Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323136313338.roa
File:                     3130332e35312e38392e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier:          StDtW6u8xoGdm7V2jA8nHpgDxIxnEG4ISZyC7N0ahvM=
Subject key identifier:   A8:94:DE:23:FC:C4:C9:58:53:96:71:D9:9C:4A:C9:7D:D4:69:F9:CF
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       6178396F54A9391D64963F8AFA639AF07407676F
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323136313338.roa
Signing time:             Mon 10 Aug 2026 02:04:03 +0000
ROA not before:           Mon 10 Aug 2026 01:59:03 +0000
ROA not after:            Mon 09 Aug 2027 02:04:03 +0000
asID:                     216138
IP address blocks:        103.51.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 13:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:78:39:6f:54:a9:39:1d:64:96:3f:8a:fa:63:9a:f0:74:07:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 10 01:59:03 2026 GMT
            Not After : Aug  9 02:04:03 2027 GMT
        Subject: CN=A894DE23FCC4C958539671D99C4AC97DD469F9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:43:46:c9:9c:d0:64:0f:f9:1d:2f:75:a3:
                    57:05:7f:cc:84:3b:20:fb:72:51:74:8f:af:a1:67:
                    27:a0:b7:94:97:a6:04:a4:de:4f:96:29:bc:b2:38:
                    87:3e:24:c7:ad:ca:84:4f:ae:8e:b0:7f:6e:58:26:
                    b6:c5:55:8a:2c:27:3f:95:f8:ec:40:ae:bb:eb:83:
                    72:76:66:1c:5c:f7:67:e9:76:54:0a:eb:fa:b0:eb:
                    78:87:54:5e:19:52:92:b7:c2:be:53:9f:7c:4b:f6:
                    fd:a6:d9:3c:28:a2:c7:69:e8:00:dd:05:4a:3e:a4:
                    3b:67:f8:7e:9e:14:42:32:73:2c:2c:2f:3b:e0:62:
                    02:ec:d8:0e:80:41:e9:9b:96:8e:ab:e1:07:2f:78:
                    2b:38:5e:65:6f:53:9e:45:97:10:c2:5d:20:cd:5d:
                    45:ea:2f:ac:cc:3c:92:66:ad:cd:e4:a7:4c:fb:b0:
                    f5:d2:d8:47:9a:ea:0f:ec:f4:1b:82:fe:18:24:a2:
                    b8:ba:07:25:d2:00:33:16:68:6b:00:08:46:fa:6f:
                    bd:7c:f3:1c:d0:30:69:20:8e:46:7d:8c:59:c7:54:
                    b3:38:24:e2:0e:27:14:65:d7:bf:53:42:42:32:4e:
                    9e:28:87:a8:08:73:a4:86:54:19:96:4a:10:dd:18:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:94:DE:23:FC:C4:C9:58:53:96:71:D9:9C:4A:C9:7D:D4:69:F9:CF
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3234203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:6d:8d:1f:53:1b:f3:5f:de:a9:af:7c:9d:0c:3b:a8:8b:
         27:bf:ea:5d:20:8d:16:e0:a7:11:c4:b7:ee:22:56:ba:af:46:
         f2:b5:a4:03:cd:1b:bd:df:c8:6b:3a:cc:f8:65:20:fa:8a:a3:
         ec:b7:37:99:ac:a3:75:27:c7:b1:17:bb:88:eb:c0:26:f3:cf:
         89:4b:c2:98:f4:43:94:e5:74:a9:06:eb:38:83:eb:fa:64:48:
         86:37:c7:df:a7:59:23:b2:ae:26:29:4e:35:f6:b1:e3:2a:26:
         7e:58:5e:1a:88:3b:9f:5b:16:75:c9:17:c1:1f:e5:d8:a1:37:
         7d:59:45:4d:72:7a:a0:76:15:78:79:5f:80:b4:10:11:1c:e0:
         7c:cf:8a:d7:cb:e9:3c:b9:e1:bd:6a:8c:aa:2f:3c:82:c0:a4:
         18:a8:39:a4:82:13:5e:ed:5d:d8:3c:f7:94:2f:32:7d:29:da:
         3d:a2:b8:a4:67:6d:15:6b:b8:65:2a:a7:3b:ea:b0:54:9d:6e:
         da:b0:32:09:27:18:be:04:dd:f4:aa:21:17:da:a2:e3:f4:ef:
         d2:62:f9:1a:44:cf:ca:44:ce:9d:9d:5d:d3:36:a5:ce:1a:49:
         e9:6e:1e:71:a4:b7:d7:f9:cb:6a:db:a0:3a:fb:b3:1a:5a:b6:
         03:10:4a:5b
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUYXg5b1SpOR1klj+K+mOa8HQHZ28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4OTg1QTlBRUZC
QzVGRkVDQzAeFw0yNjA4MTAwMTU5MDNaFw0yNzA4MDkwMjA0MDNaMDMxMTAvBgNV
BAMTKEE4OTRERTIzRkNDNEM5NTg1Mzk2NzFEOTlDNEFDOTdERDQ2OUY5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyu0NGyZzQZA/5HS91o1cFf8yE
OyD7clF0j6+hZyegt5SXpgSk3k+WKbyyOIc+JMetyoRPro6wf25YJrbFVYosJz+V
+OxArrvrg3J2Zhxc92fpdlQK6/qw63iHVF4ZUpK3wr5Tn3xL9v2m2Twoosdp6ADd
BUo+pDtn+H6eFEIycywsLzvgYgLs2A6AQemblo6r4QcveCs4XmVvU55FlxDCXSDN
XUXqL6zMPJJmrc3kp0z7sPXS2Eea6g/s9BuC/hgkori6ByXSADMWaGsACEb6b718
8xzQMGkgjkZ9jFnHVLM4JOIOJxRl179TQkIyTp4oh6gIc6SGVBmWShDdGCdFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUqJTeI/zEyVhTlnHZnErJfdRp+c8wHwYDVR0j
BBgwFoAU4zZuf3sldeEaCbp4mFqa77xf/swwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEVDSERS
SVZFTi8wL0UzMzY2RTdGN0IyNTc1RTExQTA5QkE3ODk4NUE5QUVGQkM1RkZFQ0Mu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4
OTg1QTlBRUZCQzVGRkVDQy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcw
C4ZkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVOLzAvMzEz
MDMzMmUzNTMxMmUzODM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzEz
MzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZzNZMA0GCSqGSIb3DQEBCwUAA4IBAQBo1G2NH1Mb81/e
qa98nQw7qIsnv+pdII0W4KcRxLfuIla6r0bytaQDzRu938hrOsz4ZSD6iqPstzeZ
rKN1J8exF7uI68Am88+JS8KY9EOU5XSpBus4g+v6ZEiGN8ffp1kjsq4mKU419rHj
KiZ+WF4aiDufWxZ1yRfBH+XYoTd9WUVNcnqgdhV4eV+AtBARHOB8z4rXy+k8ueG9
aoyqLzyCwKQYqDmkghNe7V3YPPeULzJ9Kdo9orikZ20Va7hlKqc76rBUnW7asDIJ
Jxi+BN30qiEX2qLj9O/SYvkaRM/KRM6dnV3TNqXOGknpbh5xpLfX+ctq26A6+7Ma
WrYDEEpb
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:03 2026 by rpki-client