Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31392d3139203d3e203137383039.roa
File:                     3138322e3135352e36342e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          YtIQoY6aEtGiJJfTu4vxkbJn4alwY2JoHuye283t4Yw=
Subject key identifier:   B5:FD:89:98:B4:CB:A7:5E:B7:A4:DF:DD:18:DA:BE:89:76:C2:EE:5E
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       53741C1A92C6D92131A66CF45AA37BAA78F6B1D3
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:36 +0000
ROA not before:           Thu 21 May 2026 15:52:36 +0000
ROA not after:            Thu 20 May 2027 15:57:36 +0000
asID:                     17809
IP address blocks:        182.155.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:74:1c:1a:92:c6:d9:21:31:a6:6c:f4:5a:a3:7b:aa:78:f6:b1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:36 2026 GMT
            Not After : May 20 15:57:36 2027 GMT
        Subject: CN=B5FD8998B4CBA75EB7A4DFDD18DABE8976C2EE5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5c:06:05:7e:72:ca:20:1a:04:b6:19:42:47:
                    c0:4b:cb:9d:b3:29:ce:cf:a7:de:0d:6b:b6:0a:8c:
                    8d:23:f9:57:2a:f0:b2:c4:4c:96:30:e8:fe:ff:4f:
                    3e:f4:28:76:d8:5e:43:9a:3c:44:0f:98:47:3f:e8:
                    f8:c9:d4:ea:04:41:21:76:7f:88:04:2c:77:53:b3:
                    7a:a0:53:6f:cb:42:68:35:20:97:ad:5b:1e:8a:4e:
                    e4:31:3f:2f:44:33:3b:f3:2f:6c:ff:09:1a:35:e5:
                    89:14:36:15:ae:02:0d:e8:d5:82:84:28:a2:d6:38:
                    16:e3:8b:fa:45:01:99:1e:8a:32:61:74:15:1d:27:
                    43:44:7b:1c:f0:3e:fe:ee:47:65:96:ca:a0:cc:72:
                    98:47:91:a7:fd:8a:f0:fc:f5:0b:4a:60:ca:96:30:
                    db:8a:8f:74:1f:89:da:8e:13:5d:79:3a:ac:a5:25:
                    61:fc:e9:41:69:b5:18:52:a1:79:58:8f:c6:29:1c:
                    c8:81:f9:71:0f:fd:66:a9:c1:ac:23:2f:0e:3c:46:
                    c5:b0:0f:f5:80:4e:a6:ab:3f:50:74:3a:94:c4:31:
                    11:18:06:51:17:3d:06:c3:a5:df:c7:4f:f3:aa:b3:
                    31:d4:a9:8c:cb:3c:df:88:90:94:f4:77:1c:51:d2:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:89:98:B4:CB:A7:5E:B7:A4:DF:DD:18:DA:BE:89:76:C2:EE:5E
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e36342e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:2e:d2:c7:78:ff:58:e5:e7:75:25:ad:50:a5:33:15:bd:
         56:27:02:b3:e6:10:54:46:88:13:af:3b:01:ba:14:ac:c1:42:
         48:1e:17:8a:a7:5d:83:1a:c5:41:c4:cf:81:74:d4:cc:87:ed:
         3f:86:07:7c:09:41:fe:8c:99:54:9d:85:c8:72:c8:42:35:62:
         fd:fd:1f:12:d7:25:75:82:1e:76:c8:6c:81:20:f5:58:84:c2:
         39:50:18:11:65:8e:d5:dc:15:50:c3:07:46:84:5a:5a:16:5c:
         af:03:0f:81:92:46:a2:09:ff:50:0f:fc:9a:70:a9:e6:c1:53:
         47:61:49:68:20:db:0e:2b:8b:78:c1:fc:01:b6:8a:be:e4:35:
         28:be:c7:74:14:52:9f:39:d4:51:52:3f:92:df:62:4d:54:d0:
         f7:4c:85:ca:5f:a3:a1:ba:94:71:a6:9c:33:c3:4e:45:1c:ad:
         c6:5a:cf:62:d6:13:27:ec:11:aa:77:d3:b8:30:f1:b2:03:21:
         6e:6f:ac:7e:6b:8f:f2:a2:51:30:2f:e0:c6:e5:03:37:8c:03:
         14:4d:c3:c8:b6:03:b6:95:73:9e:61:ae:8c:c1:6c:03:ea:ae:
         c6:08:bb:87:71:43:3a:b3:d4:a4:26:29:57:f9:f5:9d:39:36:
         d2:25:84:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:09 2026 by rpki-client