:f6:ad:69:40:d8:
         0c:a6:f8:d3:22:af:17:a5:ea:9b:bc:03:38:9b:74:92:81:98:
         4d:15:37:c6:34:dd:18:4c:7b:1e:be:75:56:0c:32:b4:6a:31:
         8c:9e:b9:3d:c5:45:be:c4:ed:7e:a3:18:78:e4:f4:00:d4:01:
         1d:ef:fe:a0:e7:72:ce:63:26:c3:fb:1b:b4:77:8a:13:a1:c9:
         e6:48:b0:ac:ba:6f:27:7a:13:ab:50:d1:0e:65:2d:0f:b8:46:
         9b:c7:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:10 2026 by rpki-client