Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3234203d3e20323032373336.roa
File:                     3130332e35312e38382e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          FEoIssrwXK5QMHC/kBZMdqGJGuEWKtILwZ+UGQsO0kI=
Subject key identifier:   64:BE:AF:DE:F0:98:52:D1:6D:93:03:A1:50:7F:6C:28:03:3C:42:39
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       4317F6EE15EE6E8D04F217699EA0A450F7FB09B3
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3234203d3e20323032373336.roa
Signing time:             Mon 10 Aug 2026 02:04:04 +0000
ROA not before:           Mon 10 Aug 2026 01:59:04 +0000
ROA not after:            Mon 09 Aug 2027 02:04:04 +0000
asID:                     202736
IP address blocks:        103.51.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:17:f6:ee:15:ee:6e:8d:04:f2:17:69:9e:a0:a4:50:f7:fb:09:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 10 01:59:04 2026 GMT
            Not After : Aug  9 02:04:04 2027 GMT
        Subject: CN=64BEAFDEF09852D16D9303A1507F6C28033C4239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:2e:b9:0d:82:b0:2b:5c:f3:21:fe:d0:b3:
                    99:fd:0f:38:0f:d7:8b:a9:01:85:60:bb:18:69:17:
                    53:e3:45:e8:7c:65:a4:c5:be:69:fc:9f:c2:05:0b:
                    67:ac:d8:9f:05:c8:ec:0f:8c:91:84:c3:13:09:d8:
                    3b:57:5b:ea:28:92:1a:74:e3:cc:a5:77:9d:c8:a3:
                    2a:34:25:67:af:f3:43:d0:cf:20:0e:15:7e:b9:49:
                    50:f3:19:82:4b:c4:ec:32:e7:39:23:b5:0a:a3:c6:
                    74:41:e1:3e:07:92:f9:8b:a3:34:0a:11:a7:92:66:
                    32:b5:5e:b5:28:5c:14:f2:ae:6b:c0:e8:b5:11:b8:
                    d1:14:37:b2:dd:4d:bf:d2:c7:ef:e9:08:61:ec:70:
                    37:a5:58:95:00:e2:13:cb:ee:6d:61:c9:35:2d:6b:
                    69:2e:78:ef:95:79:9e:a9:1d:29:3f:c5:dd:f9:57:
                    11:81:fd:af:63:ab:c4:a9:60:34:4d:dc:74:05:90:
                    82:cf:6b:96:8b:2e:31:40:1c:75:9c:b6:5b:51:0e:
                    f6:4d:49:96:71:60:e3:ab:be:b1:fe:c3:19:12:8c:
                    d4:88:12:f9:6b:dc:da:62:eb:84:a6:d2:4f:df:28:
                    45:68:1b:62:3b:38:fd:20:26:e3:10:92:a4:b6:18:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:AF:DE:F0:98:52:D1:6D:93:03:A1:50:7F:6C:28:03:3C:42:39
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:01:9a:92:71:77:0f:09:cb:3b:38:82:7c:38:a1:52:55:
         a6:d7:95:cf:5d:90:5d:fb:98:b6:c4:b4:d7:e9:26:53:c8:1f:
         1d:c8:32:72:7f:50:f4:fd:e6:6c:8a:88:a4:70:7f:a4:c7:8b:
         41:fc:0a:b2:68:90:a1:c2:5e:be:fa:84:92:99:70:9e:0f:8f:
         ac:80:9f:63:06:c1:83:1f:a2:9f:fc:06:9c:d7:06:e4:c2:65:
         c5:1b:81:13:11:4a:4d:e1:ad:88:6d:be:2c:31:d6:66:73:3f:
         b0:7a:bd:ea:e7:25:66:f3:8a:98:95:e9:12:ee:8a:66:24:2b:
         0a:3b:f7:c0:bd:3b:7b:3f:73:25:cf:33:99:e5:05:60:ce:9e:
         78:cd:a3:7f:37:b8:c4:e8:ff:50:d6:45:8e:f7:6c:f6:05:35:
         3e:c1:8f:7f:36:cb:4b:13:13:28:4b:80:a3:00:ef:09:ae:5a:
         f2:db:65:6b:ff:54:e5:64:94:6e:65:64:37:e8:f0:1f:00:98:
         f7:bc:71:8d:50:c7:20:d3:b8:b4:3b:b0:f7:51:86:98:1a:b8:
         17:97:51:d4:a7:c4:db:13:7d:7c:63:f6:8a:c6:24:67:14:a1:
         2c:28:11:20:09:32:b6:b0:1b:aa:d1:fd:1d:56:da:91:f9:b4:
         0b:24:8f:09
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUQxf27hXubo0E8hdpnqCkUPf7CbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4OTg1QTlBRUZC
QzVGRkVDQzAeFw0yNjA4MTAwMTU5MDRaFw0yNzA4MDkwMjA0MDRaMDMxMTAvBgNV
BAMTKDY0QkVBRkRFRjA5ODUyRDE2RDkzMDNBMTUwN0Y2QzI4MDMzQzQyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36i65DYKwK1zzIf7Qs5n9DzgP
14upAYVguxhpF1PjReh8ZaTFvmn8n8IFC2es2J8FyOwPjJGEwxMJ2DtXW+ookhp0
48yld53Ioyo0JWev80PQzyAOFX65SVDzGYJLxOwy5zkjtQqjxnRB4T4HkvmLozQK
EaeSZjK1XrUoXBTyrmvA6LURuNEUN7LdTb/Sx+/pCGHscDelWJUA4hPL7m1hyTUt
a2kueO+VeZ6pHSk/xd35VxGB/a9jq8SpYDRN3HQFkILPa5aLLjFAHHWctltRDvZN
SZZxYOOrvrH+wxkSjNSIEvlr3Npi64Sm0k/fKEVoG2I7OP0gJuMQkqS2GHipAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUZL6v3vCYUtFtkwOhUH9sKAM8QjkwHwYDVR0j
BBgwFoAU4zZuf3sldeEaCbp4mFqa77xf/swwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEVDSERS
SVZFTi8wL0UzMzY2RTdGN0IyNTc1RTExQTA5QkE3ODk4NUE5QUVGQkM1RkZFQ0Mu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4
OTg1QTlBRUZCQzVGRkVDQy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcw
C4ZkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVOLzAvMzEz
MDMzMmUzNTMxMmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzcz
MzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZzNYMA0GCSqGSIb3DQEBCwUAA4IBAQCe0gGaknF3DwnL
OziCfDihUlWm15XPXZBd+5i2xLTX6SZTyB8dyDJyf1D0/eZsioikcH+kx4tB/Aqy
aJChwl6++oSSmXCeD4+sgJ9jBsGDH6Kf/Aac1wbkwmXFG4ETEUpN4a2Ibb4sMdZm
cz+wer3q5yVm84qYlekS7opmJCsKO/fAvTt7P3MlzzOZ5QVgzp54zaN/N7jE6P9Q
1kWO92z2BTU+wY9/NstLExMoS4CjAO8Jrlry22Vr/1TlZJRuZWQ36PAfAJj3vHGN
UMcg07i0O7D3UYaYGrgXl1HUp8TbE318Y/aKxiRnFKEsKBEgCTK2sBuq0f0dVtqR
+bQLJI8J
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:10 2026 by rpki-client