Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3332203d3e20313331363330.roa
File:                     3130332e35312e38382e302f32342d3332203d3e20313331363330.roa (raw, json)
Hash identifier:          +NJYyRiArplZ77QeIZEOn0y+tIqdn2w6pYCEhHdBY60=
Subject key identifier:   DF:17:74:91:17:93:E6:BC:9C:23:E4:F3:CA:28:CB:4B:74:1E:4C:F8
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       3D0C804C2D40F3E1863C5ABCEB01A4B6FFBCEFD9
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3332203d3e20313331363330.roa
Signing time:             Tue 04 Aug 2026 01:24:01 +0000
ROA not before:           Tue 04 Aug 2026 01:19:01 +0000
ROA not after:            Tue 03 Aug 2027 01:24:01 +0000
asID:                     131630
IP address blocks:        103.51.88.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0c:80:4c:2d:40:f3:e1:86:3c:5a:bc:eb:01:a4:b6:ff:bc:ef:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug  4 01:19:01 2026 GMT
            Not After : Aug  3 01:24:01 2027 GMT
        Subject: CN=DF1774911793E6BC9C23E4F3CA28CB4B741E4CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:d3:50:51:45:ba:60:bd:a0:79:94:62:b3:
                    0d:8a:7f:da:43:b2:5a:d7:81:ac:45:a1:93:8b:58:
                    67:12:69:14:34:d8:50:d2:6d:98:e0:22:14:ae:97:
                    a1:4e:df:69:6d:f5:4e:9a:83:50:b8:1f:bb:74:d7:
                    5e:23:4e:53:23:1e:95:61:82:f7:44:d6:ba:91:37:
                    d9:2c:7e:6f:3c:e1:63:67:18:6f:e7:9c:ba:27:db:
                    4a:c9:9c:d7:62:9b:b6:0b:06:e5:5c:74:3c:70:42:
                    06:e8:f7:2b:50:64:45:8d:61:3e:fa:09:73:87:cb:
                    de:e7:1c:55:66:18:58:ad:60:b8:8b:44:ac:5b:bb:
                    68:57:82:e4:fa:e3:59:ca:c3:2f:c5:1e:b9:4b:d0:
                    a4:b0:13:33:e7:3f:cb:18:c9:83:6e:62:71:80:85:
                    fe:d8:35:94:5d:ce:92:c6:85:b6:d0:52:6f:72:b3:
                    12:bd:4b:32:bb:86:51:29:f2:5b:ad:b7:54:0b:31:
                    22:85:1d:49:ac:77:c2:b1:85:43:cd:b7:e4:d1:1e:
                    95:e9:74:56:e8:e0:42:f9:8b:44:c3:ec:2c:34:7d:
                    b8:24:59:6e:ad:92:10:e8:fd:f8:3a:ee:5d:55:ca:
                    7d:cc:cb:75:13:ae:b1:a4:66:e2:08:e7:c1:36:9d:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:17:74:91:17:93:E6:BC:9C:23:E4:F3:CA:28:CB:4B:74:1E:4C:F8
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32342d3332203d3e20313331363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:db:17:53:86:2a:0c:73:4a:ae:c8:0b:03:6e:c0:b5:e3:
         01:a2:0d:38:be:79:39:57:12:b0:77:40:8c:f5:c1:e3:bc:30:
         f1:3c:b2:e2:34:32:c4:79:fa:26:b8:1c:aa:05:5a:57:4b:3d:
         4f:ba:14:94:8e:be:41:7a:9a:b7:ea:01:2d:f9:13:ee:5d:a8:
         96:d5:55:7c:02:8d:ac:40:a4:42:d3:6a:50:f9:c7:b1:60:87:
         c7:87:4e:53:11:15:4c:e1:92:a1:54:7e:50:a7:d6:6b:8a:70:
         72:ab:b1:92:1a:d5:b6:0c:27:84:f8:a3:5e:83:c8:ba:ba:d1:
         a2:fc:54:f6:8e:1f:22:1a:35:31:05:6e:e4:ec:8c:f0:b5:29:
         12:32:3e:57:7d:ce:74:6b:c0:73:8f:69:74:4f:09:1e:ff:20:
         05:b7:93:4e:e1:8e:99:c5:e6:e8:25:48:80:c0:6a:a7:8e:58:
         42:c8:c7:c1:42:fe:ce:0e:55:f5:1f:a4:3b:b0:48:97:3d:5b:
         73:d4:87:58:55:44:65:20:63:1c:34:f6:ad:bd:be:20:cf:d4:
         e8:26:58:ba:2b:e5:64:df:36:46:a3:dd:0c:da:20:f7:45:fc:
         4e:1d:f6:c6:2f:44:da:a7:40:34:08:a4:aa:50:f5:c8:90:00:
         82:17:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 16:10:09 2026 by rpki-client