Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32312d3231203d3e203137383039.roa
File:                     3230332e3231372e39362e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier:          FgDciHY4vyXoB6jk4DLu83ZfeSx17fHj/PsTFnOj5Jw=
Subject key identifier:   93:64:2C:E5:DD:B8:53:48:5A:CA:36:7C:E4:33:E8:14:7B:05:14:0C
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       7974AAC6B8A20394D83B4880C380B3AA33945A55
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32312d3231203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:21 +0000
ROA not before:           Thu 21 May 2026 15:52:21 +0000
ROA not after:            Thu 20 May 2027 15:57:21 +0000
asID:                     17809
IP address blocks:        203.217.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:74:aa:c6:b8:a2:03:94:d8:3b:48:80:c3:80:b3:aa:33:94:5a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:21 2026 GMT
            Not After : May 20 15:57:21 2027 GMT
        Subject: CN=93642CE5DDB853485ACA367CE433E8147B05140C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:58:b7:95:0e:9d:da:a6:45:a8:69:ff:a3:
                    b4:8d:96:00:31:0f:7c:4b:67:9f:66:34:7c:bb:50:
                    b2:6f:ef:63:7b:89:03:34:2f:0c:f4:39:b8:db:69:
                    74:12:ce:8b:16:11:10:f4:ce:4f:6c:6b:80:23:34:
                    a6:8b:5a:f8:56:4b:94:67:34:cd:f7:9d:7b:89:e8:
                    0b:0d:83:87:a7:5c:15:2b:2e:ca:86:50:9e:df:87:
                    fb:fd:d6:aa:c4:82:de:41:fe:32:8b:2b:fe:fe:58:
                    45:c7:62:22:e4:9b:28:9e:c6:9e:63:39:13:84:33:
                    37:97:ac:0f:e5:f7:b3:30:79:46:6d:d3:15:d6:89:
                    ed:70:5b:2b:71:37:5a:a4:fe:19:9a:be:eb:ef:97:
                    22:cb:06:1b:67:c6:40:63:2f:41:24:d3:83:8e:d4:
                    28:3f:51:53:2e:90:6c:75:7e:8c:01:0d:de:33:34:
                    eb:a9:e5:03:9e:f4:06:84:6c:d9:10:7e:12:e8:1d:
                    58:81:d7:76:fa:76:53:f1:95:89:12:8c:4e:68:7c:
                    98:5c:96:a0:98:7b:a2:bd:4b:e8:90:2e:e2:95:99:
                    8a:c5:c7:af:99:89:e5:92:55:bf:f7:26:a5:38:b6:
                    10:71:11:fb:e7:ba:69:5e:e4:16:90:4f:47:e0:43:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:2C:E5:DD:B8:53:48:5A:CA:36:7C:E4:33:E8:14:7B:05:14:0C
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32312d3231203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:87:2d:9b:0a:8e:5e:e1:52:24:09:1f:b9:da:7a:ce:3a:a7:
         53:fc:a9:3a:4e:aa:68:dd:f2:d1:32:af:5f:68:a8:c6:15:ba:
         0a:e8:04:f8:ab:61:08:c6:f6:a6:dd:de:27:6d:4d:db:ef:71:
         87:c7:bf:51:4b:9b:75:77:c9:e3:cc:6d:47:09:b5:42:e0:55:
         20:2d:d6:96:83:e0:ed:85:79:99:48:ac:72:8e:7c:79:66:38:
         61:a3:3a:ea:d7:c3:48:38:3f:dd:0e:c7:ca:e0:9c:52:ba:d1:
         1c:fa:6e:ad:69:04:ae:cc:0b:55:c8:30:9e:6b:0c:70:6f:97:
         b7:ec:1b:fa:3e:cd:4c:5d:d3:e6:7b:64:e7:f4:62:77:17:db:
         78:36:c5:54:04:c5:6a:63:f4:45:90:ff:86:51:8e:8c:aa:53:
         49:45:03:85:a3:43:7a:a3:20:fd:f7:6d:d1:6c:58:77:9e:dd:
         8e:a1:48:18:6a:01:10:da:bf:2d:bd:a3:7d:d6:9d:a0:71:3a:
         9c:4f:35:72:ea:5f:41:a6:5b:88:47:20:ee:bb:8b:63:4b:c6:
         2d:c6:00:e8:15:ae:00:0c:1e:7f:fb:3f:3b:54:d3:04:78:31:
         bf:44:20:80:44:07:96:58:28:a5:f6:a3:30:0a:c5:bd:9a:87:
         ba:9f:72:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:20 2026 by rpki-client