Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/323430303a633961303a3a2f33322d3438203d3e20313334383233.roa
File:                     323430303a633961303a3a2f33322d3438203d3e20313334383233.roa (raw, json)
Hash identifier:          roZf74LZTjPC37WNB8hAfHKXR+n61h+kMwdr2WeTD/c=
Subject key identifier:   FC:40:CA:09:BB:D7:90:18:AD:8A:E9:3E:01:12:14:70:48:C9:03:A4
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       0C66C6085E85F8C11B5BA4042501511C3F744B99
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/323430303a633961303a3a2f33322d3438203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:26:53 +0000
ROA not before:           Mon 11 May 2026 17:21:53 +0000
ROA not after:            Mon 10 May 2027 17:26:53 +0000
asID:                     134823
IP address blocks:        2400:c9a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:c6:08:5e:85:f8:c1:1b:5b:a4:04:25:01:51:1c:3f:74:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: May 11 17:21:53 2026 GMT
            Not After : May 10 17:26:53 2027 GMT
        Subject: CN=FC40CA09BBD79018AD8AE93E0112147048C903A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:29:75:59:7e:4b:06:c9:0d:f1:0f:85:91:
                    ec:dd:4c:ce:5e:df:b8:b6:46:ed:68:b8:66:10:d5:
                    74:6e:6c:87:e6:f5:02:c0:c0:91:db:7f:b2:56:1b:
                    51:09:4c:7a:25:39:0f:14:0a:56:ae:23:fc:ce:3b:
                    4c:30:0c:f5:e4:b0:16:3f:d3:84:74:24:9f:d7:55:
                    55:c5:e1:e6:67:4d:5f:d3:83:33:26:9d:7c:71:9f:
                    5b:f7:c8:15:73:a1:b4:7c:bb:15:99:31:60:7b:ea:
                    5c:39:b1:de:b9:92:bb:d5:e6:ab:50:9a:1e:49:33:
                    02:d6:17:c5:f8:40:3d:73:3c:a0:fe:0f:d4:58:4c:
                    a9:f6:1f:0d:66:00:7d:f7:e1:69:de:96:e8:34:48:
                    64:80:b6:5b:c6:57:f8:95:61:74:b1:ef:52:b7:32:
                    d5:8e:3e:86:e8:95:90:80:7f:32:bf:b7:06:0f:98:
                    c6:3d:7b:ab:64:75:8d:0e:06:04:d3:18:4d:d9:39:
                    e6:76:db:86:88:44:c6:86:16:2c:bd:30:89:a4:20:
                    b3:31:be:e5:b2:61:ef:68:b5:cf:6f:32:50:3e:7e:
                    84:86:fa:3c:23:08:56:1a:02:1f:85:98:88:c1:d3:
                    dd:68:7d:ce:94:3b:de:f5:02:67:7b:99:98:8c:a6:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:CA:09:BB:D7:90:18:AD:8A:E9:3E:01:12:14:70:48:C9:03:A4
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/323430303a633961303a3a2f33322d3438203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:26:ef:a4:2d:73:2c:2d:0b:ce:64:ec:37:f3:bb:64:ac:c9:
         f8:ad:36:64:4b:77:62:6e:da:f4:2e:85:22:a5:24:b2:08:f2:
         a0:80:66:46:6f:11:a5:79:c3:e9:db:3b:64:80:d1:f9:f5:a1:
         c6:24:30:b3:7e:f5:85:04:54:64:a4:a9:f0:4a:ce:f9:a1:60:
         d8:3e:23:1f:68:c2:4b:4d:59:1b:4b:66:ff:de:ec:8a:5a:f2:
         93:40:5a:dd:bc:35:da:ae:a2:a7:56:4a:c1:25:3d:6a:b6:43:
         b1:c3:60:85:e4:02:d9:ba:73:e0:3d:b2:70:81:ee:06:8c:a8:
         2b:1b:5e:c7:5c:21:ca:1e:01:86:5a:9d:e2:a2:3d:da:2c:32:
         20:3a:b7:05:61:c6:28:e8:9a:3f:f3:86:10:dc:48:37:19:bb:
         cd:2b:c8:db:65:68:a7:f6:80:1b:7e:7f:c2:f8:7b:5f:5c:6e:
         fc:8d:0b:16:74:f3:f5:aa:2d:00:eb:2d:3c:bf:79:ab:eb:ec:
         bd:25:8a:c2:64:59:4e:5f:6b:e6:11:71:97:b6:da:8a:be:8d:
         d2:fd:4c:1c:8c:64:81:56:18:93:0a:14:ef:8c:a3:fe:22:ea:
         95:a8:96:d1:05:63:b6:a6:69:13:a0:03:dc:ad:4a:30:f7:2b:
         44:2a:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:40 2026 by rpki-client