Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31372d3137203d3e203137383039.roa
File:                     3138322e3135352e302e302f31372d3137203d3e203137383039.roa (raw, json)
Hash identifier:          L8z5wduzuE7t1iQc9f2XI3rMj8LxYGYsO3t/4F3jGks=
Subject key identifier:   67:4A:8E:04:87:21:0D:0A:27:E6:6F:49:78:37:54:73:EE:EF:A8:01
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       1C04EF749D2F8790D05F8DDD0578114450358B41
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31372d3137203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:27 +0000
ROA not before:           Thu 21 May 2026 15:52:27 +0000
ROA not after:            Thu 20 May 2027 15:57:27 +0000
asID:                     17809
IP address blocks:        182.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:04:ef:74:9d:2f:87:90:d0:5f:8d:dd:05:78:11:44:50:35:8b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:27 2026 GMT
            Not After : May 20 15:57:27 2027 GMT
        Subject: CN=674A8E0487210D0A27E66F4978375473EEEFA801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:b0:bb:ee:d2:ea:6f:4a:c8:7a:3f:30:28:
                    18:cc:ab:9e:dc:f7:72:28:03:4e:29:c5:38:66:6d:
                    22:e0:4a:8c:f3:79:96:ea:d7:62:83:22:12:0a:11:
                    0a:a5:c2:52:92:85:30:e9:b7:41:cd:8f:1c:ae:45:
                    5d:7c:df:f6:2d:e7:1f:3e:e5:68:6b:9e:48:be:63:
                    a5:63:5b:49:3a:16:db:8b:7e:8f:d0:39:88:32:65:
                    0c:bb:7c:be:5d:87:c2:0e:81:1e:c0:2f:99:a2:9e:
                    8d:8b:14:9a:7a:fe:b2:2a:4a:c7:0d:9d:38:4e:7e:
                    ae:a8:93:ec:44:ce:29:5b:d5:36:7e:6e:b1:f4:60:
                    8f:ac:61:9e:2e:59:a1:8a:50:a6:33:a1:42:6b:fa:
                    45:bb:74:4e:86:a1:f4:48:f8:1a:77:aa:a3:10:d7:
                    b6:34:d9:34:26:b1:7b:54:c0:cf:74:75:3c:73:79:
                    73:92:9b:8b:f3:fd:2d:dc:18:44:ef:2e:3d:ef:cf:
                    b8:99:37:41:22:75:bb:8d:38:2d:6b:2d:7d:a1:01:
                    29:65:bb:c2:b7:99:18:a6:12:f4:4c:f1:c1:3b:a2:
                    4e:77:e5:9c:a8:9a:a2:16:96:9a:94:46:f1:1a:34:
                    9d:2e:74:c7:51:73:83:b3:48:b1:5f:2d:e4:8b:4b:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4A:8E:04:87:21:0D:0A:27:E6:6F:49:78:37:54:73:EE:EF:A8:01
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e302e302f31372d3137203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:72:12:91:88:a7:9b:69:69:b1:4b:08:a1:bf:1f:67:71:31:
         71:f2:bd:4e:67:36:7d:22:44:99:bb:5f:6c:dd:81:31:f2:a5:
         66:c4:6e:e0:11:d2:bf:bb:b7:c8:b7:a0:9c:4e:6c:75:c1:bb:
         56:f1:07:93:07:3c:7e:95:96:34:20:1c:11:73:29:78:c4:d5:
         38:50:72:fb:b2:31:f1:56:03:71:4c:ea:4c:b0:33:9b:c8:60:
         e2:d6:bb:4a:e5:95:91:fc:b6:13:d3:5d:9a:30:45:7c:4c:ee:
         dc:85:5c:90:a5:4b:80:41:54:7e:8e:ed:65:d8:98:d6:88:c7:
         35:d5:36:63:b7:aa:3c:e6:3c:cf:f1:4b:94:7e:7e:88:43:bb:
         6e:53:d0:1d:79:75:3a:f6:08:0b:e0:ae:ad:a9:12:74:aa:74:
         5c:4a:b0:d4:00:ff:2f:ce:24:23:e4:aa:6c:ff:d6:a7:7a:ff:
         92:bb:f3:e5:b3:fb:b6:04:ad:22:02:24:fe:d2:b7:eb:e3:62:
         a3:ce:b6:10:14:4d:35:98:6f:21:94:ff:45:eb:18:6a:4e:71:
         37:06:3b:36:b6:d2:af:70:da:35:1f:d3:02:52:0f:86:17:73:
         97:7c:80:0f:32:02:23:c9:e4:bc:1e:9b:cb:32:9e:cc:42:8f:
         d3:3c:df:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:06 2026 by rpki-client