Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3139203d3e203137383039.roa
File:                     3230332e3232322e302e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          k/NVvt01z6ePoCbuOQkPwp829BoGoIdtI0hhDvVQVYw=
Subject key identifier:   CB:8A:17:44:3F:DB:32:0A:C4:5C:30:62:2E:8F:0E:8D:4C:4E:7D:A1
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       1CABBC624A43074CD711814AD617B6BEEC16A476
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:56 +0000
ROA not before:           Thu 21 May 2026 15:52:56 +0000
ROA not after:            Thu 20 May 2027 15:57:56 +0000
asID:                     17809
IP address blocks:        203.222.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:bc:62:4a:43:07:4c:d7:11:81:4a:d6:17:b6:be:ec:16:a4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:56 2026 GMT
            Not After : May 20 15:57:56 2027 GMT
        Subject: CN=CB8A17443FDB320AC45C30622E8F0E8D4C4E7DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:82:5b:d0:8f:95:98:1c:d8:03:a9:d1:ce:
                    aa:d6:ee:61:ba:d2:08:a4:de:f6:c8:c6:fc:13:8b:
                    7e:10:28:ea:f6:d8:de:4d:bf:1e:e5:ec:93:f9:49:
                    3a:09:ca:ab:d4:12:ee:d3:3e:ea:49:55:74:50:dd:
                    1b:28:b3:0d:80:40:03:6b:86:59:47:05:c6:b7:e4:
                    4f:db:10:0c:f9:f6:bd:95:20:d5:9a:3f:c2:be:78:
                    2a:9d:37:a9:a4:bb:6a:0b:72:55:9b:9d:b7:51:40:
                    cb:5d:9f:3c:e2:15:dc:58:2a:75:88:5c:0d:23:57:
                    b7:b3:11:41:97:59:ad:38:34:88:2d:10:86:e5:b4:
                    1d:8c:20:9f:44:85:7f:b6:9a:1e:09:da:66:0f:df:
                    d8:89:54:f5:60:5a:4d:99:d9:94:9a:c8:78:3e:c5:
                    72:0d:a6:d3:ac:21:73:0a:e8:6f:55:b7:4e:fb:b7:
                    a9:a2:b7:a3:e0:8d:f2:2c:c6:7e:48:2f:aa:b1:5d:
                    6b:f5:f2:57:60:97:0e:3c:23:3b:e0:bc:5e:72:35:
                    5d:3d:4e:02:09:84:9d:56:6d:2a:5f:cb:02:69:d7:
                    51:63:98:bf:04:10:86:9f:0b:81:8f:2e:eb:39:8d:
                    1e:59:3a:08:ee:c3:0a:0e:70:c1:4d:43:a8:a0:32:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8A:17:44:3F:DB:32:0A:C4:5C:30:62:2E:8F:0E:8D:4C:4E:7D:A1
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:25:54:31:1c:75:65:8b:ab:a8:4f:ce:5f:b0:a4:d8:db:
         d8:23:f9:29:3f:61:08:a4:31:b6:b8:4a:74:53:1f:87:2e:dc:
         3f:c6:bd:52:5d:17:18:c9:af:d5:6a:f4:ba:c0:13:34:6d:40:
         5f:52:c9:7e:da:f2:de:43:02:38:9b:9a:40:b0:6e:91:c4:ad:
         cd:c9:86:a9:d8:cb:25:15:a5:62:37:ea:cb:84:33:b6:25:a4:
         76:c9:2b:85:9c:6a:98:8e:bf:d5:07:d5:76:d9:84:86:5e:a1:
         3a:a7:88:95:b5:d7:6b:6e:fc:95:c2:cd:aa:d8:58:cb:02:b8:
         58:53:40:9a:3f:a0:6f:65:77:8c:d1:2a:3e:bb:55:af:06:01:
         1e:47:fa:30:39:01:1f:3e:9c:22:10:99:43:53:13:f3:e5:79:
         77:b8:b9:33:cd:c6:87:55:4a:01:e7:5f:e8:a3:6b:c7:94:d7:
         64:63:01:aa:bb:08:fc:c4:08:4d:eb:76:8b:d7:96:b9:02:07:
         3a:9b:37:68:1c:5c:91:80:17:b6:5e:ef:39:ef:b5:2e:ee:bc:
         fc:c9:a3:89:45:60:f3:62:7f:af:ee:89:03:96:1e:65:46:ba:
         1a:ee:a0:9c:c7:52:5c:c5:68:4b:06:b9:a6:9b:28:96:32:fb:
         a7:27:79:d7
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUHKu8YkpDB0zXEYFK1he2vuwWpHYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyNTZaFw0yNzA1MjAxNTU3NTZaMDMxMTAvBgNV
BAMTKENCOEExNzQ0M0ZEQjMyMEFDNDVDMzA2MjJFOEYwRThENEM0RTdEQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg14Jb0I+VmBzYA6nRzqrW7mG6
0gik3vbIxvwTi34QKOr22N5Nvx7l7JP5SToJyqvUEu7TPupJVXRQ3Rsosw2AQANr
hllHBca35E/bEAz59r2VINWaP8K+eCqdN6mku2oLclWbnbdRQMtdnzziFdxYKnWI
XA0jV7ezEUGXWa04NIgtEIbltB2MIJ9EhX+2mh4J2mYP39iJVPVgWk2Z2ZSayHg+
xXINptOsIXMK6G9Vt077t6mit6PgjfIsxn5IL6qxXWv18ldglw48IzvgvF5yNV09
TgIJhJ1WbSpfywJp11FjmL8EEIafC4GPLus5jR5ZOgjuwwoOcMFNQ6igMroVAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUy4oXRD/bMgrEXDBiLo8OjUxOfaEwHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMwMzMyZTMy
MzIzMjJlMzAyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzMTM3MzgzMDM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQFy94AMA0GCSqGSIb3DQEBCwUAA4IBAQBMMCVUMRx1ZYurqE/OX7Ck2NvY
I/kpP2EIpDG2uEp0Ux+HLtw/xr1SXRcYya/VavS6wBM0bUBfUsl+2vLeQwI4m5pA
sG6RxK3NyYap2MslFaViN+rLhDO2JaR2ySuFnGqYjr/VB9V22YSGXqE6p4iVtddr
bvyVws2q2FjLArhYU0CaP6BvZXeM0So+u1WvBgEeR/owOQEfPpwiEJlDUxPz5Xl3
uLkzzcaHVUoB51/oo2vHlNdkYwGquwj8xAhN63aL15a5Agc6mzdoHFyRgBe2Xu85
77Uu7rz8yaOJRWDzYn+v7okDlh5lRroa7qCcx1JcxWhLBrmmmyiWMvunJ3nX
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:57 2026 by rpki-client