Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3232342e302f31392d3139203d3e203137383039.roa
File:                     3138322e3135352e3232342e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          +K2QywyFgXR4sQmbbRRPkLpopr0bV/FMGGWgaFpFJXs=
Subject key identifier:   B9:8C:82:57:81:F8:27:E5:42:01:55:8A:AF:CE:E2:17:34:08:9B:31
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       03ADFED0E6C8F9CF0E6733B2A2BBDB41901848F2
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3232342e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:49 +0000
ROA not before:           Thu 21 May 2026 15:52:49 +0000
ROA not after:            Thu 20 May 2027 15:57:49 +0000
asID:                     17809
IP address blocks:        182.155.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ad:fe:d0:e6:c8:f9:cf:0e:67:33:b2:a2:bb:db:41:90:18:48:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:49 2026 GMT
            Not After : May 20 15:57:49 2027 GMT
        Subject: CN=B98C825781F827E54201558AAFCEE21734089B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:16:ed:49:ee:a2:35:da:a7:e9:c4:3b:f5:
                    32:9a:54:33:89:f8:9e:d3:50:16:e6:da:ff:82:5a:
                    1b:4c:21:ab:7e:eb:45:5a:0c:cf:a5:99:2b:a6:93:
                    5c:69:fb:40:80:98:78:67:35:49:54:a5:88:f0:7a:
                    24:88:59:49:f7:c1:71:0c:0d:25:09:15:a3:70:23:
                    33:20:b6:ae:41:34:cd:96:bf:6c:cf:f5:98:bb:14:
                    00:cc:8d:b1:9e:e7:52:bf:b0:34:c2:d9:de:1b:0d:
                    d2:03:53:a4:02:cf:9b:8f:b6:ff:72:a5:f9:f9:ef:
                    03:cd:2c:fc:84:42:0e:06:b4:26:f6:f1:fd:26:70:
                    7b:5c:40:a5:5f:d8:81:1d:47:a7:54:9f:a2:45:06:
                    f9:8c:e8:4c:fe:7e:bd:cd:4f:ec:16:01:40:82:1c:
                    98:27:aa:b5:11:2c:b0:67:19:77:ab:86:74:a7:6c:
                    ae:b6:6b:73:2f:71:a6:a5:5a:c0:e2:1e:db:d1:1c:
                    fc:55:46:f3:d8:bf:20:84:6f:6e:be:70:b5:45:9c:
                    eb:6b:bb:b5:e4:40:21:dd:04:c2:13:8f:db:36:42:
                    15:ba:a4:47:bc:54:72:f2:26:85:fb:7d:de:46:00:
                    25:b8:51:fd:9f:6e:91:64:a9:1a:42:bf:bb:68:45:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:82:57:81:F8:27:E5:42:01:55:8A:AF:CE:E2:17:34:08:9B:31
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e3232342e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:e2:16:cd:fe:16:de:88:f9:d7:7d:c8:33:fa:83:6c:98:07:
         00:d0:e1:af:db:3b:87:b2:0d:43:2e:86:59:44:b1:5b:3b:bd:
         75:d0:ed:f4:47:23:ae:19:7a:f3:b0:4f:ee:ed:38:23:c6:9c:
         f1:96:e2:b1:20:c9:1d:42:3f:8c:7e:0f:ec:cb:c0:37:b4:a7:
         95:1e:e4:ee:4c:64:97:31:d1:97:f1:5e:24:56:b2:2f:b7:f1:
         e9:f5:a4:04:6b:cf:ed:07:4d:fd:e0:5f:0b:b9:f1:5d:16:a6:
         de:77:f4:98:15:f1:6a:15:e0:c5:38:49:a8:1e:f4:18:2e:6d:
         80:af:32:2f:ba:9b:51:d2:6e:c5:f9:e7:f1:65:12:fb:51:51:
         cb:38:ac:20:f7:90:4a:2f:35:c7:76:ed:ae:d7:c3:73:cb:e8:
         b9:6c:e9:83:e4:e7:e4:6a:37:33:ca:b4:c4:0d:6c:39:a2:7c:
         b6:88:69:9c:aa:0e:3a:8d:3c:d8:f7:57:67:6c:7b:5d:0c:cb:
         b7:17:0a:0a:96:f7:44:eb:0a:04:8e:39:5f:6d:4c:f2:27:5d:
         2b:7d:12:b2:91:75:67:33:bb:19:4b:42:70:63:72:0a:af:30:
         4a:9e:ce:f9:96:dd:d1:ed:4a:95:e8:c3:20:7e:bd:07:82:c5:
         d9:16:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:53 2026 by rpki-client