Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31362d3232203d3e203137383039.roa
File:                     3138322e3135352e302e302f31362d3232203d3e203137383039.roa (raw, json)
Hash identifier:          ugelgbB+mEegGY1iNrfe7XCIvqMJJGO6/XJlOA8V7pM=
Subject key identifier:   C1:7F:B8:E3:C9:12:73:F7:84:BD:AC:42:A5:9F:DC:EA:69:D9:F5:B9
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       777234165AA65F0DAD9EB79145A65B5334785399
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31362d3232203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:33 +0000
ROA not before:           Thu 21 May 2026 15:52:33 +0000
ROA not after:            Thu 20 May 2027 15:57:33 +0000
asID:                     17809
IP address blocks:        182.155.0.0/16 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:72:34:16:5a:a6:5f:0d:ad:9e:b7:91:45:a6:5b:53:34:78:53:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:33 2026 GMT
            Not After : May 20 15:57:33 2027 GMT
        Subject: CN=C17FB8E3C91273F784BDAC42A59FDCEA69D9F5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:c7:bc:d4:76:05:b2:7b:4a:c1:a7:15:5a:
                    17:d7:9d:52:30:f6:c4:0c:9e:92:0b:ed:a8:7e:b8:
                    54:0f:b0:44:4f:cf:6c:25:9b:87:b1:20:8f:05:f4:
                    81:7e:24:4e:96:c6:41:fc:40:33:65:e6:cb:13:9f:
                    e8:96:ba:6f:7c:60:79:c8:0a:97:d3:98:76:87:fb:
                    b6:7a:c1:f8:8f:95:af:bf:7b:cf:85:2a:b4:ae:da:
                    67:05:54:ba:b7:ba:6f:d3:a2:4e:de:60:f7:fe:3f:
                    dd:96:70:1e:8d:70:12:0f:7b:d6:ab:b9:e1:3d:2a:
                    cf:16:49:ba:42:09:93:df:19:2c:f3:de:72:ea:c1:
                    71:5b:b0:43:d1:e8:b1:92:fb:4a:de:e1:ec:90:0e:
                    ce:4c:4f:57:66:b1:a9:74:33:dd:d8:f0:bf:c3:7c:
                    34:3d:16:8f:58:c2:65:82:ac:95:31:d4:b5:d6:2a:
                    5d:ec:a3:ae:07:08:4d:ce:c5:1b:32:4b:7b:e9:86:
                    ed:a2:98:72:0b:82:a2:92:41:fd:fb:35:a5:de:1d:
                    7f:cd:19:86:ee:70:16:c3:5b:55:9d:f3:58:56:7f:
                    b9:24:6b:42:8e:39:b3:c5:16:21:f7:52:a9:e3:55:
                    85:05:ad:60:f5:7f:98:23:12:14:b5:86:50:ed:66:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:B8:E3:C9:12:73:F7:84:BD:AC:42:A5:9F:DC:EA:69:D9:F5:B9
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31362d3232203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:e4:c4:e3:9e:63:59:72:58:b5:b2:90:b4:4c:a3:c0:10:
         e7:5e:e9:84:b5:a2:c0:90:48:6a:0d:5e:cb:9a:61:73:87:6a:
         09:e2:34:47:7e:1a:45:c7:e4:9f:05:48:6b:bf:d8:00:ee:1c:
         31:75:f4:81:14:bd:96:d6:d2:1f:ea:8b:93:86:76:0c:54:1c:
         73:05:ee:d4:bb:2e:8c:6c:d8:60:94:7d:81:4a:03:b3:4a:12:
         df:24:54:e1:f8:47:6c:61:47:e5:24:78:92:12:20:ee:8f:42:
         7e:25:3d:42:3d:e7:cd:a3:57:c7:b4:3a:79:5c:6c:ce:5a:ed:
         20:27:f3:54:9b:a7:b0:7e:6e:58:bd:9a:0c:ed:b3:27:45:87:
         aa:3a:a6:68:5d:90:f6:a8:74:a9:08:6c:1f:41:70:fb:ce:f1:
         b7:6c:cf:5d:1c:79:ae:77:1b:cc:cc:70:b3:d9:43:4c:a7:bf:
         3c:de:0b:52:14:9c:3d:8f:14:91:18:12:37:a2:1e:d8:45:11:
         de:01:75:d8:cc:5e:fd:cd:d9:1d:5b:90:fc:09:b2:a2:6e:dd:
         47:6f:a1:e8:4c:25:2d:27:88:d8:24:5c:3e:39:d1:34:b3:36:
         5d:61:68:9b:d5:3a:bb:89:8a:f1:1a:8d:38:42:56:a6:eb:fe:
         cc:9f:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:44 2026 by rpki-client