Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313334383233.roa
File:                     3130332e35312e38382e302f32332d3332203d3e20313334383233.roa (raw, json)
Hash identifier:          3MhCCA9x4cSH+VWvwThmSDFRAUojv21Q6ESF/FUc02s=
Subject key identifier:   1D:B3:5F:92:D0:64:BA:78:85:B6:1A:71:B6:AD:DA:87:19:F1:E2:69
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       4169FB3306000A1A16D23878A46346BD6961F111
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:26:49 +0000
ROA not before:           Mon 11 May 2026 17:21:49 +0000
ROA not after:            Mon 10 May 2027 17:26:49 +0000
asID:                     134823
IP address blocks:        103.51.88.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:69:fb:33:06:00:0a:1a:16:d2:38:78:a4:63:46:bd:69:61:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: May 11 17:21:49 2026 GMT
            Not After : May 10 17:26:49 2027 GMT
        Subject: CN=1DB35F92D064BA7885B61A71B6ADDA8719F1E269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:23:ec:4a:a9:09:4a:5c:0b:31:74:7c:62:
                    1a:72:e4:3a:d7:72:a8:4a:d3:e0:63:a0:46:ee:cd:
                    0b:71:49:2c:98:05:24:33:8a:39:02:05:9c:29:fc:
                    c8:ad:d1:51:fe:fe:3c:51:f4:36:68:1a:6e:9d:e6:
                    4c:93:d9:fc:be:24:21:81:8e:33:fd:53:92:de:6a:
                    a9:ef:39:89:46:30:d3:67:04:a2:2e:c5:40:fa:2a:
                    b0:07:b7:5d:b9:9d:48:dc:fb:be:e7:d3:47:5a:7f:
                    3f:bc:dd:70:af:cc:d0:3a:1c:ea:23:e4:73:cb:cf:
                    a6:4c:3e:cd:46:f6:3f:46:30:3b:00:7d:4f:f3:61:
                    b7:e4:f1:4f:70:cf:10:30:b7:ba:23:19:8d:d9:17:
                    70:06:61:09:5f:36:06:a4:eb:af:11:07:7c:6a:71:
                    5d:44:b8:cd:5b:22:6c:ef:81:3e:61:0d:1e:14:0e:
                    be:78:34:38:51:2d:ee:34:1e:5c:a4:e2:ad:16:fb:
                    be:8b:fd:0f:56:12:8e:3b:6a:48:24:3b:59:af:a7:
                    7a:a3:6c:dd:57:6a:07:bf:47:02:63:f8:96:68:94:
                    66:dc:14:c6:14:11:a3:ff:92:ff:39:e8:ca:8b:81:
                    fb:5e:93:6e:6e:b6:c4:44:bb:7c:5b:84:d9:c8:14:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B3:5F:92:D0:64:BA:78:85:B6:1A:71:B6:AD:DA:87:19:F1:E2:69
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38382e302f32332d3332203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:88:20:1b:89:5c:1a:b7:aa:d5:57:68:8b:ad:02:67:87:1b:
         69:05:fc:e5:d8:26:95:ab:da:f3:ab:2e:5b:02:8f:7c:75:a9:
         22:c7:fd:4b:a0:9f:73:4a:c6:28:ef:e4:7a:03:14:e2:4e:83:
         6c:37:25:e0:58:33:47:0d:30:9f:e5:29:d2:98:1f:b5:0d:a7:
         5c:f0:d5:35:f4:a7:db:fb:24:29:98:6e:03:fb:d8:55:41:9f:
         1e:74:e5:63:0c:7b:06:06:82:3a:b9:06:fc:60:70:51:11:5b:
         04:df:1a:05:20:fd:11:f1:ab:e8:1e:aa:c1:3b:1f:9f:b0:cd:
         93:41:72:42:20:d2:f7:28:65:ca:6d:5c:6f:74:35:e3:d2:12:
         e3:8e:65:1a:c1:cc:dd:bf:d4:bc:6d:eb:38:3b:fb:d6:e5:9f:
         e0:4c:8e:1f:5b:c6:de:b3:33:9d:8c:44:f1:30:9b:ec:b1:82:
         e1:c3:41:59:e8:c7:60:cc:9a:ea:a2:e5:0c:73:00:ab:e6:62:
         33:f0:53:7f:a9:37:fa:7a:b7:57:7d:d6:13:fe:c0:8a:60:52:
         27:f4:b4:c9:f5:16:b4:44:b4:4e:fa:e6:c3:6e:70:72:c2:79:
         5a:e8:66:a1:db:30:2a:f8:67:51:78:62:38:ea:84:3c:65:16:
         ab:bf:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:53 2026 by rpki-client