Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20313937353337.roa
File:                     3130332e35312e38392e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          Pi0WjfkVPXYk6Yh8VgXI8s5Z+aj59l1fFoqol7zs5tQ=
Subject key identifier:   57:27:33:10:5A:EA:FD:DC:35:4F:EF:4B:4D:4F:D1:9E:D8:2E:64:F2
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       68FBA9B209A3482E7EE7729907124CD3464CC89D
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20313937353337.roa
Signing time:             Mon 10 Aug 2026 02:04:01 +0000
ROA not before:           Mon 10 Aug 2026 01:59:01 +0000
ROA not after:            Mon 09 Aug 2027 02:04:01 +0000
asID:                     197537
IP address blocks:        103.51.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fb:a9:b2:09:a3:48:2e:7e:e7:72:99:07:12:4c:d3:46:4c:c8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 10 01:59:01 2026 GMT
            Not After : Aug  9 02:04:01 2027 GMT
        Subject: CN=572733105AEAFDDC354FEF4B4D4FD19ED82E64F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:8c:ae:66:0b:be:be:70:a4:43:7a:08:53:
                    74:66:b1:c5:1e:84:af:80:fd:17:68:d2:30:6d:69:
                    e4:59:c8:d4:44:55:7e:5a:e1:d5:29:7f:05:bb:c6:
                    d5:5b:d5:a9:2d:17:ac:9d:36:96:24:8f:99:fd:eb:
                    68:69:2d:81:62:ad:b8:eb:56:db:ee:1f:a4:e1:c2:
                    8c:01:28:bd:c7:38:bc:b9:aa:8f:c6:47:94:24:ac:
                    63:22:eb:7d:da:32:51:71:ed:06:26:3c:82:d3:af:
                    1f:a1:29:a8:7e:e5:68:8d:15:d3:bd:c6:72:0e:76:
                    62:23:d3:0a:ba:36:4d:98:21:9b:15:71:9f:fe:27:
                    1a:12:4f:49:92:bb:91:59:d4:99:66:ff:dc:9b:2c:
                    09:1a:72:cc:41:00:4c:7a:dc:0f:a8:9e:9e:43:f4:
                    5a:a0:c1:f8:a9:a4:a0:bc:37:ac:5b:fa:5b:50:15:
                    e4:4c:b4:8c:b9:1b:d7:27:22:e5:09:f4:ba:12:ee:
                    e1:8d:ea:6d:9c:ee:17:c4:0b:ae:40:95:f3:2b:c5:
                    50:53:22:dd:5c:7c:cc:94:95:5d:75:69:f9:06:7f:
                    a0:aa:41:51:08:c3:73:4e:5d:93:c6:6d:4d:56:c1:
                    cc:7d:77:9b:60:94:12:5f:ac:e5:42:a6:49:14:db:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:33:10:5A:EA:FD:DC:35:4F:EF:4B:4D:4F:D1:9E:D8:2E:64:F2
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:7d:b8:40:5d:13:26:53:bf:a3:16:83:94:29:69:b0:2f:0b:
         f0:ba:c8:87:66:38:f8:27:cc:a1:b1:79:aa:92:36:c2:b5:e7:
         41:b4:da:49:bf:1f:78:4a:a0:ab:c6:ca:d7:86:c8:eb:7e:a2:
         02:df:61:ab:ee:62:bc:ee:f0:35:49:ae:29:c0:f6:71:39:32:
         42:7e:05:8b:c2:32:7d:98:36:0a:52:2a:ca:15:ce:17:55:22:
         6a:ed:aa:41:7d:74:c5:6d:43:d7:fd:a0:6a:dc:a1:8c:b4:b5:
         3c:2e:eb:0c:f1:c8:0e:03:56:1a:90:23:91:ac:8b:84:4d:26:
         3f:d8:aa:f9:36:2f:ba:b3:89:91:ad:b8:34:97:65:94:a4:2c:
         ee:aa:01:2c:de:c6:1c:13:8f:be:62:9b:1e:dc:5c:be:5d:62:
         57:5d:7c:dd:9a:97:53:f4:27:92:19:a3:6a:9d:99:b5:30:a6:
         54:33:f7:1f:ca:06:20:07:12:61:55:89:3e:6c:46:52:41:04:
         e4:38:d7:29:ef:43:99:f0:1c:5a:55:0d:af:3b:69:f8:8b:ce:
         1e:54:ea:42:f2:51:6f:85:7e:2d:1b:3e:3b:d1:a6:9b:b6:7e:
         b5:f7:8f:c5:43:f5:9c:63:5c:a3:7a:ea:dd:12:fc:c5:b3:18:
         79:1e:ca:cf
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUaPupsgmjSC5+53KZBxJM00ZMyJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4OTg1QTlBRUZC
QzVGRkVDQzAeFw0yNjA4MTAwMTU5MDFaFw0yNzA4MDkwMjA0MDFaMDMxMTAvBgNV
BAMTKDU3MjczMzEwNUFFQUZEREMzNTRGRUY0QjRENEZEMTlFRDgyRTY0RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LYyuZgu+vnCkQ3oIU3RmscUe
hK+A/Rdo0jBtaeRZyNREVX5a4dUpfwW7xtVb1aktF6ydNpYkj5n962hpLYFirbjr
VtvuH6ThwowBKL3HOLy5qo/GR5QkrGMi633aMlFx7QYmPILTrx+hKah+5WiNFdO9
xnIOdmIj0wq6Nk2YIZsVcZ/+JxoST0mSu5FZ1Jlm/9ybLAkacsxBAEx63A+onp5D
9FqgwfippKC8N6xb+ltQFeRMtIy5G9cnIuUJ9LoS7uGN6m2c7hfEC65AlfMrxVBT
It1cfMyUlV11afkGf6CqQVEIw3NOXZPGbU1Wwcx9d5tglBJfrOVCpkkU25WRAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUVyczEFrq/dw1T+9LTU/RntguZPIwHwYDVR0j
BBgwFoAU4zZuf3sldeEaCbp4mFqa77xf/swwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEVDSERS
SVZFTi8wL0UzMzY2RTdGN0IyNTc1RTExQTA5QkE3ODk4NUE5QUVGQkM1RkZFQ0Mu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4
OTg1QTlBRUZCQzVGRkVDQy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcw
C4ZkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVOLzAvMzEz
MDMzMmUzNTMxMmUzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzUz
MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZzNZMA0GCSqGSIb3DQEBCwUAA4IBAQAgfbhAXRMmU7+j
FoOUKWmwLwvwusiHZjj4J8yhsXmqkjbCtedBtNpJvx94SqCrxsrXhsjrfqIC32Gr
7mK87vA1Sa4pwPZxOTJCfgWLwjJ9mDYKUirKFc4XVSJq7apBfXTFbUPX/aBq3KGM
tLU8LusM8cgOA1YakCORrIuETSY/2Kr5Ni+6s4mRrbg0l2WUpCzuqgEs3sYcE4++
Ypse3Fy+XWJXXXzdmpdT9CeSGaNqnZm1MKZUM/cfygYgBxJhVYk+bEZSQQTkONcp
70OZ8BxaVQ2vO2n4i84eVOpC8lFvhX4tGz470aabtn6194/FQ/WcY1yjeurdEvzF
sxh5HsrP
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:08 2026 by rpki-client