Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313331363537.roa
File:                     3130332e35312e38382e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          vAjwRathCa+mLRNCd0gEZIFCoZ7Q7I8qAI8wyykUzQo=
Subject key identifier:   51:20:B1:C2:8F:12:9A:63:1E:FB:61:FE:D4:F9:7C:EC:34:48:72:59
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       7E6EC786C44DD76493CAD169DB6FAAF7E0F0CFF2
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:26:48 +0000
ROA not before:           Mon 11 May 2026 17:21:48 +0000
ROA not after:            Mon 10 May 2027 17:26:48 +0000
asID:                     131657
IP address blocks:        103.51.88.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6e:c7:86:c4:4d:d7:64:93:ca:d1:69:db:6f:aa:f7:e0:f0:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: May 11 17:21:48 2026 GMT
            Not After : May 10 17:26:48 2027 GMT
        Subject: CN=5120B1C28F129A631EFB61FED4F97CEC34487259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:89:ff:2c:85:9e:62:a4:2b:b2:eb:56:60:
                    f9:9e:f0:6b:9d:8d:f6:d0:3f:21:11:d8:2a:97:3a:
                    33:e9:0b:8a:f0:61:19:cf:75:b2:a0:5d:9e:bd:0c:
                    4a:1f:e3:07:c4:81:f4:de:32:66:fe:8a:3f:4e:e5:
                    eb:eb:3e:44:53:ee:ed:19:1e:1d:52:8c:fa:ac:0d:
                    47:73:88:e8:71:07:3f:f9:81:41:6a:0f:ef:c2:23:
                    c1:f6:34:d6:93:4c:11:7a:31:de:13:a3:d4:1a:0c:
                    5a:f7:e9:10:2b:67:45:f2:4f:9f:5f:de:8b:24:16:
                    09:a2:f1:68:4c:9d:80:a7:89:22:c3:45:cc:5b:9a:
                    6c:26:9b:8a:c1:2b:bb:69:c1:0d:83:8c:ea:c1:76:
                    5b:16:2f:0d:f8:40:f3:96:3f:d0:3f:c0:02:6f:d5:
                    eb:96:6a:43:f2:0f:9d:ca:90:f7:76:90:d2:9d:5b:
                    ee:96:93:49:fa:0a:e1:de:f2:e1:4b:ea:8d:0c:e9:
                    bd:9c:1b:b1:1a:90:22:c3:ab:30:a7:a5:77:d9:a5:
                    bb:20:e5:ff:ab:b8:6b:02:2d:38:55:3a:fa:55:61:
                    94:06:cb:aa:fa:a3:ce:bd:fc:c7:d6:72:86:fd:47:
                    77:64:54:d4:45:6a:37:b8:1c:81:48:8e:d8:a1:dd:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:20:B1:C2:8F:12:9A:63:1E:FB:61:FE:D4:F9:7C:EC:34:48:72:59
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:86:5e:a3:f8:20:66:71:c6:c9:7d:af:cb:1f:45:73:e0:5a:
         05:78:a3:d8:95:c9:83:18:1c:62:d7:dc:fd:c2:d3:85:af:e5:
         97:fc:03:02:6d:af:25:42:94:cb:24:be:c8:fa:3b:27:cb:70:
         0e:55:5a:e6:3c:20:e6:90:84:79:19:07:45:28:a9:1c:15:5a:
         b1:c2:e0:a9:19:f0:15:77:88:19:97:a2:f6:a1:d8:e2:d9:66:
         b7:17:01:26:ff:0c:5b:c9:29:f8:f8:ef:db:19:58:3a:94:5a:
         85:b2:26:ae:8e:67:df:f2:46:36:eb:7b:24:da:86:f3:69:6e:
         43:6a:85:aa:c9:1d:ac:79:75:20:eb:5b:a3:74:ad:7f:d6:e5:
         63:db:8f:cc:6f:c3:2f:4e:3d:4f:71:a6:c8:5a:4a:a9:be:c3:
         44:c6:b8:ce:1b:37:1d:1d:22:02:5a:16:fa:da:5d:91:f4:e5:
         2d:9e:84:05:e5:bc:9e:e8:24:4c:38:0b:db:6d:db:63:f0:bc:
         78:5e:77:df:94:2d:95:fa:6f:ab:62:f4:16:ed:30:fe:b7:1e:
         69:8a:db:87:8f:4d:33:b0:ec:84:c4:df:8b:1c:43:48:1b:55:
         82:a7:39:c0:ee:d4:6e:a7:aa:91:27:d7:0c:dc:b5:64:8e:2f:
         80:d5:62:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:06 2026 by rpki-client