Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e39362e302f31392d3139203d3e203137383039.roa
File:                     3132312e3235342e39362e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          tEE1DMu7XknHsPQDadcs/M4+9dU9yCNKfUPfKqqNK0w=
Subject key identifier:   BA:47:8E:15:C5:BF:B0:96:0A:C8:80:7F:5A:C3:DD:7C:11:9E:12:33
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       47A69CBDCCCD83BB6F3C9DADBD7A1471CFDBB6A4
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e39362e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:20 +0000
ROA not before:           Thu 21 May 2026 15:52:20 +0000
ROA not after:            Thu 20 May 2027 15:57:20 +0000
asID:                     17809
IP address blocks:        121.254.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a6:9c:bd:cc:cd:83:bb:6f:3c:9d:ad:bd:7a:14:71:cf:db:b6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:20 2026 GMT
            Not After : May 20 15:57:20 2027 GMT
        Subject: CN=BA478E15C5BFB0960AC8807F5AC3DD7C119E1233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:48:6e:1a:88:57:07:0a:55:c5:24:c3:0d:
                    19:c1:b4:6e:e9:18:e0:60:6e:bc:56:a8:f1:22:58:
                    d3:c5:58:7b:57:40:86:cc:cb:85:c2:ac:f1:7e:9a:
                    89:6b:21:07:f3:92:b0:ca:a8:6d:41:e8:c9:10:60:
                    ab:a1:ed:22:11:67:2e:61:ee:b7:8a:ee:7c:7e:38:
                    d7:e9:29:f6:40:42:c2:f8:51:3a:ca:eb:b1:b5:6c:
                    32:b4:91:0f:17:60:92:e3:57:71:30:db:4a:52:71:
                    b7:a7:3f:13:27:ab:eb:53:af:89:f8:21:5a:23:7b:
                    7e:b7:55:c2:70:37:1a:93:c8:bf:1e:9c:90:c3:87:
                    8d:ac:66:a5:ad:34:35:a2:0d:c0:6f:a0:4e:09:9c:
                    c5:f2:05:0c:1d:7e:e1:e7:fa:12:0a:1a:6b:b2:8a:
                    28:9e:cc:11:0b:cd:f3:29:cb:6e:8e:01:1f:c6:aa:
                    e8:6e:0d:b5:6e:1e:5b:24:ce:72:e7:de:e5:a5:74:
                    4b:6e:68:ac:f9:c5:e6:f2:7f:15:9c:31:1a:df:63:
                    b4:3e:f3:1d:53:48:c7:4d:33:a1:07:f6:0b:68:56:
                    a7:5d:d9:69:cb:69:b8:4d:a2:c8:92:d7:33:91:b9:
                    e9:bc:8b:50:40:a7:04:79:a3:33:d5:cc:88:06:6f:
                    0a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:8E:15:C5:BF:B0:96:0A:C8:80:7F:5A:C3:DD:7C:11:9E:12:33
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e39362e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:23:b6:d6:57:1b:32:ad:60:e5:a0:be:3a:0a:d6:44:14:f1:
         79:bc:60:98:f0:af:97:76:72:c1:95:d9:ff:3a:ef:ca:02:d6:
         bb:16:33:02:9f:c4:60:bd:a3:9a:56:52:57:86:96:8a:eb:63:
         0f:68:12:7c:29:27:55:3d:0a:27:64:c4:d3:47:19:3e:bf:88:
         31:ca:9c:3f:55:a4:17:f3:ff:51:cb:6d:ce:79:7f:51:47:f7:
         88:62:66:3f:ad:cd:04:ec:23:a7:07:ff:2f:dd:99:d6:ba:7f:
         e3:42:a3:b5:25:0f:fa:96:9f:15:0b:80:cf:79:5e:47:49:e0:
         fd:89:6c:5b:f5:f4:4b:37:6e:7a:9d:26:98:7c:f2:dd:84:19:
         03:e9:ea:07:fb:ed:70:cc:67:4a:76:b5:3c:38:22:7a:de:40:
         9a:d4:99:ed:99:0d:7b:2f:4f:de:bc:2e:8b:ee:36:a4:cc:6e:
         36:03:44:d2:08:6c:06:77:89:86:ef:df:0e:69:2b:f7:41:c9:
         a3:12:c0:f5:b2:db:af:0a:da:72:28:9c:1f:67:fd:e0:39:82:
         28:35:79:bb:c8:37:82:f8:5a:44:57:71:32:e5:5c:0a:c5:14:
         97:7b:92:30:1c:70:11:f1:56:a3:f7:62:e5:c7:84:09:61:a4:
         eb:61:2a:46
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUR6acvczNg7tvPJ2tvXoUcc/btqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyMjBaFw0yNzA1MjAxNTU3MjBaMDMxMTAvBgNV
BAMTKEJBNDc4RTE1QzVCRkIwOTYwQUM4ODA3RjVBQzNERDdDMTE5RTEyMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq0huGohXBwpVxSTDDRnBtG7p
GOBgbrxWqPEiWNPFWHtXQIbMy4XCrPF+molrIQfzkrDKqG1B6MkQYKuh7SIRZy5h
7reK7nx+ONfpKfZAQsL4UTrK67G1bDK0kQ8XYJLjV3Ew20pScbenPxMnq+tTr4n4
IVoje363VcJwNxqTyL8enJDDh42sZqWtNDWiDcBvoE4JnMXyBQwdfuHn+hIKGmuy
iiiezBELzfMpy26OAR/GquhuDbVuHlskznLn3uWldEtuaKz5xebyfxWcMRrfY7Q+
8x1TSMdNM6EH9gtoVqdd2WnLabhNosiS1zORuem8i1BApwR5ozPVzIgGbwpxAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUukeOFcW/sJYKyIB/WsPdfBGeEjMwHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMTMyMzEyZTMy
MzUzNDJlMzkzNjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzczODMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAV5/mAwDQYJKoZIhvcNAQELBQADggEBAFYjttZXGzKtYOWgvjoK1kQU
8Xm8YJjwr5d2csGV2f8678oC1rsWMwKfxGC9o5pWUleGlorrYw9oEnwpJ1U9Cidk
xNNHGT6/iDHKnD9VpBfz/1HLbc55f1FH94hiZj+tzQTsI6cH/y/dmda6f+NCo7Ul
D/qWnxULgM95XkdJ4P2JbFv19Es3bnqdJph88t2EGQPp6gf77XDMZ0p2tTw4Inre
QJrUme2ZDXsvT968LovuNqTMbjYDRNIIbAZ3iYbv3w5pK/dByaMSwPWy268K2nIo
nB9n/eA5gig1ebvIN4L4WkRXcTLlXArFFJd7kjAccBHxVqP3YuXHhAlhpOthKkY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:33 2026 by rpki-client