Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31392d3139203d3e203137383039.roa
File:                     3138322e3135352e3139322e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          fmvg7fh+xtso/KgtyFUJ+zv1Vpk+oPzMtRrZKrDy+FQ=
Subject key identifier:   E0:3B:90:82:F4:DD:EB:B4:9D:22:09:B2:C8:34:6A:61:DB:9E:DE:89
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       03FC744CF1EE05AC5337293BB3C14B2CDFB2A20D
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:42 +0000
ROA not before:           Thu 21 May 2026 15:52:42 +0000
ROA not after:            Thu 20 May 2027 15:57:42 +0000
asID:                     17809
IP address blocks:        182.155.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:fc:74:4c:f1:ee:05:ac:53:37:29:3b:b3:c1:4b:2c:df:b2:a2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:42 2026 GMT
            Not After : May 20 15:57:42 2027 GMT
        Subject: CN=E03B9082F4DDEBB49D2209B2C8346A61DB9EDE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:16:8e:f9:dc:f0:c5:e4:59:3e:05:6c:db:
                    65:70:59:a4:89:8d:1a:7a:8c:79:5b:87:b6:1b:35:
                    35:2c:88:18:61:f5:be:9b:c6:1a:6f:9b:7b:c2:b1:
                    e3:15:6b:14:73:66:61:ee:64:3c:7d:32:61:8e:0f:
                    f0:75:b0:da:f6:4c:aa:a0:cf:48:93:18:22:19:4f:
                    d3:a3:67:18:d8:5e:e6:c1:64:16:8b:12:27:44:22:
                    76:14:fa:5b:c9:70:7f:a3:48:d6:34:51:6a:fb:aa:
                    04:e2:c6:a1:13:71:79:cf:7c:a8:39:d3:98:fa:51:
                    3d:c2:4c:95:1c:f8:f2:8d:48:21:7c:da:39:b5:3f:
                    41:4a:ce:d3:ca:86:d4:4e:fb:5a:4e:1f:db:69:88:
                    86:99:f0:11:d1:fc:f1:99:d2:da:c7:66:cd:a6:42:
                    bc:dd:f6:25:65:d3:15:38:f3:2c:f3:ad:0e:f5:e1:
                    99:81:09:f9:3c:b2:94:b5:1f:1d:e4:d9:89:93:be:
                    61:22:37:41:82:b4:7a:98:2e:61:ae:dd:3b:d6:78:
                    d7:51:80:c8:0a:c9:92:16:69:c4:43:0d:0b:d5:89:
                    35:8e:44:6c:a9:40:db:49:b4:4e:0b:7b:59:b2:39:
                    de:96:d9:4e:bc:fe:62:51:df:b0:e6:62:3f:e2:93:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:90:82:F4:DD:EB:B4:9D:22:09:B2:C8:34:6A:61:DB:9E:DE:89
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3139322e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:a8:e5:38:36:11:14:05:96:27:06:c2:86:21:c0:f7:ad:
         b5:91:e8:71:ac:be:e6:4d:5d:7f:fd:a9:6a:f7:1f:5f:84:81:
         ca:8e:e2:ce:8d:6a:f2:2a:d6:62:86:a3:a0:9d:63:84:bc:18:
         e6:45:14:fc:43:66:1f:3a:7e:9f:3a:e9:f1:81:eb:9b:2e:07:
         7b:22:f2:d0:1b:f4:96:07:e2:bf:d3:68:df:eb:79:b3:59:f9:
         74:0b:3e:2b:bc:20:2c:eb:cc:fd:99:32:f8:5c:6a:5a:a1:cd:
         37:d1:41:e4:0f:f4:20:c5:0b:ae:9c:56:66:1f:0c:59:74:d0:
         c9:f2:a8:d6:36:e0:9c:fb:80:a7:f8:19:0b:8a:aa:f0:b7:99:
         b9:a1:5c:81:55:ae:83:8c:7e:00:7c:fd:31:04:dd:c0:ab:6f:
         d1:35:7f:0e:23:47:d7:6f:0a:81:77:43:cd:39:6c:d0:1e:bc:
         19:0c:e5:19:09:55:57:0a:27:d0:ba:06:2c:61:a8:3a:c2:9f:
         0f:ab:ed:cd:f0:4a:52:d2:1d:27:c8:ca:fb:a4:23:f2:09:3c:
         f4:36:b2:54:2e:d9:d9:38:1e:99:81:50:a9:1c:a4:e2:43:f2:
         2d:06:65:2f:e9:4c:24:f6:d7:f6:8c:8e:b0:6d:f4:c0:7e:f9:
         e4:fd:69:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:35 2026 by rpki-client