Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323032373336.roa
File:                     3130332e35312e38392e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          Whnb/ThlWxQ+7I1dFpmvnIH8IA/0SIYgFsuoRbepf0k=
Subject key identifier:   4A:9D:C8:A2:59:67:71:8D:DD:BD:AA:02:69:6E:3C:81:BB:E7:65:B8
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       6BF870385625893E4202100E3DB53DB912D61728
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323032373336.roa
Signing time:             Mon 10 Aug 2026 02:04:05 +0000
ROA not before:           Mon 10 Aug 2026 01:59:05 +0000
ROA not after:            Mon 09 Aug 2027 02:04:05 +0000
asID:                     202736
IP address blocks:        103.51.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:70:38:56:25:89:3e:42:02:10:0e:3d:b5:3d:b9:12:d6:17:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 10 01:59:05 2026 GMT
            Not After : Aug  9 02:04:05 2027 GMT
        Subject: CN=4A9DC8A25967718DDDBDAA02696E3C81BBE765B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:48:de:ae:82:55:69:b1:01:41:73:f3:b3:
                    30:d5:0c:5d:45:84:68:ec:c5:56:3b:68:61:6b:d9:
                    e1:c3:de:20:f9:99:5c:f1:02:a3:4e:ee:c6:27:5b:
                    8c:14:db:81:7a:1e:d9:77:0f:77:bc:ff:42:ec:0b:
                    4a:20:c7:0e:7d:bb:a8:f8:41:c2:6c:0c:ec:f4:2d:
                    b5:a1:d9:0e:86:89:dd:a6:2f:da:0a:dc:70:ba:29:
                    21:33:61:78:4b:36:94:bc:11:96:b1:c6:ff:f3:c7:
                    a3:66:95:96:0f:4f:31:ba:1b:04:ab:5a:e7:54:1e:
                    f2:c4:86:3b:8f:5c:7b:59:39:a4:32:03:29:00:81:
                    db:f3:00:7b:73:85:6f:e3:19:f3:5c:e0:f9:3d:26:
                    6d:f9:ec:2e:dd:e8:15:8d:f4:90:49:1c:f1:27:02:
                    bb:0c:16:7f:8b:9d:61:59:2c:c0:0c:3e:23:1e:87:
                    6c:2a:3e:a6:bb:81:23:3b:be:65:47:2a:a9:fc:bb:
                    f2:75:ef:73:52:ee:29:01:31:b5:e9:ed:eb:d3:9a:
                    bc:7b:8b:cf:6e:30:bb:18:b1:b3:5e:88:2c:ed:ee:
                    df:ea:41:ba:da:ae:a9:78:ff:ff:24:b4:cd:04:ec:
                    72:02:7e:95:95:93:81:b0:13:9a:04:1f:ac:81:86:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:C8:A2:59:67:71:8D:DD:BD:AA:02:69:6E:3C:81:BB:E7:65:B8
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:90:af:b9:67:d7:15:94:a8:ac:e1:aa:57:a4:fd:2c:1c:4f:
         e3:c8:f3:68:b6:fd:92:50:4f:10:71:a2:71:11:c8:a6:0f:46:
         b3:e1:d1:6d:7e:8e:87:13:73:2c:94:d9:e4:26:79:e5:89:0f:
         12:31:6e:f6:fe:00:ab:c8:44:9e:f4:84:3e:b6:96:38:a5:80:
         bd:61:6b:1f:0b:35:3c:55:10:02:c9:79:37:7d:ab:c1:3e:db:
         1f:18:cb:d0:39:bf:7a:55:c2:cd:15:5c:e6:83:36:4c:50:1a:
         53:b1:ff:62:d1:57:c6:17:60:46:e1:aa:50:f0:cc:03:7c:e1:
         a0:9b:c0:84:72:11:7b:fa:75:65:24:52:5c:2c:12:1d:a5:dd:
         98:f5:36:3c:52:63:2d:df:b5:8e:e8:54:8c:5e:70:7f:07:61:
         6f:11:fb:51:a7:c3:27:31:1d:92:85:8c:ed:59:a3:f9:d0:ec:
         bc:cb:49:ca:7a:ee:32:08:80:99:88:28:b5:7f:b2:62:07:9f:
         03:0e:b3:aa:25:57:20:ea:bf:89:0b:45:7b:21:2a:5f:6d:50:
         d2:61:b8:f2:6e:f5:a7:9c:bb:52:4d:6b:14:e2:9d:e1:73:49:
         7c:6b:e1:9d:56:16:f3:d8:ff:05:60:ea:97:af:63:7a:cc:fa:
         de:b8:7c:50
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUa/hwOFYliT5CAhAOPbU9uRLWFygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4OTg1QTlBRUZC
QzVGRkVDQzAeFw0yNjA4MTAwMTU5MDVaFw0yNzA4MDkwMjA0MDVaMDMxMTAvBgNV
BAMTKDRBOURDOEEyNTk2NzcxOEREREJEQUEwMjY5NkUzQzgxQkJFNzY1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgkjeroJVabEBQXPzszDVDF1F
hGjsxVY7aGFr2eHD3iD5mVzxAqNO7sYnW4wU24F6Htl3D3e8/0LsC0ogxw59u6j4
QcJsDOz0LbWh2Q6Gid2mL9oK3HC6KSEzYXhLNpS8EZaxxv/zx6NmlZYPTzG6GwSr
WudUHvLEhjuPXHtZOaQyAykAgdvzAHtzhW/jGfNc4Pk9Jm357C7d6BWN9JBJHPEn
ArsMFn+LnWFZLMAMPiMeh2wqPqa7gSM7vmVHKqn8u/J173NS7ikBMbXp7evTmrx7
i89uMLsYsbNeiCzt7t/qQbrarql4//8ktM0E7HICfpWVk4GwE5oEH6yBhmFpAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUSp3IollncY3dvaoCaW48gbvnZbgwHwYDVR0j
BBgwFoAU4zZuf3sldeEaCbp4mFqa77xf/swwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEVDSERS
SVZFTi8wL0UzMzY2RTdGN0IyNTc1RTExQTA5QkE3ODk4NUE5QUVGQkM1RkZFQ0Mu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4
OTg1QTlBRUZCQzVGRkVDQy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcw
C4ZkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVOLzAvMzEz
MDMzMmUzNTMxMmUzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzcz
MzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZzNZMA0GCSqGSIb3DQEBCwUAA4IBAQCHkK+5Z9cVlKis
4apXpP0sHE/jyPNotv2SUE8QcaJxEcimD0az4dFtfo6HE3MslNnkJnnliQ8SMW72
/gCryESe9IQ+tpY4pYC9YWsfCzU8VRACyXk3favBPtsfGMvQOb96VcLNFVzmgzZM
UBpTsf9i0VfGF2BG4apQ8MwDfOGgm8CEchF7+nVlJFJcLBIdpd2Y9TY8UmMt37WO
6FSMXnB/B2FvEftRp8MnMR2ShYztWaP50Oy8y0nKeu4yCICZiCi1f7JiB58DDrOq
JVcg6r+JC0V7ISpfbVDSYbjybvWnnLtSTWsU4p3hc0l8a+GdVhbz2P8FYOqXr2N6
zPreuHxQ
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:09 2026 by rpki-client