
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3130342e302f32312d3231203d3e203137383039.roa
File: 3230332e3231372e3130342e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier: 8StjNUTcF/sJobeXJi/FWQEJdxJtJ5czRx0UiGAJ0qY=
Subject key identifier: 6A:F6:94:C1:E7:34:22:F0:D6:EE:1E:C3:33:DB:61:FE:08:CA:58:C0
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 3B075A132A0231C3C9E5C3546CB985B900CCBAD2
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3130342e302f32312d3231203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:50 +0000
ROA not before: Thu 21 May 2026 15:52:50 +0000
ROA not after: Thu 20 May 2027 15:57:50 +0000
asID: 17809
IP address blocks: 203.217.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:07:5a:13:2a:02:31:c3:c9:e5:c3:54:6c:b9:85:b9:00:cc:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:50 2026 GMT
Not After : May 20 15:57:50 2027 GMT
Subject: CN=6AF694C1E73422F0D6EE1EC333DB61FE08CA58C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:c1:9e:49:d5:ba:a3:86:e2:6c:be:f7:b2:
e3:0d:05:c1:f3:cc:83:77:53:e7:fc:c7:62:63:99:
24:65:b2:c4:e7:69:9c:18:3c:d6:72:c5:2f:2f:0e:
31:d8:67:1d:63:8d:53:ae:22:6b:ad:98:b9:f3:95:
e4:b9:e2:9f:a5:37:72:0c:cd:b2:5b:8f:75:78:8f:
41:89:83:df:60:25:e7:8a:d1:50:85:7a:87:92:f2:
0a:00:39:d1:e9:3b:4d:d7:69:23:fb:f6:dd:22:b1:
a1:53:ee:ce:5c:3c:f5:c2:3f:22:10:9f:59:3d:02:
92:27:43:84:7b:5f:ce:cf:fb:f9:f0:bd:8f:00:ba:
06:62:41:a0:d6:76:b7:be:2c:bb:ca:45:25:87:de:
a5:23:c6:bd:e2:33:0c:70:af:3c:d9:e3:c8:56:68:
c3:35:2a:1f:d7:8e:88:cd:fe:aa:11:4b:ee:de:37:
2f:04:43:f2:07:75:0b:69:32:c8:c7:f1:99:75:e7:
77:e2:bf:e5:7e:bc:d0:ec:a7:a0:09:3c:2e:fd:8d:
f0:9f:06:c7:08:64:e7:db:07:88:f5:e9:69:50:03:
19:cb:65:6f:25:d9:62:fe:9a:6e:c9:7e:da:33:7c:
e4:6f:1c:29:b7:67:4c:5e:f3:7b:33:02:d3:fa:a8:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:94:C1:E7:34:22:F0:D6:EE:1E:C3:33:DB:61:FE:08:CA:58:C0
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3130342e302f32312d3231203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.217.104.0/21
Signature Algorithm: sha256WithRSAEncryption
46:5b:0c:db:37:5c:87:fe:c3:16:b2:ee:8c:38:fa:33:d4:4a:
1e:cd:0e:30:cb:83:bf:60:50:5e:fa:85:13:b4:db:2d:90:4d:
63:ec:93:74:d8:5a:20:c6:7b:cb:9c:13:fb:bb:33:a9:be:3f:
02:eb:cf:45:54:1f:0e:cd:41:e1:94:aa:b7:a6:08:ce:c9:52:
4b:91:b8:d7:a2:ef:b6:6b:a6:5e:26:9f:af:06:c5:75:fe:7e:
b3:ef:de:6e:9c:6c:da:71:1d:b0:62:e2:d8:11:24:d2:ed:70:
c5:36:0e:91:e5:4e:55:56:7a:89:2c:53:4c:e5:45:54:6a:a2:
30:cd:c7:9a:85:ff:c4:6b:17:11:76:52:81:19:f0:b4:29:1a:
df:1c:5f:99:f3:2a:c5:14:00:b0:43:24:d3:97:02:f6:1a:84:
eb:76:fa:1d:d2:39:f5:e1:fa:a7:1d:a9:b2:c6:bc:ad:c8:8a:
2c:6a:5e:53:78:a5:46:74:71:42:f8:1a:31:dd:be:b1:fe:e1:
2a:c3:77:39:33:34:14:66:f1:a7:57:ce:7b:de:57:e2:6e:c1:
3e:46:e5:10:a9:2d:7d:8e:ed:85:d8:a1:5c:8f:c1:36:4e:0c:
5d:f2:5e:c4:3b:22:40:46:53:b6:5d:4e:92:95:f9:ce:17:fa:
b6:bb:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:38 2026 by rpki-client