Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e203137383039.roa
File:                     3131332e36312e3132382e302f31372d3234203d3e203137383039.roa (raw, json)
Hash identifier:          GNWbEN6hzO+A9w72yEVp/fA4KATRyEQl1ANELQTRrbk=
Subject key identifier:   CF:56:62:7D:54:01:D4:04:04:C4:DB:50:53:37:E2:FB:73:47:48:D7
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       1D4EFE025ABB93C0096B71A3D3A02F2220CF89E1
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:48 +0000
ROA not before:           Thu 21 May 2026 15:52:48 +0000
ROA not after:            Thu 20 May 2027 15:57:48 +0000
asID:                     17809
IP address blocks:        113.61.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4e:fe:02:5a:bb:93:c0:09:6b:71:a3:d3:a0:2f:22:20:cf:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:48 2026 GMT
            Not After : May 20 15:57:48 2027 GMT
        Subject: CN=CF56627D5401D40404C4DB505337E2FB734748D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:29:91:b7:f2:b3:d0:27:81:0e:18:8b:c3:
                    22:5d:01:46:c3:be:63:82:a5:03:ad:cb:a2:60:c0:
                    33:f3:0f:9f:24:a1:bd:da:46:2e:13:b4:2d:16:97:
                    a6:1f:0f:10:17:d2:8b:7f:28:af:c1:45:01:ef:db:
                    75:b7:59:51:2a:e5:04:42:9a:f7:43:b8:2d:3d:45:
                    6c:9b:5e:20:e8:5b:7e:75:dd:1f:91:8f:d7:45:b8:
                    a6:33:fe:bd:91:3e:d9:d0:39:4e:a2:11:26:97:22:
                    01:45:04:87:6c:68:77:93:fa:e2:18:c3:9e:48:ec:
                    fc:92:fb:da:f1:d4:42:e7:35:14:3d:d9:4a:c9:40:
                    c5:ac:ce:6a:3d:94:eb:c7:b5:92:7f:f4:4a:f3:6a:
                    81:69:69:da:7e:f4:92:7d:2d:86:cd:60:ff:7f:cc:
                    73:07:47:0f:de:9e:79:e7:5f:74:40:b5:a3:4b:a6:
                    fa:7e:77:ff:a6:f5:6c:95:5e:49:73:7c:8c:df:46:
                    03:36:12:c8:b5:20:21:d9:e8:8c:56:4a:c5:00:15:
                    52:94:d2:1a:60:b6:37:35:17:b7:8e:97:51:91:cc:
                    ea:b8:97:21:06:3c:33:50:5c:ea:01:a0:41:7b:83:
                    00:5d:4e:fc:6a:be:5e:f6:21:a2:78:8c:68:91:3b:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:56:62:7D:54:01:D4:04:04:C4:DB:50:53:37:E2:FB:73:47:48:D7
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:5c:e2:b7:9b:6b:13:55:9c:53:a8:29:0e:13:be:cc:82:
         fd:bf:19:03:2b:ca:06:f6:c1:69:7d:1d:18:e9:07:93:5d:44:
         d6:00:63:a4:e3:09:ba:e9:2e:89:6f:72:db:9c:16:03:08:ac:
         c5:1c:41:71:f1:01:c0:9b:92:37:e3:e9:cf:ae:b8:a4:68:60:
         8e:10:66:b5:8f:01:38:bd:ce:99:32:f4:bf:64:32:d2:7d:f0:
         e9:68:33:c0:28:a5:9e:48:74:a6:61:1a:8d:5f:c1:dd:ec:3c:
         4f:c7:e3:07:5f:7c:6a:6c:c8:36:3c:1d:de:6c:9e:ae:6a:29:
         2e:d3:5d:6a:79:7d:a2:cc:f7:c5:8b:fb:59:c6:fa:30:98:fc:
         69:ae:cc:2f:d5:a9:6a:16:29:ff:a5:a9:51:bf:f0:5d:09:d2:
         7e:51:dc:1e:5d:23:0f:2e:16:b2:90:26:c7:8c:a4:5f:de:b8:
         58:ce:c7:a6:d3:2d:64:2d:3d:fa:ef:7d:9e:db:a6:d8:f2:25:
         80:f9:a8:af:48:b0:a2:39:64:50:03:df:44:73:d2:95:03:c2:
         95:9d:57:f5:f1:b8:3c:08:eb:b1:ff:82:77:83:5d:b6:8e:d8:
         68:de:5a:da:3a:01:87:19:48:a6:9a:3e:b9:36:c5:86:f4:63:
         d3:e9:b6:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:09 2026 by rpki-client