Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3132302e302f32312d3231203d3e203137383039.roa
File:                     3230332e3231372e3132302e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier:          cgyDJ7l028iSeMj9IFQUcpABH3DlIG6DKGeyDoKdvRE=
Subject key identifier:   B9:C5:50:D7:47:00:3E:63:11:B6:0E:DE:BF:A3:67:90:E4:01:33:D0
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       0E5C1C31E6278E64408CB18ADB6CE317835BE836
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3132302e302f32312d3231203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:17 +0000
ROA not before:           Thu 21 May 2026 15:52:17 +0000
ROA not after:            Thu 20 May 2027 15:57:17 +0000
asID:                     17809
IP address blocks:        203.217.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:1c:31:e6:27:8e:64:40:8c:b1:8a:db:6c:e3:17:83:5b:e8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:17 2026 GMT
            Not After : May 20 15:57:17 2027 GMT
        Subject: CN=B9C550D747003E6311B60EDEBFA36790E40133D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:c0:12:86:02:24:34:1e:52:0f:55:04:35:
                    c8:0b:91:5e:09:29:55:7a:7e:68:b6:0d:0f:9d:b2:
                    ec:9f:52:52:9c:01:6e:9c:44:66:39:62:db:f7:5d:
                    2d:8a:aa:a1:85:d9:19:43:ea:aa:a3:3c:ed:b3:1f:
                    90:75:9d:ca:a2:db:20:36:6c:79:2c:63:69:d9:57:
                    3d:8f:df:11:0d:22:7c:ea:8c:27:27:ba:f7:f0:2c:
                    c9:be:35:43:f6:dc:a6:b0:0a:53:d0:17:81:23:fd:
                    13:37:be:41:2f:42:36:76:ab:8d:09:fb:1e:98:14:
                    41:24:af:14:d1:0b:5a:a8:21:f3:53:8a:ff:3b:50:
                    9a:b4:84:06:82:74:25:52:95:d5:9a:fe:4d:89:e1:
                    a8:69:bc:2e:4f:ce:ea:1c:e4:98:d0:6e:59:64:34:
                    a5:a8:5c:ad:d2:03:f9:6d:c2:98:0e:e9:66:bd:4e:
                    c0:18:06:a9:ce:0f:b7:ba:1a:ad:c0:b8:1b:29:6e:
                    a8:de:f8:93:3a:bf:fd:3e:6c:5e:0e:46:19:ad:e0:
                    0d:21:46:a6:09:f0:f6:db:24:4e:0b:fa:91:09:17:
                    51:54:07:1a:50:d1:73:3d:fe:b9:b6:5f:22:58:42:
                    48:c6:07:5b:a1:87:d1:91:e0:ff:10:7e:71:6b:49:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C5:50:D7:47:00:3E:63:11:B6:0E:DE:BF:A3:67:90:E4:01:33:D0
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e3132302e302f32312d3231203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:20:ce:66:74:5c:cd:3e:8d:e6:ed:5b:bb:2d:19:d7:a1:99:
         b8:cb:8f:58:d9:27:ad:09:a3:65:b4:89:2b:f5:c2:d6:46:0e:
         dd:de:b7:11:0b:00:7c:55:23:6b:28:8a:3f:91:d6:b1:f8:b0:
         f5:eb:1e:da:82:0e:e0:dd:79:23:74:b2:83:78:b2:ef:2f:fb:
         07:fa:0c:ab:55:a6:cc:79:b6:cf:9d:07:17:83:d6:0f:5f:28:
         ab:d7:6f:09:d9:a3:2c:2d:15:53:fa:c5:7e:79:61:1d:8c:2c:
         f5:dc:34:7a:f9:b7:25:70:9b:4e:5c:da:7c:bc:1b:60:78:31:
         e0:d1:47:8a:b2:37:dc:a9:cf:c1:fe:f5:14:32:1c:e3:77:ca:
         3a:cf:a7:61:bc:65:77:31:2a:f1:ef:d1:24:a3:73:d8:2c:b1:
         b1:26:cf:5c:ae:c2:82:bf:2f:03:2c:af:ab:0f:68:65:cd:8b:
         4d:86:37:65:2f:7a:ad:73:fa:ac:f7:f2:a6:c4:27:9b:4f:13:
         b3:af:45:d0:22:8a:30:a6:90:a2:43:70:db:14:de:95:30:5b:
         1e:b7:80:36:d7:ce:5f:72:9a:7e:28:67:8a:e8:40:7f:a3:71:
         c4:3c:c4:e2:e8:39:e3:76:c7:7f:d7:5b:e1:04:e3:45:7b:ce:
         be:0d:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:40 2026 by rpki-client