Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32322d3232203d3e203137383039.roa
File:                     3230332e3231372e39362e302f32322d3232203d3e203137383039.roa (raw, json)
Hash identifier:          6uqi5/bpVS+eRSp6ZcRJrDTmSRfgYQU4VpZ60wcNxG4=
Subject key identifier:   F6:80:0D:D6:E1:BB:C3:0C:E6:B1:2D:7E:4B:9C:A2:DC:81:72:1D:5D
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       5055EF2C4E20DA9D40223277EEF7B88136B04566
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32322d3232203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:54 +0000
ROA not before:           Thu 21 May 2026 15:52:54 +0000
ROA not after:            Thu 20 May 2027 15:57:54 +0000
asID:                     17809
IP address blocks:        203.217.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:55:ef:2c:4e:20:da:9d:40:22:32:77:ee:f7:b8:81:36:b0:45:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:54 2026 GMT
            Not After : May 20 15:57:54 2027 GMT
        Subject: CN=F6800DD6E1BBC30CE6B12D7E4B9CA2DC81721D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:71:f4:45:59:c6:c6:68:ae:02:a0:a7:34:
                    05:22:a0:3d:42:e8:dd:72:51:b0:b5:3b:04:83:f0:
                    42:5d:32:18:0d:de:60:93:43:86:31:0d:60:af:e5:
                    5b:bd:06:bf:aa:64:81:5f:f1:55:75:01:b1:3c:32:
                    18:93:9a:e6:6b:5b:71:d8:3c:a7:77:53:8b:52:13:
                    ca:c9:47:d9:d0:05:22:35:bd:3c:66:af:d4:ec:7b:
                    4b:7e:7a:46:ac:ef:ad:7d:15:04:23:64:ba:5d:df:
                    02:79:f4:19:8c:bd:a9:bb:95:f8:c0:1b:aa:62:23:
                    29:12:ce:67:b9:62:fe:fe:ae:ae:4b:e9:24:7c:bb:
                    a5:4c:67:e5:47:39:80:87:1f:65:ce:ca:16:0a:86:
                    ab:d2:fd:59:45:17:9f:c0:c0:b6:86:b2:97:13:67:
                    c8:e0:a5:25:98:1a:85:5c:43:9a:df:86:d9:e9:83:
                    92:ee:7d:00:ca:48:42:a0:d1:fb:f9:30:f2:03:f6:
                    18:ce:ec:24:74:8b:1a:1b:e2:20:46:c4:5f:b9:62:
                    e9:b3:0b:d4:fe:9f:56:74:51:9e:1a:50:30:55:5c:
                    90:04:ad:16:15:00:94:fc:bd:6a:a9:0a:52:7f:25:
                    ec:58:62:b4:e5:bf:19:2a:34:31:36:1e:d1:ca:0f:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:0D:D6:E1:BB:C3:0C:E6:B1:2D:7E:4B:9C:A2:DC:81:72:1D:5D
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f32322d3232203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:c7:58:f0:7f:30:ef:f8:28:ec:b2:88:33:75:78:1f:f8:5a:
         f6:30:d5:87:fc:b6:9f:26:92:a1:85:31:c5:5c:e2:79:67:06:
         24:70:9c:ac:29:cb:e5:b5:96:11:54:b9:fd:14:cb:a7:55:fe:
         55:04:2f:66:04:64:00:b3:df:66:06:63:78:97:b2:76:c7:c1:
         46:4d:28:32:c8:61:4b:58:e6:04:13:9e:dd:bc:22:ca:1a:c3:
         0f:35:95:e1:16:60:f1:cf:aa:f5:27:3a:8e:11:61:20:cf:fd:
         75:69:a0:15:41:a5:35:ee:bb:a1:2e:aa:ac:d3:9c:e4:44:ea:
         01:9c:6b:f1:e5:5a:ca:12:c8:56:af:8c:52:d2:0e:7f:1a:ab:
         1b:08:69:70:b6:39:ae:6c:dd:f0:8a:48:4a:fb:5a:0d:84:7e:
         1c:26:03:04:c6:1f:a3:ee:3b:83:da:29:a9:ba:e2:03:4c:53:
         29:c4:1e:8c:16:2f:d4:91:a0:c9:af:e8:f4:4a:fa:24:99:d3:
         f6:26:76:34:b7:f6:95:67:35:68:27:f7:a2:36:a0:ba:48:7f:
         35:9c:4c:53:c0:f2:e8:29:68:d5:87:42:52:06:11:42:8b:49:
         a3:7d:37:d5:ad:66:71:32:ff:3c:ed:9d:15:87:7e:df:2d:19:
         75:b8:38:88
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUUFXvLE4g2p1AIjJ37ve4gTawRWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyNTRaFw0yNzA1MjAxNTU3NTRaMDMxMTAvBgNV
BAMTKEY2ODAwREQ2RTFCQkMzMENFNkIxMkQ3RTRCOUNBMkRDODE3MjFENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIFHH0RVnGxmiuAqCnNAUioD1C
6N1yUbC1OwSD8EJdMhgN3mCTQ4YxDWCv5Vu9Br+qZIFf8VV1AbE8MhiTmuZrW3HY
PKd3U4tSE8rJR9nQBSI1vTxmr9Tse0t+ekas7619FQQjZLpd3wJ59BmMvam7lfjA
G6piIykSzme5Yv7+rq5L6SR8u6VMZ+VHOYCHH2XOyhYKhqvS/VlFF5/AwLaGspcT
Z8jgpSWYGoVcQ5rfhtnpg5LufQDKSEKg0fv5MPID9hjO7CR0ixob4iBGxF+5Yumz
C9T+n1Z0UZ4aUDBVXJAErRYVAJT8vWqpClJ/JexYYrTlvxkqNDE2HtHKD3zTAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU9oAN1uG7wwzmsS1+S5yi3IFyHV0wHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMwMzMyZTMy
MzEzNzJlMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzczODMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALL2WAwDQYJKoZIhvcNAQELBQADggEBAEXHWPB/MO/4KOyyiDN1eB/4
WvYw1Yf8tp8mkqGFMcVc4nlnBiRwnKwpy+W1lhFUuf0Uy6dV/lUEL2YEZACz32YG
Y3iXsnbHwUZNKDLIYUtY5gQTnt28Isoaww81leEWYPHPqvUnOo4RYSDP/XVpoBVB
pTXuu6EuqqzTnORE6gGca/HlWsoSyFavjFLSDn8aqxsIaXC2Oa5s3fCKSEr7Wg2E
fhwmAwTGH6PuO4PaKam64gNMUynEHowWL9SRoMmv6PRK+iSZ0/YmdjS39pVnNWgn
96I2oLpIfzWcTFPA8ugpaNWHQlIGEUKLSaN9N9WtZnEy/zztnRWHft8tGXW4OIg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:22 2026 by rpki-client