Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e2039343136.roa
File:                     3131332e36312e3132382e302f31372d3234203d3e2039343136.roa (raw, json)
Hash identifier:          VgZF1GyMJRMK4jZliDYZV3lud6zcT5oJrOYhrWsiL7M=
Subject key identifier:   FF:FE:A2:CF:0D:C7:95:C4:EC:53:89:A9:73:1D:56:13:7A:89:86:9B
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       6EAE90654E09A189BE9867F9954035A7221D1298
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e2039343136.roa
Signing time:             Thu 21 May 2026 15:57:25 +0000
ROA not before:           Thu 21 May 2026 15:52:25 +0000
ROA not after:            Thu 20 May 2027 15:57:25 +0000
asID:                     9416
IP address blocks:        113.61.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:90:65:4e:09:a1:89:be:98:67:f9:95:40:35:a7:22:1d:12:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:25 2026 GMT
            Not After : May 20 15:57:25 2027 GMT
        Subject: CN=FFFEA2CF0DC795C4EC5389A9731D56137A89869B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ce:28:00:32:df:5a:93:ea:d5:ef:f5:92:8d:
                    1e:a0:90:7c:43:db:d9:93:2a:02:28:16:90:29:b2:
                    ee:12:5c:4f:c3:56:7c:cd:83:95:3f:8f:24:99:37:
                    9f:ed:f5:fc:04:65:8d:9c:1a:36:68:8d:7d:4a:fb:
                    5e:dd:9e:b5:15:8d:4d:c6:0b:e6:2e:50:48:b1:e7:
                    dd:6a:e4:33:d0:cf:53:0e:b6:25:b6:30:db:f0:0a:
                    8f:e6:40:85:54:2e:91:d8:15:a8:2d:20:61:d6:52:
                    35:53:06:b2:0d:27:0b:06:16:bc:cf:b2:41:f2:6d:
                    ce:73:ed:20:3b:be:61:f3:a5:29:82:9e:b9:8b:2c:
                    5a:4e:b3:26:f6:31:71:e1:b2:ed:da:de:d0:9d:2e:
                    dd:9c:32:72:a3:37:12:1f:78:88:a8:d8:c6:02:31:
                    79:db:51:96:03:1b:42:95:86:5c:d2:14:a7:ae:f7:
                    e1:2b:96:88:5e:8a:24:4d:3d:2d:c2:8d:84:c9:24:
                    69:39:c8:dc:5b:30:1c:7d:49:2b:af:fe:48:33:b7:
                    59:95:c7:31:9e:42:0a:fc:fc:71:d1:fe:2d:e0:cd:
                    1a:17:ce:12:21:8e:9f:cf:84:be:ad:94:5c:24:03:
                    f3:d3:dd:c2:c8:0e:ae:ce:c5:b6:27:74:35:cf:43:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:A2:CF:0D:C7:95:C4:EC:53:89:A9:73:1D:56:13:7A:89:86:9B
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3132382e302f31372d3234203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:2a:aa:20:2d:29:f7:d0:26:76:d2:60:61:0a:e1:7a:aa:
         41:a2:01:ba:4a:6f:99:3d:8e:ce:08:39:a6:8d:fa:ec:0d:52:
         7c:f1:07:69:19:e8:8d:30:db:fd:2f:51:66:e4:5e:00:8e:80:
         c7:aa:04:f6:72:23:f9:51:7c:de:a9:6a:af:0c:59:ca:36:31:
         f6:df:36:cb:6c:93:d2:99:fc:80:13:dc:be:91:12:88:7b:a2:
         e7:9a:07:19:e2:e6:9e:19:bf:32:6a:6b:22:ae:be:7a:a2:ec:
         98:ed:1d:d0:88:fe:b1:9f:a0:b7:5d:2d:7d:f2:58:9a:df:ec:
         f2:50:3e:50:06:0b:41:8a:14:c9:34:90:c1:e3:b0:73:ae:22:
         c4:2f:bd:88:d2:a4:36:c4:81:ab:f2:0b:fa:41:9a:25:28:09:
         f3:cd:f9:8c:d8:f9:cd:cb:95:85:e4:8b:9c:85:ad:fa:17:72:
         c5:63:49:1e:d3:43:c5:8f:c7:0a:e0:49:71:32:5e:5e:15:38:
         a3:4a:50:f9:3a:ee:25:ae:88:de:cd:6b:b5:b3:86:0c:11:ca:
         84:6b:56:85:4b:6e:90:fd:68:2c:ce:3f:15:e8:e9:4b:da:1b:
         e5:bf:29:10:ac:7a:cb:eb:7b:76:5a:2d:25:b2:d4:29:08:54:
         f2:b8:93:e5
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUbq6QZU4JoYm+mGf5lUA1pyIdEpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyMjVaFw0yNzA1MjAxNTU3MjVaMDMxMTAvBgNV
BAMTKEZGRkVBMkNGMERDNzk1QzRFQzUzODlBOTczMUQ1NjEzN0E4OTg2OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjzigAMt9ak+rV7/WSjR6gkHxD
29mTKgIoFpApsu4SXE/DVnzNg5U/jySZN5/t9fwEZY2cGjZojX1K+17dnrUVjU3G
C+YuUEix591q5DPQz1MOtiW2MNvwCo/mQIVULpHYFagtIGHWUjVTBrINJwsGFrzP
skHybc5z7SA7vmHzpSmCnrmLLFpOsyb2MXHhsu3a3tCdLt2cMnKjNxIfeIio2MYC
MXnbUZYDG0KVhlzSFKeu9+ErloheiiRNPS3CjYTJJGk5yNxbMBx9SSuv/kgzt1mV
xzGeQgr8/HHR/i3gzRoXzhIhjp/PhL6tlFwkA/PT3cLIDq7OxbYndDXPQw3VAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQU//6izw3HlcTsU4mpcx1WE3qJhpswHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMTMxMzMyZTM2
MzEyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDM5MzQzMTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQHcT2AMA0GCSqGSIb3DQEBCwUAA4IBAQCdOCqqIC0p99AmdtJgYQrheqpB
ogG6Sm+ZPY7OCDmmjfrsDVJ88QdpGeiNMNv9L1Fm5F4AjoDHqgT2ciP5UXzeqWqv
DFnKNjH23zbLbJPSmfyAE9y+kRKIe6LnmgcZ4uaeGb8yamsirr56ouyY7R3QiP6x
n6C3XS198lia3+zyUD5QBgtBihTJNJDB47BzriLEL72I0qQ2xIGr8gv6QZolKAnz
zfmM2PnNy5WF5Iucha36F3LFY0ke00PFj8cK4ElxMl5eFTijSlD5Ou4lrojezWu1
s4YMEcqEa1aFS26Q/Wgszj8V6OlL2hvlvykQrHrL63t2Wi0lstQpCFTyuJPl
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:31:12 2026 by rpki-client