Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323032373336.roa
File:                     3130332e3139362e3137332e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          M0NhVj7S+cSHqAHjCdC35T8aE605/G6ytGW8pCgmYI4=
Subject key identifier:   1B:11:23:0A:B4:09:BE:46:3A:23:84:31:7A:46:33:8D:60:83:2A:F6
Certificate issuer:       /CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
Certificate serial:       5A1D25E1D20207F9832AC9832394B9E5A86AF5FE
Authority key identifier: E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323032373336.roa
Signing time:             Fri 28 Aug 2026 02:04:03 +0000
ROA not before:           Fri 28 Aug 2026 01:59:03 +0000
ROA not after:            Fri 27 Aug 2027 02:04:03 +0000
asID:                     202736
IP address blocks:        103.196.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl
                          rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 01:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:25:e1:d2:02:07:f9:83:2a:c9:83:23:94:b9:e5:a8:6a:f5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC
        Validity
            Not Before: Aug 28 01:59:03 2026 GMT
            Not After : Aug 27 02:04:03 2027 GMT
        Subject: CN=1B11230AB409BE463A2384317A46338D60832AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:3b:7b:68:1a:50:8a:96:e6:de:a9:00:7c:
                    25:21:d5:60:72:02:67:e9:a6:60:c4:ee:32:be:e7:
                    7f:dc:9b:48:18:71:b2:70:c9:74:da:e4:79:23:d8:
                    5a:ca:09:6f:82:d0:5f:21:ea:f1:d7:d7:13:eb:52:
                    80:71:87:5e:3d:26:85:c4:3a:32:68:fd:70:25:32:
                    a5:f6:62:78:79:30:87:f3:f6:c8:67:5d:5a:92:8d:
                    34:01:20:68:fa:5c:ef:6c:46:5f:48:64:cd:0b:58:
                    32:f2:0a:54:2f:4c:bf:5a:4f:5e:17:58:93:32:59:
                    29:86:26:bd:e2:92:b4:2d:21:fa:35:c4:05:4a:43:
                    22:d5:b0:dc:98:2d:ca:36:61:3c:59:44:66:c9:51:
                    21:8e:b4:c7:89:28:3a:95:0d:69:58:e4:7b:d6:03:
                    c4:ba:57:6c:2c:bd:e2:f8:e5:68:a1:b9:63:fe:58:
                    5e:a4:26:37:7f:61:d1:70:f8:93:5c:63:da:2d:c5:
                    ea:96:fc:33:12:af:04:93:42:d9:fd:95:ac:51:4c:
                    4a:58:70:4d:f6:cc:27:0d:f6:fc:cf:3c:b9:50:03:
                    25:1c:18:f2:31:c0:61:7f:c3:f4:0a:7f:0c:fb:97:
                    cd:7d:27:97:0f:6d:2b:46:32:da:3f:57:ee:22:20:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:11:23:0A:B4:09:BE:46:3A:23:84:31:7A:46:33:8D:60:83:2A:F6
            X509v3 Authority Key Identifier:
                keyid:E3:36:6E:7F:7B:25:75:E1:1A:09:BA:78:98:5A:9A:EF:BC:5F:FE:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3366E7F7B2575E11A09BA78985A9AEFBC5FFECC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TECHDRIVEN/0/3130332e3139362e3137332e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b9:66:c0:9b:75:51:62:e6:74:e9:71:46:ae:25:30:a1:41:
         3b:e0:1c:42:68:a9:d9:70:d9:57:67:2a:85:2d:63:2c:a8:6e:
         1f:0c:4e:bd:d0:ec:94:bf:06:a1:e8:b7:f9:47:6c:dc:c1:98:
         a4:4d:7f:ab:c4:2d:3b:71:dd:88:fd:ed:2e:d7:b7:96:a5:71:
         48:e1:f1:b2:60:03:82:6b:b5:30:24:df:7b:28:1d:97:8a:84:
         e7:8f:8d:e7:dc:f5:5d:4b:8c:06:05:f6:7f:52:31:60:1f:5a:
         b6:81:bc:6b:11:ca:bf:5a:cb:b7:bd:cc:a6:42:32:09:55:f1:
         0f:8e:05:c4:9e:c6:b9:47:e2:52:6a:4d:55:cf:7d:20:bc:f7:
         4f:93:ed:7d:8b:ee:bd:f6:75:0f:f9:20:fd:b5:6e:78:9e:57:
         ba:30:26:df:59:9a:21:60:59:dc:5e:4f:7b:fd:4b:5c:e8:2d:
         30:57:08:13:b5:4b:24:18:7f:41:d6:9a:02:bf:5a:24:3c:69:
         d0:34:47:cc:6a:2e:5a:db:af:e3:2a:7b:cb:9f:d2:a5:67:a2:
         59:e1:08:e8:2f:31:17:26:ef:d5:57:6a:de:97:e3:34:88:7d:
         28:af:c2:c9:07:ef:6a:ee:e0:a4:54:75:b7:92:41:21:73:2d:
         cc:93:65:73
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUWh0l4dICB/mDKsmDI5S55ahq9f4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4OTg1QTlBRUZC
QzVGRkVDQzAeFw0yNjA4MjgwMTU5MDNaFw0yNzA4MjcwMjA0MDNaMDMxMTAvBgNV
BAMTKDFCMTEyMzBBQjQwOUJFNDYzQTIzODQzMTdBNDYzMzhENjA4MzJBRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJDt7aBpQipbm3qkAfCUh1WBy
AmfppmDE7jK+53/cm0gYcbJwyXTa5Hkj2FrKCW+C0F8h6vHX1xPrUoBxh149JoXE
OjJo/XAlMqX2Ynh5MIfz9shnXVqSjTQBIGj6XO9sRl9IZM0LWDLyClQvTL9aT14X
WJMyWSmGJr3ikrQtIfo1xAVKQyLVsNyYLco2YTxZRGbJUSGOtMeJKDqVDWlY5HvW
A8S6V2wsveL45WihuWP+WF6kJjd/YdFw+JNcY9otxeqW/DMSrwSTQtn9laxRTEpY
cE32zCcN9vzPPLlQAyUcGPIxwGF/w/QKfwz7l819J5cPbStGMto/V+4iIGB/AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUGxEjCrQJvkY6I4QxekYzjWCDKvYwHwYDVR0j
BBgwFoAU4zZuf3sldeEaCbp4mFqa77xf/swwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEVDSERS
SVZFTi8wL0UzMzY2RTdGN0IyNTc1RTExQTA5QkE3ODk4NUE5QUVGQkM1RkZFQ0Mu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRTMzNjZFN0Y3QjI1NzVFMTFBMDlCQTc4
OTg1QTlBRUZCQzVGRkVDQy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcw
C4ZocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9URUNIRFJJVkVOLzAvMzEz
MDMzMmUzMTM5MzYyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAz
MjM3MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAGfErTANBgkqhkiG9w0BAQsFAAOCAQEAYLlmwJt1
UWLmdOlxRq4lMKFBO+AcQmip2XDZV2cqhS1jLKhuHwxOvdDslL8Goei3+Uds3MGY
pE1/q8QtO3HdiP3tLte3lqVxSOHxsmADgmu1MCTfeygdl4qE54+N59z1XUuMBgX2
f1IxYB9atoG8axHKv1rLt73MpkIyCVXxD44FxJ7GuUfiUmpNVc99ILz3T5PtfYvu
vfZ1D/kg/bVueJ5XujAm31maIWBZ3F5Pe/1LXOgtMFcIE7VLJBh/QdaaAr9aJDxp
0DRHzGouWtuv4yp7y5/SpWeiWeEI6C8xFybv1Vdq3pfjNIh9KK/CyQfvau7gpFR1
t5JBIXMtzJNlcw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:57 2026 by rpki-client