
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3131322e302f32312d3231203d3e203137383039.roa
File: 3230332e3231372e3131322e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier: OQ8pmjAAVzyzUp9GxrPmyDvm9rH3W6sh/zUp6whfdyQ=
Subject key identifier: 76:CD:BF:88:80:55:A4:D4:8C:A6:B5:FD:AD:D8:76:0A:25:5B:9F:55
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 7214F34A7B3F9823092187B22D91913E4DA0BFD8
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3131322e302f32312d3231203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:37 +0000
ROA not before: Thu 21 May 2026 15:52:37 +0000
ROA not after: Thu 20 May 2027 15:57:37 +0000
asID: 17809
IP address blocks: 203.217.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:14:f3:4a:7b:3f:98:23:09:21:87:b2:2d:91:91:3e:4d:a0:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:37 2026 GMT
Not After : May 20 15:57:37 2027 GMT
Subject: CN=76CDBF888055A4D48CA6B5FDADD8760A255B9F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:ef:e1:f8:64:da:9f:4f:31:a3:34:76:9a:
38:ea:f4:42:19:57:bf:36:9a:f6:26:2b:12:c5:c6:
f4:f7:03:e2:65:8f:a2:c5:27:73:a1:8f:f0:6f:57:
52:b3:15:a2:ff:1e:ae:cd:57:6c:75:ec:63:b1:0e:
a4:c4:f8:40:47:b2:06:16:40:66:f4:3d:5f:d8:88:
76:1e:2e:95:32:8f:8c:99:1f:10:71:f9:e9:a2:2f:
57:e8:28:e1:36:4a:eb:b9:da:c5:87:66:f6:2b:ef:
e1:12:7f:a2:b1:d0:87:26:f6:d9:18:33:44:96:e4:
83:fc:da:7e:25:b6:7d:85:ab:1c:62:61:eb:62:85:
b9:04:17:21:05:46:bc:7e:55:46:1d:53:51:93:64:
a6:b7:2d:85:8d:db:52:a4:cc:ab:44:b7:c5:08:d9:
ee:58:44:4a:b0:a6:29:c3:e2:17:5d:90:cc:67:2f:
97:2c:be:39:db:0b:63:bf:7c:4f:01:69:db:a4:af:
67:1d:3d:5b:1a:04:be:33:bb:83:8d:65:4e:30:85:
25:7c:de:3c:5c:14:66:85:b0:84:7d:12:84:82:46:
c7:91:d8:fb:3e:a8:3d:ec:02:e9:0f:c6:38:2c:80:
d1:94:de:80:2b:bd:60:b9:4b:01:78:4c:bd:8f:3e:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CD:BF:88:80:55:A4:D4:8C:A6:B5:FD:AD:D8:76:0A:25:5B:9F:55
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3131322e302f32312d3231203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.217.112.0/21
Signature Algorithm: sha256WithRSAEncryption
49:a7:52:a9:9d:04:fb:ba:3c:d2:bf:10:43:21:af:99:34:9c:
1b:d0:cb:8b:e3:40:34:23:26:6c:dd:d0:d3:9b:0a:4b:3d:0f:
7c:2a:5d:ab:d6:78:4a:95:ca:bd:db:29:97:1b:8c:ab:dc:ef:
45:ba:35:b4:8e:e7:e1:c8:9e:11:3f:a9:7a:06:9e:47:f1:fa:
19:45:ab:ac:9e:bc:c1:d7:0d:f7:db:38:b1:cf:d2:51:2c:79:
81:b3:e8:a9:0a:0b:a6:91:98:fd:c6:6d:b1:13:14:de:73:cf:
51:87:56:69:82:40:f8:04:34:93:b5:5c:46:b3:9f:ca:ca:6e:
9b:fb:74:ee:c3:ce:88:9e:c9:ac:b9:c9:94:27:be:61:e5:d5:
f1:27:f4:e4:43:96:b4:a1:b8:ef:9c:36:15:a6:78:25:4f:a4:
6e:9b:50:e1:21:8e:ec:bb:26:1e:05:e5:c4:8b:7b:bf:e0:f8:
51:e4:08:05:4c:05:19:c6:47:25:a7:8e:7d:ec:30:f5:84:e4:
b3:0e:49:3b:44:04:f7:11:13:4f:66:35:18:d0:ae:ee:dc:99:
73:c0:b2:cc:7a:a2:06:71:46:e9:9a:1b:3b:d6:19:37:68:80:
f8:a6:91:64:3a:52:6b:cf:80:29:4c:30:b4:71:0a:7f:ab:cc:
b3:8f:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:42 2026 by rpki-client