Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31382d3138203d3e203137383039.roa
File:                     3138322e3135352e3139322e302f31382d3138203d3e203137383039.roa (raw, json)
Hash identifier:          uuZHGeYzPaboI/RUdzaus2yZ3Lvw5ckACQcdns9m8FA=
Subject key identifier:   0F:23:59:CB:3A:08:9D:42:F4:26:B4:AD:B3:7B:2B:93:87:71:15:02
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       284517FAE3C8A5E1F0EAC5877CD7283BBB970B39
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31382d3138203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:38 +0000
ROA not before:           Thu 21 May 2026 15:52:38 +0000
ROA not after:            Thu 20 May 2027 15:57:38 +0000
asID:                     17809
IP address blocks:        182.155.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:45:17:fa:e3:c8:a5:e1:f0:ea:c5:87:7c:d7:28:3b:bb:97:0b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:38 2026 GMT
            Not After : May 20 15:57:38 2027 GMT
        Subject: CN=0F2359CB3A089D42F426B4ADB37B2B9387711502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:54:ee:1e:36:97:5d:9e:87:e8:b6:56:64:71:
                    3a:f8:c7:6c:a1:6e:e1:71:76:03:7d:4b:24:88:df:
                    6d:dd:5f:c3:d0:6d:a0:24:d6:34:03:4f:62:13:c8:
                    91:c5:1b:34:0c:ac:10:ec:44:6a:a5:69:78:51:2d:
                    c9:77:c0:3f:02:a0:60:a3:e9:e2:a7:14:b0:f5:cc:
                    d5:40:b0:28:62:82:8e:42:10:8b:57:7c:1b:76:07:
                    e2:46:a3:3e:a0:61:86:57:fc:6c:59:88:6f:d0:df:
                    e5:a3:e6:45:5c:63:0c:2f:c0:f0:68:95:53:e8:7c:
                    62:d4:05:75:b5:2c:d9:08:b0:0b:97:99:ec:d2:86:
                    f2:f8:b7:97:8b:1b:9c:52:fb:0c:2c:08:22:4e:4e:
                    6b:aa:38:8a:b8:cc:91:e7:62:63:d3:91:f7:98:53:
                    d3:02:04:84:24:b6:a2:70:65:de:13:1f:0e:7a:b6:
                    95:5b:62:8e:98:2a:8a:9e:0e:ca:0d:c2:3c:38:2a:
                    d7:5a:6f:ff:52:aa:c7:1f:69:84:2b:75:bc:7a:9e:
                    e1:a6:cf:84:1a:11:0c:d4:16:47:ce:1b:70:0f:3f:
                    01:6f:06:ae:42:40:73:00:f4:9e:e1:97:66:9f:36:
                    e0:a1:1c:c1:5d:53:bb:f8:8e:ae:a7:3f:9a:86:e9:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:59:CB:3A:08:9D:42:F4:26:B4:AD:B3:7B:2B:93:87:71:15:02
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31382d3138203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:82:44:ca:75:cb:6c:dd:f9:48:a3:ae:73:42:10:cb:83:d5:
         64:2e:fd:65:d2:06:b2:f2:c6:61:9c:c4:32:30:d9:52:1a:0c:
         b7:c4:df:6f:6f:5d:31:f0:0c:e8:d7:12:8f:2c:3d:32:ad:21:
         0a:3f:cc:07:99:4b:f5:57:a9:83:5c:f9:28:3d:2b:55:82:c1:
         1e:98:97:b7:a9:fe:5a:b8:dc:56:2d:14:78:c0:55:d9:51:b8:
         4b:81:24:90:63:3b:9e:db:84:64:6a:2b:cf:e9:17:1a:bd:a5:
         76:51:82:c9:3b:89:e6:d7:be:b2:18:d7:c4:3b:06:bd:31:6d:
         3b:21:f7:a2:83:7b:4f:fb:90:8f:3a:3c:0b:37:80:10:0c:87:
         90:6c:c8:5d:49:ae:45:67:52:dc:4f:ea:1d:ac:7c:b4:b5:1e:
         da:5e:74:97:64:fc:ce:ad:b5:f5:7d:2f:7d:f5:6b:63:d8:61:
         62:24:f0:ba:06:53:ef:88:20:8e:bd:e9:cb:9f:bd:14:3f:b3:
         14:e1:cf:9d:51:49:27:f2:1e:05:a4:bb:e6:04:88:3f:ff:b5:
         cd:f2:7a:2b:54:3c:ec:7d:68:07:c3:e2:05:cb:d6:91:76:a4:
         e9:e5:98:e0:21:58:9b:c6:f3:e1:a6:42:25:82:82:b0:34:e8:
         72:0d:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:54:43 2026 by rpki-client