Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2036393339.roa
File:                     3131332e36312e3136382e302f32332d3234203d3e2036393339.roa (raw, json)
Hash identifier:          T1aYrJL50/MGcQ79ULfhMUOLdVuRQahDEdONmpLYZ8U=
Subject key identifier:   A5:D9:88:92:BB:02:2D:4B:D0:EB:5A:05:F5:8C:50:89:77:93:AF:02
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       09BDDA117ED14EE266E98196CE15290896FB24CB
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2036393339.roa
Signing time:             Thu 03 Sep 2026 06:04:01 +0000
ROA not before:           Thu 03 Sep 2026 05:59:01 +0000
ROA not after:            Thu 02 Sep 2027 06:04:01 +0000
asID:                     6939
IP address blocks:        113.61.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bd:da:11:7e:d1:4e:e2:66:e9:81:96:ce:15:29:08:96:fb:24:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: Sep  3 05:59:01 2026 GMT
            Not After : Sep  2 06:04:01 2027 GMT
        Subject: CN=A5D98892BB022D4BD0EB5A05F58C50897793AF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:1f:f4:11:f8:65:30:2b:ed:e6:1e:5a:7b:
                    74:52:39:04:67:21:66:47:5d:cc:f2:2d:36:c8:78:
                    de:f9:2b:6e:70:33:99:72:3d:ef:57:5a:23:b5:2a:
                    c4:7c:0a:c8:12:fe:c3:86:d9:62:7f:ba:46:b2:d6:
                    7f:46:8a:ad:26:4e:02:2e:1c:8e:6c:d1:f1:eb:3e:
                    8b:b1:be:fc:06:0d:98:4e:d5:40:da:5c:b5:e7:4c:
                    89:6b:64:00:af:40:da:98:c7:d7:d0:6e:27:30:3a:
                    45:3b:bf:96:a5:a0:0f:a1:3c:3f:41:79:11:29:90:
                    22:5c:3a:3f:bc:90:d5:36:55:b6:f3:b3:36:24:79:
                    2f:cc:89:96:86:0e:7a:0a:75:5a:6e:d8:9a:5c:40:
                    5e:fe:0b:01:93:fa:0c:6c:86:8d:d1:2d:90:0f:c7:
                    b1:dc:15:af:2a:af:5f:42:42:74:64:30:9a:20:86:
                    da:f6:1a:c2:44:48:39:2c:bd:34:5f:82:25:cb:55:
                    a2:d7:26:26:a9:36:16:b9:66:31:09:b1:76:9d:94:
                    62:0b:86:72:07:97:35:18:0d:9a:2b:88:37:f8:df:
                    d3:e3:50:21:c1:13:ac:e0:b7:dd:db:38:9f:61:6b:
                    8e:06:24:df:88:ff:bb:70:18:89:d6:3c:5a:1c:ff:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D9:88:92:BB:02:2D:4B:D0:EB:5A:05:F5:8C:50:89:77:93:AF:02
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:68:06:38:58:00:69:32:1a:52:37:d7:cd:20:fd:31:3a:71:
         26:6a:4f:35:47:81:7a:9e:90:a5:12:4d:ef:0b:4f:63:85:21:
         a0:e2:76:7c:c0:00:93:f3:7d:fc:c0:0b:bf:3d:78:f5:be:05:
         80:2b:4a:bc:e0:5a:c2:08:c0:35:7b:8d:e4:54:aa:66:8d:9f:
         c4:9d:55:7b:e1:0c:e6:2e:d8:72:20:2f:9a:3a:32:09:e2:43:
         cb:bd:91:ad:ce:81:a6:b7:95:c8:9e:7c:4a:cb:88:b3:0d:e9:
         22:11:82:a6:98:d6:dc:e1:73:ea:ce:ec:0a:da:fe:a4:4b:1e:
         b9:0e:43:fe:e9:2b:c9:b6:fc:60:d2:59:d1:14:7c:a4:14:eb:
         c6:92:07:a8:8d:3c:54:46:14:f8:b3:e9:2b:d0:c7:65:40:6c:
         08:2b:69:e2:d6:75:52:09:64:45:75:93:0b:18:06:e2:74:0f:
         5c:45:81:e2:94:61:c6:b1:b6:dd:47:90:53:9d:0e:74:fd:47:
         f5:36:a7:23:05:13:65:91:70:12:49:03:77:ff:87:b8:e8:ff:
         d8:38:eb:23:6a:3f:52:a2:c0:6c:81:e3:e2:db:c9:e4:c7:d1:
         10:59:46:ed:44:d2:a2:bd:c0:8e:95:38:30:75:d3:9a:cc:38:
         0e:01:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:11 2026 by rpki-client