Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3332203d3e20333936393832.roa
File:                     3130332e35312e38392e302f32342d3332203d3e20333936393832.roa (raw, json)
Hash identifier:          7NHk4ptta4FPEJ/NYsRwLzG7cQkZ9gd7Kxadg42nT8M=
Subject key identifier:   C9:00:BE:12:E0:91:16:BA:74:58:72:CB:A6:20:03:71:7C:4B:F3:99
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       61F86433319CD908C8EBFDFF1A712599C1C43742
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3332203d3e20333936393832.roa
Signing time:             Mon 11 May 2026 17:55:33 +0000
ROA not before:           Mon 11 May 2026 17:50:33 +0000
ROA not after:            Mon 10 May 2027 17:55:33 +0000
asID:                     396982
IP address blocks:        103.51.89.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 May 2026 21:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f8:64:33:31:9c:d9:08:c8:eb:fd:ff:1a:71:25:99:c1:c4:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: May 11 17:50:33 2026 GMT
            Not After : May 10 17:55:33 2027 GMT
        Subject: CN=C900BE12E09116BA745872CBA62003717C4BF399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:17:5c:98:3f:4b:44:12:62:75:0e:09:d9:
                    8d:f9:e6:8f:6a:d8:cb:44:12:7d:33:ac:6f:1f:de:
                    38:d5:68:5a:84:7e:5e:55:ae:67:4f:c6:83:de:97:
                    8f:12:90:d6:19:09:09:19:1a:42:42:10:6a:6e:7f:
                    9d:64:a5:f4:1e:dc:09:f1:47:1c:e4:67:61:d7:a2:
                    73:1f:78:58:b8:10:c2:73:ff:95:3a:57:b2:92:c0:
                    d0:9a:91:0a:23:e9:05:ad:d3:74:43:98:08:8a:c4:
                    e1:1c:66:35:0c:09:2c:77:89:a5:d5:12:2c:4c:63:
                    76:25:32:bf:ec:69:20:b9:51:75:ff:60:99:99:34:
                    81:79:c9:87:62:77:8c:1b:61:ca:90:71:09:75:19:
                    7e:76:aa:09:38:a5:31:8e:96:08:47:d0:1b:28:b6:
                    de:7b:f7:68:e1:23:75:9c:70:18:ff:7e:41:2e:3d:
                    79:ff:76:4b:1f:52:43:8a:9d:1b:db:5a:ac:d9:9a:
                    2e:17:cd:ef:38:0f:ec:30:19:db:1e:1a:b1:32:15:
                    a8:77:6e:bd:75:74:fc:95:74:df:3f:2a:02:2f:37:
                    1f:d7:82:49:93:21:9a:1f:24:24:7b:93:ba:76:9b:
                    90:6e:77:2e:72:d9:98:98:37:63:1f:b0:8b:46:9e:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:BE:12:E0:91:16:BA:74:58:72:CB:A6:20:03:71:7C:4B:F3:99
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e35312e38392e302f32342d3332203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:20:ec:78:50:2a:c2:fa:76:7e:67:fe:42:6d:0e:a0:11:db:
         8f:57:a0:da:8c:e1:78:cb:2d:76:69:7b:92:97:14:6e:b2:5d:
         70:7b:60:9b:9e:10:ba:f1:b5:74:8d:b2:bb:fe:f3:77:2c:39:
         23:ed:18:b5:40:01:48:73:e7:b3:c8:ec:80:a9:61:d4:5b:9d:
         25:20:77:c9:ae:87:63:bf:b1:44:1c:92:6f:d4:2b:8b:20:ee:
         a1:6e:80:61:68:1d:e7:3c:4c:08:30:6e:04:00:ed:9c:62:34:
         ac:f2:8b:16:84:e3:b8:c9:74:2e:8e:d7:81:22:b3:10:a4:9f:
         95:dc:83:ae:e8:ae:62:9c:d2:bd:de:95:a2:0e:49:18:da:1f:
         0d:56:a4:54:51:d2:5a:bb:57:38:19:f5:24:35:79:2c:05:11:
         0a:91:0f:b6:01:f9:48:c3:51:93:84:ba:46:2d:99:c5:dd:df:
         62:ff:7e:8b:1b:f2:10:11:80:ff:60:8d:62:82:f7:f4:f4:0b:
         89:0e:e9:46:a4:06:f8:12:c7:85:45:fa:79:75:62:13:32:32:
         2b:3a:a1:1e:ab:b3:97:11:f3:29:15:21:fa:80:6b:76:91:61:
         c5:f4:8e:82:f0:17:70:62:56:e9:44:c7:25:14:f6:a0:6b:d8:
         eb:50:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:15 2026 by rpki-client