Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3136302e302f31392d3139203d3e203137383039.roa
File:                     3138322e3135352e3136302e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          Ayq47RY9mpZ6HPZEGRCEChlhZgUWBnldAvAhU3Fu1UA=
Subject key identifier:   85:16:06:5A:0A:69:A1:9A:38:10:B3:A1:4C:99:10:A5:2E:7F:62:B5
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       430438FE3FCBE7836136B3B34ED396E45131D6B7
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3136302e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:15 +0000
ROA not before:           Thu 21 May 2026 15:52:15 +0000
ROA not after:            Thu 20 May 2027 15:57:15 +0000
asID:                     17809
IP address blocks:        182.155.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:38:fe:3f:cb:e7:83:61:36:b3:b3:4e:d3:96:e4:51:31:d6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:15 2026 GMT
            Not After : May 20 15:57:15 2027 GMT
        Subject: CN=8516065A0A69A19A3810B3A14C9910A52E7F62B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:df:cc:0f:4d:dc:ae:09:1c:69:6e:ad:68:
                    1a:ce:80:95:02:85:7f:0f:bd:19:7c:51:a8:0f:e1:
                    36:40:ac:82:e8:d2:5b:c8:ac:5b:39:a2:58:89:73:
                    86:9e:79:f8:bd:52:a6:ed:b1:1a:7b:f1:ec:4d:9e:
                    38:9b:9a:16:ac:0e:54:3c:75:94:1f:8c:2f:d8:b8:
                    f4:07:12:93:5c:a6:be:aa:6b:39:77:76:9f:75:93:
                    fc:d1:53:cc:d0:53:7b:8e:49:11:f8:71:d4:c5:70:
                    29:e3:cc:7b:43:29:e4:dd:ba:33:53:2e:a8:86:43:
                    dd:92:43:da:43:ba:33:22:5e:be:ce:b1:2a:16:34:
                    1e:78:f9:83:0c:df:2c:cc:3c:42:89:1a:a3:1d:24:
                    2f:e3:18:56:cb:4f:c2:8d:2d:16:c8:c5:96:79:fa:
                    41:4d:98:2c:4c:96:6d:64:c6:d5:25:55:96:aa:67:
                    f0:17:0d:21:d8:69:08:42:72:99:d3:91:f1:08:a7:
                    a9:85:5c:24:0a:b9:10:09:e3:e5:97:ad:38:26:ef:
                    2f:db:e2:a6:37:10:c1:7d:64:96:6e:32:51:60:55:
                    34:88:c5:ce:a7:a6:4e:47:4e:7b:14:02:e0:a7:6f:
                    ea:1a:6a:6a:a2:40:b5:c0:45:77:95:b6:71:41:59:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:06:5A:0A:69:A1:9A:38:10:B3:A1:4C:99:10:A5:2E:7F:62:B5
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3136302e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:ec:0e:10:e7:0f:dd:4b:d0:69:d0:99:02:56:16:7b:ef:06:
         c2:42:4a:a1:b2:75:8a:ee:2d:44:a1:bc:3a:1c:aa:4b:7b:25:
         a5:5f:7c:93:43:97:30:4e:f3:7a:e4:40:57:48:49:4b:9d:a6:
         42:c4:1d:b0:3e:5b:07:de:a5:bb:cc:64:1b:4f:18:fb:33:e5:
         85:62:8c:de:e7:00:58:4d:a4:0f:f3:2b:16:20:2c:ca:e4:73:
         60:0d:4d:e9:e3:cb:26:65:56:b7:d1:c5:c2:65:5b:d2:48:2f:
         bb:12:18:e7:e4:3d:4e:9f:b4:6e:c0:62:c0:ac:1e:6f:a1:0b:
         82:e7:cd:c4:c8:12:d3:6b:51:a9:4f:80:ec:83:41:31:a5:b1:
         9b:8d:2e:31:ec:6d:06:1a:5a:25:9f:b7:d6:f6:d1:86:39:67:
         cb:39:6f:e8:67:04:51:f2:3e:c5:03:9e:7d:05:f3:e1:b3:a8:
         35:1c:30:2d:22:67:7b:29:2a:3a:60:00:02:d8:49:45:42:d4:
         ed:d4:7c:fd:71:2e:43:6b:bf:52:7a:06:bd:8c:8b:f0:ff:94:
         06:a7:39:6c:cc:6e:10:e7:f0:f4:f0:98:08:3e:83:b7:8a:e3:
         fc:65:8b:b8:8c:0a:48:06:0e:62:71:26:e0:bf:21:d7:e1:cf:
         aa:6c:76:f4
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQwQ4/j/L54NhNrOzTtOW5FEx1rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyMTVaFw0yNzA1MjAxNTU3MTVaMDMxMTAvBgNV
BAMTKDg1MTYwNjVBMEE2OUExOUEzODEwQjNBMTRDOTkxMEE1MkU3RjYyQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPPt/MD03crgkcaW6taBrOgJUC
hX8PvRl8UagP4TZArILo0lvIrFs5oliJc4aeefi9UqbtsRp78exNnjibmhasDlQ8
dZQfjC/YuPQHEpNcpr6qazl3dp91k/zRU8zQU3uOSRH4cdTFcCnjzHtDKeTdujNT
LqiGQ92SQ9pDujMiXr7OsSoWNB54+YMM3yzMPEKJGqMdJC/jGFbLT8KNLRbIxZZ5
+kFNmCxMlm1kxtUlVZaqZ/AXDSHYaQhCcpnTkfEIp6mFXCQKuRAJ4+WXrTgm7y/b
4qY3EMF9ZJZuMlFgVTSIxc6npk5HTnsUAuCnb+oaamqiQLXARXeVtnFBWR6rAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUhRYGWgppoZo4ELOhTJkQpS5/YrUwHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMTM4MzIyZTMx
MzUzNTJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM4MzAzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBbaboDANBgkqhkiG9w0BAQsFAAOCAQEARuwOEOcP3UvQadCZAlYW
e+8GwkJKobJ1iu4tRKG8OhyqS3slpV98k0OXME7zeuRAV0hJS52mQsQdsD5bB96l
u8xkG08Y+zPlhWKM3ucAWE2kD/MrFiAsyuRzYA1N6ePLJmVWt9HFwmVb0kgvuxIY
5+Q9Tp+0bsBiwKweb6ELgufNxMgS02tRqU+A7INBMaWxm40uMextBhpaJZ+31vbR
hjlnyzlv6GcEUfI+xQOefQXz4bOoNRwwLSJneykqOmAAAthJRULU7dR8/XEuQ2u/
UnoGvYyL8P+UBqc5bMxuEOfw9PCYCD6Dt4rj/GWLuIwKSAYOYnEm4L8h1+HPqmx2
9A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:08 2026 by rpki-client