Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e39362e302f31392d3139203d3e203137383039.roa
File:                     3138322e3135352e39362e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          xoyZFn3ztc63j9Xj5DRFQlXhluXT296Y4djZa4WkeRA=
Subject key identifier:   E8:63:C1:EB:7E:A7:70:B5:13:3F:E0:CE:84:10:F2:DD:3F:91:62:AC
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       5541A9B2F81109505DE9FE2DB52CC42D57D05121
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e39362e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:12 +0000
ROA not before:           Thu 21 May 2026 15:52:12 +0000
ROA not after:            Thu 20 May 2027 15:57:12 +0000
asID:                     17809
IP address blocks:        182.155.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:41:a9:b2:f8:11:09:50:5d:e9:fe:2d:b5:2c:c4:2d:57:d0:51:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:12 2026 GMT
            Not After : May 20 15:57:12 2027 GMT
        Subject: CN=E863C1EB7EA770B5133FE0CE8410F2DD3F9162AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:ae:3e:ab:79:20:fc:cb:b5:ab:2a:5d:68:
                    15:79:57:9a:38:52:a2:41:d5:bc:40:d6:f4:44:93:
                    28:69:a9:c5:93:df:44:e8:7f:a6:9a:79:c1:6c:70:
                    8e:7d:6c:f7:6c:34:11:34:97:15:68:f5:3a:43:ce:
                    6c:de:8f:50:9f:89:45:e7:01:0a:e7:0e:e9:df:55:
                    9f:db:1f:25:4a:23:b4:a7:fc:71:a7:40:5b:43:f2:
                    84:05:58:5f:6a:6e:0f:79:d4:07:0a:37:43:c0:fe:
                    49:89:31:7c:14:42:c8:8f:02:a9:49:00:e8:a1:20:
                    80:0c:86:cd:f9:ba:f6:e4:79:ef:d9:23:94:d3:5b:
                    39:22:20:4d:a4:48:af:85:9a:47:4d:ca:4f:b5:54:
                    f7:8f:74:cd:5d:8c:e1:24:37:79:5b:cd:7d:7b:50:
                    28:b2:40:5a:7d:1b:f1:9e:82:cb:0e:0c:e7:cf:c8:
                    cc:57:f8:31:aa:2c:4e:c9:6f:4f:4d:1a:6f:82:53:
                    17:54:4d:5a:fc:59:ab:84:55:04:e0:13:2c:61:ec:
                    13:36:93:93:a6:69:e5:82:ce:a0:0e:c2:59:a8:b8:
                    c8:d6:f5:a0:88:9c:12:8f:c2:5a:f6:00:ae:df:be:
                    b3:af:46:1e:39:b7:b4:c2:de:5b:a4:bd:ba:21:3f:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:63:C1:EB:7E:A7:70:B5:13:3F:E0:CE:84:10:F2:DD:3F:91:62:AC
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3138322e3135352e39362e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.155.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:60:f8:fa:a5:a2:95:7d:00:52:0c:7a:69:38:cb:1f:35:
         ab:25:7f:9d:43:85:d3:e3:3f:c6:08:94:1b:f9:5f:0e:eb:d5:
         79:99:8a:ba:58:fd:ae:42:0b:21:82:3d:93:3b:ab:f4:6f:24:
         fe:61:77:8a:d3:9d:fd:dd:93:92:54:0d:0a:a6:ce:a3:1f:39:
         ab:79:8f:95:84:ad:3c:a9:41:db:3e:73:98:ba:80:e7:3f:4c:
         c2:c4:21:08:1d:16:00:d3:4d:bc:a8:4a:13:09:13:34:3e:60:
         49:80:ce:f3:27:7a:55:8a:fa:c3:ee:69:48:14:77:04:21:88:
         e3:17:50:3c:aa:43:b4:1f:d3:7e:ec:bc:7e:b8:18:77:85:43:
         fd:bb:b0:05:7b:c8:af:e9:45:23:aa:f3:ea:6b:fe:04:d4:5a:
         3f:9e:69:74:0c:4f:f0:ad:8d:1d:32:6f:c6:f6:b4:4a:f1:84:
         56:60:ae:3d:e6:4c:0c:91:a6:91:52:12:44:6f:bd:fa:ce:97:
         95:3a:9b:46:63:69:ff:bb:46:fd:a2:c3:f7:2a:55:7f:2b:0a:
         ae:95:7e:9f:9e:62:ee:85:91:62:ac:28:61:25:51:f0:f7:0d:
         c3:54:0c:21:66:41:aa:2c:d2:10:c5:e5:6f:d5:82:ea:55:90:
         34:92:e2:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:38 2026 by rpki-client