Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2039343136.roa
File:                     3230332e3231372e39362e302f31392d3234203d3e2039343136.roa (raw, json)
Hash identifier:          n2qdCF9gGjSHw/yseGpRJxg3GDTAN8x3Nah09oGLUKw=
Subject key identifier:   03:E1:DA:20:90:BC:53:F9:96:5A:50:C5:49:01:A6:35:F8:B8:DD:DA
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       743B91E9E1AB6B32705F3F875E9DFBD026E3465E
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2039343136.roa
Signing time:             Thu 21 May 2026 15:57:46 +0000
ROA not before:           Thu 21 May 2026 15:52:46 +0000
ROA not after:            Thu 20 May 2027 15:57:46 +0000
asID:                     9416
IP address blocks:        203.217.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3b:91:e9:e1:ab:6b:32:70:5f:3f:87:5e:9d:fb:d0:26:e3:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:46 2026 GMT
            Not After : May 20 15:57:46 2027 GMT
        Subject: CN=03E1DA2090BC53F9965A50C54901A635F8B8DDDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:bb:82:bb:09:dc:98:0a:65:18:9d:ed:2a:
                    ec:71:5f:6a:13:60:45:4e:03:c4:68:3a:90:d7:c2:
                    bc:a6:e0:eb:73:1c:91:0d:92:e4:5c:69:ca:47:cf:
                    98:24:ac:3f:2b:82:f7:c7:6c:14:04:e4:64:b0:24:
                    ec:c2:8a:e7:a1:13:27:5c:86:d3:e9:e6:64:cd:a2:
                    a2:9c:fd:82:1e:09:46:4f:46:c2:10:08:7d:8e:18:
                    57:dc:1f:56:e3:4a:4b:d2:04:8e:f4:8d:a9:67:f7:
                    8c:39:dc:71:4f:76:e9:2d:d4:64:cc:32:03:3d:0c:
                    27:6c:73:33:71:c4:12:3b:d9:5f:6c:ae:df:48:55:
                    88:a3:61:f6:c7:ce:24:b8:b3:93:4f:e3:69:cd:22:
                    cb:4a:27:1f:93:ff:10:23:89:22:96:b3:e6:d4:57:
                    24:17:9a:c0:9b:41:7e:1e:8a:42:b8:d4:e8:a5:9e:
                    43:ea:79:66:80:97:2f:03:13:b0:0c:de:58:a4:41:
                    20:1a:18:ad:8e:22:88:85:b6:f8:e9:0a:01:d3:99:
                    16:61:39:75:8e:10:60:16:b6:62:ff:99:db:89:2e:
                    36:b4:4e:02:9f:6b:c7:88:e6:90:5a:3b:4f:04:c6:
                    c5:65:a6:67:a2:4e:5e:9c:50:a2:8c:ea:da:76:aa:
                    d0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E1:DA:20:90:BC:53:F9:96:5A:50:C5:49:01:A6:35:F8:B8:DD:DA
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:0d:14:d8:a0:2b:e4:49:92:8c:10:34:ab:eb:69:40:2b:5b:
         6d:25:3f:c3:3f:e1:89:95:fb:fb:57:89:a9:0c:e9:21:c7:53:
         1e:5f:42:da:60:89:65:fa:bc:ab:56:52:87:f9:e2:2b:72:2d:
         ae:e5:fa:ee:29:2f:5d:b4:87:b3:26:55:fd:ce:58:bb:a9:16:
         0a:51:ab:37:16:38:48:b4:cf:1d:96:9e:bb:4f:6c:07:13:71:
         f2:d5:97:06:72:01:7c:ea:d2:24:42:dc:15:ac:01:6b:9c:68:
         1d:30:da:5d:13:34:cb:63:8c:9a:db:be:ac:22:24:06:75:b1:
         b8:bd:e6:7c:ec:fb:1e:bc:3f:92:d5:66:c8:5a:7a:5c:df:00:
         eb:df:e2:e8:12:75:25:6d:46:0b:53:c1:43:44:e4:02:18:d3:
         4a:15:ad:9e:3f:8a:fc:cb:f2:3d:0a:d4:19:7e:53:0b:10:48:
         4d:c0:f3:d5:7f:83:7e:84:93:69:ae:96:7c:88:4b:72:fe:fc:
         40:cc:9c:ec:96:12:27:9d:b6:33:bf:bb:d0:e1:f4:75:fe:6e:
         a2:10:28:48:e5:49:f4:72:00:83:5d:04:44:a5:04:86:e3:42:
         22:95:01:23:2d:e8:00:43:fa:fa:91:86:a2:0c:92:f4:3e:32:
         1c:5a:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:04 2026 by rpki-client