Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3233302e302f32332d3234203d3e2036393339.roa
File:                     3131332e36312e3233302e302f32332d3234203d3e2036393339.roa (raw, json)
Hash identifier:          t6Fa7GTn7my1knebVZ39UGb8a7d81YznhHRGgnUy9X0=
Subject key identifier:   78:69:44:C7:22:E2:57:51:E5:E1:3B:58:05:57:A3:F2:6D:DF:73:E2
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       0DD956520F218EB7523EFFDB683D49003110A27D
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3233302e302f32332d3234203d3e2036393339.roa
Signing time:             Thu 03 Sep 2026 06:04:01 +0000
ROA not before:           Thu 03 Sep 2026 05:59:01 +0000
ROA not after:            Thu 02 Sep 2027 06:04:01 +0000
asID:                     6939
IP address blocks:        113.61.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d9:56:52:0f:21:8e:b7:52:3e:ff:db:68:3d:49:00:31:10:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: Sep  3 05:59:01 2026 GMT
            Not After : Sep  2 06:04:01 2027 GMT
        Subject: CN=786944C722E25751E5E13B580557A3F26DDF73E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:f9:5d:18:92:77:c6:38:d9:11:7b:28:62:
                    d9:77:dc:06:ef:55:44:49:2e:de:0c:a9:a1:d6:1a:
                    d1:5d:a6:a2:66:f8:1f:38:55:9c:df:c0:25:b7:ef:
                    ff:3c:bf:66:d5:5a:b5:7a:5a:18:68:f7:7b:ec:bf:
                    7b:73:c0:b4:57:12:7b:e3:1b:07:e5:e9:d6:b5:7f:
                    2d:ee:98:bc:bb:6d:e9:5e:fd:7e:ac:4b:de:ab:40:
                    23:d1:a0:bc:ba:b3:3a:4e:e7:03:b3:0a:19:94:6d:
                    1d:83:8d:32:3e:b4:d1:46:e3:a7:cd:97:6f:42:ce:
                    a5:ea:19:e0:5e:3f:0f:b9:a8:19:a5:d3:dd:f6:8d:
                    97:35:dd:51:62:0c:a0:a8:d0:42:cc:f9:c7:31:39:
                    c2:cb:dc:05:d6:c9:7d:42:08:fc:c0:22:e6:37:4a:
                    38:04:8b:8c:8d:1e:e6:5c:3c:bc:5b:07:ef:4b:27:
                    28:a4:aa:ca:33:a8:7e:0b:29:0b:ef:d4:ef:29:2a:
                    a1:63:ab:8b:dd:4e:d9:b2:fb:f5:65:79:b4:46:9e:
                    a2:3a:ce:41:93:86:25:44:a9:61:65:83:cd:ce:d5:
                    a9:16:41:56:9c:17:7e:36:a5:9e:e0:54:65:4b:37:
                    6a:cb:7f:62:fe:65:b1:75:a2:69:ca:1e:96:2d:d2:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:44:C7:22:E2:57:51:E5:E1:3B:58:05:57:A3:F2:6D:DF:73:E2
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131332e36312e3233302e302f32332d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:28:04:95:d8:9d:59:84:3c:78:48:25:50:4a:35:c5:de:0c:
         7e:90:37:a9:0d:78:76:dd:d8:e3:73:57:a2:b7:e3:a3:c6:fd:
         40:2c:52:b1:bf:10:c7:4c:6d:a7:17:e0:26:1f:5a:1c:99:81:
         b2:91:f7:9f:ca:7e:3f:40:3f:9e:05:88:42:80:b3:15:f9:c7:
         9a:ee:8d:ee:92:d9:f8:57:19:a3:b7:a8:ba:dc:aa:2a:af:85:
         77:d0:23:fd:06:47:6d:11:ee:b5:fa:99:c1:2d:35:65:f8:8a:
         c2:4d:07:39:7e:08:21:86:64:5b:f4:59:6e:c1:04:88:c0:02:
         5c:3d:6b:7b:2d:4b:65:c7:cc:05:a2:71:78:a9:a5:98:07:4c:
         be:b2:e7:f7:c2:75:c6:d3:9b:b5:47:7d:99:12:a5:51:e1:57:
         45:23:51:47:96:ab:f3:74:00:04:aa:13:ea:60:55:66:48:07:
         7b:94:63:22:49:61:25:9a:04:f0:be:76:97:98:9c:ae:b3:21:
         00:56:36:17:e6:1e:00:4c:d0:e7:0f:fc:51:44:3a:c6:1f:0a:
         4a:5c:55:85:05:81:20:54:25:08:28:b8:85:04:9d:16:58:6a:
         bd:fe:f9:8b:74:0e:cd:0d:0d:74:94:d4:27:a8:1f:89:86:c7:
         ef:c1:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:09 2026 by rpki-client