Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e203137383039.roa
File:                     3131332e36312e3136382e302f32332d3234203d3e203137383039.roa (raw, json)
Hash identifier:          YAmij7PisEMUCKA5CWQByO/cXASiJYaKqoDRwGVD38c=
Subject key identifier:   4F:96:44:18:ED:AF:AF:12:15:4F:03:D2:6A:22:AE:C7:77:FB:A6:80
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       66B3437E84F198DF558A034A71B1A57176FB405C
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e203137383039.roa
Signing time:             Thu 03 Sep 2026 06:04:02 +0000
ROA not before:           Thu 03 Sep 2026 05:59:02 +0000
ROA not after:            Thu 02 Sep 2027 06:04:02 +0000
asID:                     17809
IP address blocks:        113.61.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b3:43:7e:84:f1:98:df:55:8a:03:4a:71:b1:a5:71:76:fb:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: Sep  3 05:59:02 2026 GMT
            Not After : Sep  2 06:04:02 2027 GMT
        Subject: CN=4F964418EDAFAF12154F03D26A22AEC777FBA680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:2f:ce:2e:d3:d7:01:6b:4b:f0:5b:15:5c:
                    26:24:5d:9a:4d:2e:54:e8:7a:45:c5:67:2f:a9:ec:
                    76:4d:c8:20:fc:10:4c:e7:b7:80:3d:8c:bb:29:ca:
                    65:6d:e5:b1:a1:58:05:c6:29:db:86:dd:11:75:91:
                    ae:84:3e:e4:71:34:1c:a7:ca:73:bf:67:39:7b:76:
                    b6:78:66:83:73:f8:2d:e1:a7:a5:fd:c1:e4:df:b0:
                    da:36:d8:cc:b2:f2:09:b4:36:b8:83:1e:b0:35:ab:
                    43:18:58:39:3e:80:8a:36:30:40:5f:b9:84:d7:06:
                    b1:e0:51:c0:a4:5d:7b:61:e7:12:36:c8:3b:b6:21:
                    d8:79:7e:43:c4:8e:94:a9:f2:cc:80:8c:eb:37:f7:
                    46:71:23:a4:f6:16:dd:e5:a8:fb:e2:ef:49:77:3c:
                    2e:cc:c0:f1:56:72:9e:65:08:63:8c:2a:73:2b:79:
                    50:94:8d:2b:ab:eb:0c:3d:4a:6e:96:75:4e:97:a7:
                    b5:e1:2c:06:7e:b4:a7:c8:92:c9:ee:17:3d:df:97:
                    54:d2:e1:75:eb:51:54:fe:7b:db:6a:39:98:03:c0:
                    b1:6f:19:6b:46:20:10:5a:f6:8d:60:88:2f:2a:4f:
                    b3:f8:e3:9f:05:60:ff:80:13:c0:2d:64:01:33:3b:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:96:44:18:ED:AF:AF:12:15:4F:03:D2:6A:22:AE:C7:77:FB:A6:80
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:72:e2:f5:ba:3b:3f:88:f4:fa:33:75:d6:60:63:3f:60:81:
         84:14:4c:05:7d:ac:51:fe:6c:cb:8d:fa:91:26:8c:95:06:1a:
         82:70:e5:5c:84:38:93:4e:ed:0a:e6:aa:0f:cc:ad:71:81:ae:
         13:4c:4d:b5:82:59:5f:e8:79:f3:65:4c:ab:22:45:71:81:43:
         04:ea:73:8b:e2:65:70:e2:90:21:64:ca:ce:de:5e:1f:cd:ff:
         d5:49:78:04:15:50:0c:a1:dd:c9:2d:7b:fa:b6:e7:ff:fb:59:
         72:e5:c6:58:4d:4b:33:fe:a6:28:dc:64:e1:7a:94:85:cc:f2:
         97:2e:e6:f0:9b:08:3a:1d:6c:ac:c3:f2:06:9e:52:aa:6c:ad:
         e2:ef:e7:b9:f3:61:0e:cd:20:0a:82:3e:42:9d:09:22:07:45:
         6a:e7:6c:c2:60:46:cf:36:60:98:d1:42:f4:98:83:f6:82:f6:
         a1:f8:51:64:a5:fa:f7:e3:82:7e:8f:4a:91:5c:6b:56:3d:30:
         08:93:d8:56:a0:da:02:02:a0:b3:b9:68:c9:c0:a8:96:6d:ad:
         41:91:a8:1f:aa:48:a1:a8:30:78:4d:0b:79:af:23:c1:08:10:
         26:5b:d9:31:3c:cb:21:81:61:af:47:b3:80:bb:06:3f:7b:46:
         73:23:d5:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:05 2026 by rpki-client