Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31322e302f32322d3232203d3e203137383039.roa
File:                     3230332e3232322e31322e302f32322d3232203d3e203137383039.roa (raw, json)
Hash identifier:          4tZm4ax/pltmZmVIU5e9WEtsK/WMAxe7ulSioXMS0NU=
Subject key identifier:   A8:2F:93:C2:C8:81:CF:42:BC:6D:1D:1D:C1:42:B7:AB:53:01:DF:EA
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       342856F0909473FB310F638DD61FE11F0733D670
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31322e302f32322d3232203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:58 +0000
ROA not before:           Thu 21 May 2026 15:52:58 +0000
ROA not after:            Thu 20 May 2027 15:57:58 +0000
asID:                     17809
IP address blocks:        203.222.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:28:56:f0:90:94:73:fb:31:0f:63:8d:d6:1f:e1:1f:07:33:d6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:58 2026 GMT
            Not After : May 20 15:57:58 2027 GMT
        Subject: CN=A82F93C2C881CF42BC6D1D1DC142B7AB5301DFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:dd:56:42:89:93:42:86:aa:3d:5e:41:76:
                    99:61:d6:1f:7e:8a:a6:25:f7:2a:0b:94:0a:f7:66:
                    30:74:be:e0:5c:92:88:ac:10:26:05:42:53:56:27:
                    e0:7c:e9:cd:ec:c0:77:ed:65:2f:cc:f3:b5:f7:85:
                    3c:9d:42:7a:9d:01:7b:ac:2d:24:1f:57:8d:d0:45:
                    2a:9b:18:96:e8:29:4b:b0:17:05:b1:ea:f6:99:e4:
                    d2:38:3a:47:fa:7a:b2:03:21:9f:79:52:b2:8f:ea:
                    ba:06:9b:eb:41:34:77:c8:72:bd:09:54:1e:50:10:
                    20:d7:dc:26:5c:69:46:f9:fb:fc:0b:ae:04:8d:22:
                    3a:3d:6d:f1:07:e7:d5:54:29:54:9b:fb:21:d9:01:
                    ee:9a:bf:61:dc:6b:61:7b:5e:27:10:d7:1e:bf:7c:
                    16:32:14:18:9c:cb:49:7a:74:83:76:ca:24:7d:28:
                    62:1d:90:36:b8:8e:67:5c:a5:09:4e:3e:55:62:3e:
                    79:c4:dd:e9:e6:d1:84:25:79:2b:f4:2e:8b:31:1c:
                    1c:cf:d5:72:fd:1a:c2:4a:4e:64:cf:a0:1f:43:2e:
                    48:d6:a9:4b:84:f0:9f:2d:9c:49:f5:41:58:e9:d7:
                    60:b2:65:d5:12:58:54:f8:5d:93:5a:5d:79:04:50:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:93:C2:C8:81:CF:42:BC:6D:1D:1D:C1:42:B7:AB:53:01:DF:EA
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31322e302f32322d3232203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:c6:a6:62:f9:8a:d5:1b:15:b2:a4:19:24:cd:30:08:09:
         75:56:4f:a6:bb:df:6c:cd:61:df:5e:dc:ed:e2:57:ea:f4:77:
         eb:76:b4:24:2c:7c:c9:76:1d:e8:20:7a:25:ba:3f:6b:a5:bf:
         80:45:a0:1d:ad:08:2d:c5:14:e7:b4:be:ea:8e:be:6a:8a:d9:
         89:e3:d7:6d:c6:75:30:b8:eb:28:6c:65:cf:eb:b5:91:e9:f3:
         5e:28:e9:ef:6a:45:31:40:28:c7:82:54:47:ee:0c:e0:36:81:
         40:96:87:ae:c7:e3:53:9a:68:5c:c1:51:1b:21:ab:54:b7:30:
         8c:3b:20:8a:71:64:6f:75:00:4c:cb:3f:72:89:f0:c9:6f:5d:
         7e:4b:b3:db:aa:58:a5:78:54:2b:3d:f3:c4:7f:df:b2:13:16:
         bb:a8:93:14:b6:7e:00:b6:72:29:ad:b1:2f:36:41:2f:70:38:
         0e:c2:df:8e:b4:4b:88:d1:86:11:18:4f:4f:0f:c6:fc:f6:a1:
         4f:d7:15:b5:85:74:f4:54:3d:e5:51:a0:d9:15:99:d0:a6:e5:
         53:c9:13:df:a8:c5:d2:94:4d:e8:58:a3:2a:2a:fa:33:b2:6e:
         50:26:80:7d:0b:2c:58:95:19:32:8d:a6:bf:03:50:4c:f1:28:
         6c:8d:67:31
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:05 2026 by rpki-client