Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31382d3138203d3e203137383039.roa
File:                     3138322e3135352e36342e302f31382d3138203d3e203137383039.roa (raw, json)
Hash identifier:          1RRcshNqJyEWGVTAWtMsvh2XbNI0H9nE2COwORk+zos=
Subject key identifier:   B3:12:BD:FD:26:8E:94:C1:65:7F:C6:EF:B8:9D:68:45:2D:6A:6B:26
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       7776945BA967C54EA7A629BC26CA0CE2DD5D1A91
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31382d3138203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:47 +0000
ROA not before:           Thu 21 May 2026 15:52:47 +0000
ROA not after:            Thu 20 May 2027 15:57:47 +0000
asID:                     17809
IP address blocks:        182.155.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:94:5b:a9:67:c5:4e:a7:a6:29:bc:26:ca:0c:e2:dd:5d:1a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:47 2026 GMT
            Not After : May 20 15:57:47 2027 GMT
        Subject: CN=B312BDFD268E94C1657FC6EFB89D68452D6A6B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:8b:48:d1:41:08:26:1d:f6:2d:2f:17:57:
                    b5:25:2b:26:9d:e0:64:c0:e2:6c:82:9e:11:d2:f0:
                    59:c2:83:19:b9:f5:27:df:23:6e:85:d8:d0:d7:2a:
                    ea:12:30:ff:a9:f7:38:a9:fe:8e:7b:ba:20:6a:0f:
                    6d:1c:f7:43:4d:0f:cc:e7:83:99:05:94:d7:81:da:
                    68:33:d6:ff:d3:05:4c:6a:b0:0d:ac:a4:2d:7b:98:
                    a2:52:95:0a:6f:31:9f:21:60:b1:1a:a7:bb:8d:5e:
                    82:ee:ce:88:ce:82:38:20:17:92:48:bd:dc:1d:6d:
                    3e:b9:87:d2:e3:e9:fc:95:e2:7e:a8:ad:73:3c:05:
                    ec:57:ec:af:93:76:21:cf:3b:69:2d:c1:19:86:cc:
                    8c:fd:f8:04:34:a0:06:be:5b:ec:63:05:5e:df:68:
                    8f:c6:de:87:71:63:c7:17:99:8f:2c:69:3d:8f:c3:
                    cc:c5:e6:30:0a:38:35:70:6c:5f:b1:1d:e8:ef:f2:
                    3d:12:24:bf:2b:6f:ba:0d:8f:62:57:b2:52:21:82:
                    07:88:41:7d:82:54:ca:fa:15:54:2b:c7:d1:af:d1:
                    26:8d:b5:6b:b5:08:e1:42:9a:ba:61:49:e9:3b:50:
                    dd:62:c1:f3:bf:b6:48:df:c4:94:53:c8:55:7d:53:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:BD:FD:26:8E:94:C1:65:7F:C6:EF:B8:9D:68:45:2D:6A:6B:26
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31382d3138203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:cb:20:ae:bc:f7:d2:1a:e9:c9:85:d0:58:92:52:f2:a8:
         62:a0:9c:22:93:95:58:09:34:1e:17:b7:be:cd:20:48:74:4b:
         12:c0:5c:73:1c:10:f8:c9:37:7d:d7:60:3d:fe:75:e6:1e:57:
         5a:37:61:37:84:47:d7:36:0c:09:d0:dd:c4:66:7f:8e:2c:0d:
         3b:ff:92:40:d9:6a:94:e3:d9:75:ea:30:29:ea:a5:85:15:4b:
         8e:91:f4:ec:e5:05:1c:b6:8d:5a:ca:28:af:fe:21:4c:5f:a2:
         af:9b:66:77:a8:63:ea:05:be:93:5f:42:e0:26:ce:a0:88:66:
         54:13:1c:20:33:df:02:e3:56:3c:ca:5a:ca:8d:0b:20:7c:6f:
         d0:ce:94:3f:81:7e:c2:1f:42:69:d1:fd:e3:7c:88:96:fa:b4:
         07:31:ec:eb:3d:59:f0:5c:6e:1d:00:7b:cd:19:4d:c2:80:3e:
         c0:b1:ce:af:e5:fb:15:de:e3:ea:6c:48:1c:6a:a5:c6:2a:6d:
         b0:3a:48:42:39:38:d2:73:f3:d5:a1:42:f6:e7:8c:5f:67:f8:
         63:ae:07:5f:9c:08:74:fa:14:eb:d1:15:62:59:7e:da:d5:3f:
         ee:72:cd:a9:9f:0b:62:06:ab:52:70:a4:2a:e6:cf:6a:fd:e7:
         27:f9:63:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:31 2026 by rpki-client