
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32302d3230203d3e203137383039.roa
File: 3230332e3231372e39362e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier: 3ip3TCmCCzJ72br96Fn9eRnfYQueWykfAYaH9YEt0Og=
Subject key identifier: 23:CD:EC:06:5F:CF:1B:CE:7A:11:9E:9A:28:D6:D9:13:04:9E:18:86
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 3EFA7A7C34E56231EB4719E3D33F219B815E2233
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32302d3230203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:27 +0000
ROA not before: Thu 21 May 2026 15:52:27 +0000
ROA not after: Thu 20 May 2027 15:57:27 +0000
asID: 17809
IP address blocks: 203.217.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fa:7a:7c:34:e5:62:31:eb:47:19:e3:d3:3f:21:9b:81:5e:22:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:27 2026 GMT
Not After : May 20 15:57:27 2027 GMT
Subject: CN=23CDEC065FCF1BCE7A119E9A28D6D913049E1886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:87:8a:a9:eb:66:ce:e8:78:85:dd:1e:1e:
95:80:46:21:1e:5c:92:34:1c:30:9e:20:1d:1e:24:
32:83:5a:b9:57:80:57:ee:d2:94:14:c3:b7:e7:2b:
d1:e8:20:6b:18:e1:11:71:76:3c:28:99:d7:c1:c8:
fa:8f:1e:f9:34:51:e7:0f:63:a2:10:70:6b:87:fc:
cc:bb:97:62:3f:f8:35:58:8e:f6:d1:82:79:c4:f3:
d1:eb:22:ff:6e:fc:e7:f5:aa:64:99:24:cb:4a:2a:
54:7c:f2:9e:a3:e4:c5:3f:3a:61:c4:03:5a:66:d0:
e3:3a:d5:3f:7c:66:b1:18:5c:92:e2:98:de:08:ff:
92:55:ac:a9:b1:fe:88:4d:02:98:c5:76:7f:6d:e4:
ba:df:c5:39:d6:78:50:9a:ee:f1:40:88:f8:00:26:
ee:47:d0:09:aa:f9:94:a5:29:0d:9e:52:f9:ed:cf:
46:d6:10:8d:71:f4:77:0e:ab:28:07:4b:b8:0b:a5:
ac:47:93:5f:aa:fe:55:89:1d:ee:bf:d1:49:25:f0:
b3:d8:ed:7d:91:44:12:19:aa:42:a3:78:a0:cf:47:
d0:c5:82:13:af:f2:0b:c6:37:6d:0b:5e:b5:d9:31:
47:09:f4:61:58:6d:9d:60:a6:ee:91:2a:64:2a:c1:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:EC:06:5F:CF:1B:CE:7A:11:9E:9A:28:D6:D9:13:04:9E:18:86
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32302d3230203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/20
Signature Algorithm: sha256WithRSAEncryption
56:f0:46:ce:b8:5e:1f:fa:d3:68:9c:94:9a:bf:cf:ef:3e:5b:
36:be:bb:6b:17:58:29:8a:02:01:71:6e:46:58:67:eb:ac:cc:
60:d4:53:a6:f9:dd:ab:36:87:1f:b0:a5:de:15:18:a4:de:e7:
da:77:12:39:d9:0f:ae:b6:29:30:02:dd:07:ce:85:75:4e:20:
0e:e0:c8:a6:57:de:90:3d:1f:5d:ca:5c:42:4a:a1:7e:16:70:
1f:a9:86:16:04:74:be:89:22:e9:b0:49:7d:07:2d:d7:98:1e:
bf:e5:ba:2b:f6:72:b0:55:db:9e:59:6e:5b:39:3a:af:c2:fe:
16:2b:3a:e1:2e:4b:c3:50:27:b2:56:a4:7a:d5:b3:1d:ed:d0:
7b:f8:5d:50:20:d4:ef:81:26:88:bd:7d:36:e1:90:fb:3a:70:
b3:97:62:d6:65:71:9a:c8:aa:dc:be:e6:cc:a1:df:01:b5:27:
1c:63:1a:82:d1:f8:ae:9f:56:a8:9a:28:ca:b8:da:55:0f:35:
21:b5:8b:e2:3d:95:bb:d1:67:d4:34:c2:4f:42:91:f7:5b:82:
5e:ec:e1:9c:70:ef:5d:d1:dc:d1:cc:04:ed:c1:c4:d8:ce:82:
f1:63:a6:93:ff:46:ad:3c:d6:73:04:bf:86:b8:42:20:b7:87:
d7:ad:d6:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:54:59 2026 by rpki-client