
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa
File: 3230332e3232322e31362e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier: QAAh2rtZ92Gv0U3PxQWaExaqnSaIyJLJL/LCujXDueQ=
Subject key identifier: AE:6D:50:94:B3:A2:9B:1F:15:B0:AE:8B:5D:C4:98:B1:26:E7:1D:BA
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 3409797543402D54FC3CED62F6AF2FCC3D818AE1
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:45 +0000
ROA not before: Thu 21 May 2026 15:52:45 +0000
ROA not after: Thu 20 May 2027 15:57:45 +0000
asID: 17809
IP address blocks: 203.222.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:09:79:75:43:40:2d:54:fc:3c:ed:62:f6:af:2f:cc:3d:81:8a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:45 2026 GMT
Not After : May 20 15:57:45 2027 GMT
Subject: CN=AE6D5094B3A29B1F15B0AE8B5DC498B126E71DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:ca:bf:3e:5a:e7:28:b8:f9:cf:98:32:bf:
2a:b4:d6:1f:87:bb:10:87:19:23:00:04:e3:8e:fb:
7f:75:05:f2:0a:96:e7:70:67:fe:34:10:bc:f1:d6:
01:84:83:26:a4:8a:6c:66:07:1d:fc:6e:63:c2:95:
fd:1f:e8:d7:c1:97:d0:02:8e:72:cd:1f:e9:4d:c6:
04:0f:d9:80:b6:ba:c0:aa:24:53:a5:a2:45:80:58:
5c:3a:ca:95:8c:26:0b:99:0e:08:2b:0e:51:80:46:
25:69:bb:ef:b8:58:4e:3b:3b:b1:ee:1a:d6:c2:6d:
73:b6:77:b5:da:6c:5d:57:39:6a:e7:5f:9e:ee:39:
70:d4:e8:c8:08:9b:06:ae:9c:68:8a:a0:ad:be:a3:
5d:f1:ff:47:66:43:c9:ec:e0:d5:10:cd:64:36:ba:
7b:a7:2b:36:25:4a:dd:28:c3:c4:d1:9b:fe:ea:e9:
23:14:1f:cb:da:7b:f7:5f:ae:bc:9b:85:cb:b2:af:
be:5d:15:ce:7c:5a:b4:a1:32:41:f3:3b:54:a9:ed:
51:e1:25:8c:94:e2:cf:8f:13:c5:1f:7b:b5:c1:2d:
a4:a7:28:68:c2:b3:72:e5:52:4d:37:37:72:0c:7a:
f2:9b:ee:ed:ab:2d:fe:ac:e3:13:7e:b3:94:48:fd:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6D:50:94:B3:A2:9B:1F:15:B0:AE:8B:5D:C4:98:B1:26:E7:1D:BA
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.222.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:6a:d4:45:50:bb:7c:b9:62:27:c4:92:fa:a9:f5:c9:16:b0:
01:25:b4:d0:d4:a2:4f:1c:8d:3a:18:eb:f9:6a:0d:0f:0e:1c:
9b:0a:da:39:79:28:3b:ba:5c:51:65:46:12:e4:5a:ba:5d:3e:
94:7e:79:c9:d8:2f:18:94:cb:7f:c8:90:a8:2d:04:26:ac:7e:
28:2f:73:88:4f:48:32:a6:25:ad:c4:13:03:3f:40:25:22:70:
5c:36:3d:df:c0:6b:7a:9a:ad:34:ff:ea:e3:34:ef:73:f7:b7:
a3:92:35:ef:7a:8c:c4:61:2b:59:40:33:6e:75:a1:b8:37:c5:
60:78:64:ec:d1:45:58:af:78:51:a0:bc:19:71:8d:f5:a4:24:
f3:c0:74:98:e6:e9:2b:64:a0:8e:29:7c:cd:0a:db:3d:29:c0:
84:3a:09:30:a4:c2:19:22:00:b4:d4:00:36:0b:2b:ae:59:d5:
70:4d:f3:4a:a1:2f:f1:27:4b:22:3d:24:aa:c2:d8:2a:f0:d9:
4a:cd:dd:26:a6:ab:9c:bb:38:11:65:84:cc:fd:73:3e:d5:0b:
1b:63:23:21:5d:85:ae:91:98:d0:12:60:ee:c1:56:f1:4c:ba:
a6:d7:92:6b:d4:7a:09:08:2e:06:ed:5d:60:73:a9:7f:88:56:
08:22:2d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:19 2026 by rpki-client