Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2039343136.roa
File:                     3131332e36312e3136382e302f32332d3234203d3e2039343136.roa (raw, json)
Hash identifier:          RUQ1hSiCQtUu322pqGi2U1mQXzmyoEuhGaJXYU7sIS8=
Subject key identifier:   2D:85:C9:93:4A:AA:29:98:D2:44:CD:9F:31:6C:55:90:85:E5:BC:7B
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       55772EB3E8063F50330FC5A3E50C136A082F1B6C
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2039343136.roa
Signing time:             Thu 03 Sep 2026 06:04:00 +0000
ROA not before:           Thu 03 Sep 2026 05:59:00 +0000
ROA not after:            Thu 02 Sep 2027 06:04:00 +0000
asID:                     9416
IP address blocks:        113.61.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:77:2e:b3:e8:06:3f:50:33:0f:c5:a3:e5:0c:13:6a:08:2f:1b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: Sep  3 05:59:00 2026 GMT
            Not After : Sep  2 06:04:00 2027 GMT
        Subject: CN=2D85C9934AAA2998D244CD9F316C559085E5BC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:cc:cf:85:3c:f8:31:b1:94:fd:99:81:a7:
                    ce:39:1e:58:2a:88:d2:48:61:22:38:9f:9e:d0:67:
                    f3:58:8a:93:9f:91:01:dd:c8:81:56:70:ee:9a:70:
                    aa:3f:a3:08:8b:3d:49:12:5b:99:c5:2d:e6:f2:51:
                    77:1e:b1:6f:ad:1c:6a:0d:60:2d:a1:ea:61:e1:1c:
                    8c:b0:f8:ca:f7:0d:25:de:5b:d8:87:5c:19:fa:46:
                    1d:b0:aa:fd:a8:4d:65:34:ce:51:0d:68:5a:ef:ad:
                    09:5e:6b:e7:89:05:10:c8:6a:7e:f5:b1:39:50:0e:
                    e9:c3:9e:d0:c2:4d:f4:7f:94:1f:75:48:a9:02:fd:
                    fd:44:44:0f:30:4b:7b:66:41:40:79:ec:c8:23:10:
                    49:c9:5b:f4:c8:86:f6:30:e9:9d:f0:0e:fc:b9:8b:
                    2e:f9:9e:e2:22:0f:a0:93:77:ab:cd:02:2d:71:3e:
                    be:da:05:87:70:a4:5b:81:fc:6f:2b:28:41:af:06:
                    5a:7c:92:38:19:cf:4d:bb:35:fd:f2:dd:b3:7a:c7:
                    28:ef:48:61:8c:c9:00:50:0d:f4:87:69:23:a9:be:
                    da:f2:b4:8b:38:9b:5f:55:ad:40:ec:36:49:38:2f:
                    65:51:5c:65:a6:ad:2a:83:ea:f2:7b:53:0e:55:15:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:85:C9:93:4A:AA:29:98:D2:44:CD:9F:31:6C:55:90:85:E5:BC:7B
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3136382e302f32332d3234203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:f1:2e:20:28:92:27:fe:05:83:66:8a:72:2c:45:e5:52:
         84:e7:82:0a:ec:53:f7:6a:70:b7:c9:5d:3b:ab:f9:9f:f1:db:
         bf:8b:9f:4f:c5:3d:c4:98:ca:c6:a8:10:1d:2d:55:e1:7a:cd:
         6f:3d:5c:bd:11:06:a8:ed:a4:68:bd:0d:63:f2:df:03:bd:c0:
         4f:92:6f:6b:1e:34:a0:12:98:e9:a6:86:bd:cb:3f:de:4b:7f:
         b5:df:25:3f:79:21:03:e8:22:87:cc:08:ce:70:9b:4f:50:0e:
         21:33:60:ac:cf:3e:75:a2:3d:fc:8f:da:f0:a5:61:92:a3:d0:
         3e:4f:ab:ba:38:af:92:ad:72:ca:12:54:1d:08:43:5c:47:8d:
         99:9a:8d:63:a5:67:f5:89:0e:a8:a7:75:12:82:ef:a8:5c:3e:
         f9:a5:61:f4:2f:91:cc:ac:a2:fa:78:63:5c:bf:b5:72:9e:a5:
         be:45:04:4e:84:c6:23:ab:ea:ca:58:5b:e7:07:84:4f:2c:16:
         b6:cd:18:8e:5f:db:27:96:51:f3:35:9d:51:83:06:b8:96:c7:
         9f:91:da:27:66:96:f1:dc:d6:00:3c:33:2f:7a:64:21:ae:9e:
         83:37:6d:6b:43:ab:27:98:76:f9:52:34:c0:8a:58:b2:ad:a8:
         4c:93:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:19:13 2026 by rpki-client