Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa
File:                     3230332e3232322e31362e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier:          QAAh2rtZ92Gv0U3PxQWaExaqnSaIyJLJL/LCujXDueQ=
Subject key identifier:   AE:6D:50:94:B3:A2:9B:1F:15:B0:AE:8B:5D:C4:98:B1:26:E7:1D:BA
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       3409797543402D54FC3CED62F6AF2FCC3D818AE1
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:45 +0000
ROA not before:           Thu 21 May 2026 15:52:45 +0000
ROA not after:            Thu 20 May 2027 15:57:45 +0000
asID:                     17809
IP address blocks:        203.222.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:09:79:75:43:40:2d:54:fc:3c:ed:62:f6:af:2f:cc:3d:81:8a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:45 2026 GMT
            Not After : May 20 15:57:45 2027 GMT
        Subject: CN=AE6D5094B3A29B1F15B0AE8B5DC498B126E71DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:ca:bf:3e:5a:e7:28:b8:f9:cf:98:32:bf:
                    2a:b4:d6:1f:87:bb:10:87:19:23:00:04:e3:8e:fb:
                    7f:75:05:f2:0a:96:e7:70:67:fe:34:10:bc:f1:d6:
                    01:84:83:26:a4:8a:6c:66:07:1d:fc:6e:63:c2:95:
                    fd:1f:e8:d7:c1:97:d0:02:8e:72:cd:1f:e9:4d:c6:
                    04:0f:d9:80:b6:ba:c0:aa:24:53:a5:a2:45:80:58:
                    5c:3a:ca:95:8c:26:0b:99:0e:08:2b:0e:51:80:46:
                    25:69:bb:ef:b8:58:4e:3b:3b:b1:ee:1a:d6:c2:6d:
                    73:b6:77:b5:da:6c:5d:57:39:6a:e7:5f:9e:ee:39:
                    70:d4:e8:c8:08:9b:06:ae:9c:68:8a:a0:ad:be:a3:
                    5d:f1:ff:47:66:43:c9:ec:e0:d5:10:cd:64:36:ba:
                    7b:a7:2b:36:25:4a:dd:28:c3:c4:d1:9b:fe:ea:e9:
                    23:14:1f:cb:da:7b:f7:5f:ae:bc:9b:85:cb:b2:af:
                    be:5d:15:ce:7c:5a:b4:a1:32:41:f3:3b:54:a9:ed:
                    51:e1:25:8c:94:e2:cf:8f:13:c5:1f:7b:b5:c1:2d:
                    a4:a7:28:68:c2:b3:72:e5:52:4d:37:37:72:0c:7a:
                    f2:9b:ee:ed:ab:2d:fe:ac:e3:13:7e:b3:94:48:fd:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6D:50:94:B3:A2:9B:1F:15:B0:AE:8B:5D:C4:98:B1:26:E7:1D:BA
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e31362e302f32312d3231203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:d4:45:50:bb:7c:b9:62:27:c4:92:fa:a9:f5:c9:16:b0:
         01:25:b4:d0:d4:a2:4f:1c:8d:3a:18:eb:f9:6a:0d:0f:0e:1c:
         9b:0a:da:39:79:28:3b:ba:5c:51:65:46:12:e4:5a:ba:5d:3e:
         94:7e:79:c9:d8:2f:18:94:cb:7f:c8:90:a8:2d:04:26:ac:7e:
         28:2f:73:88:4f:48:32:a6:25:ad:c4:13:03:3f:40:25:22:70:
         5c:36:3d:df:c0:6b:7a:9a:ad:34:ff:ea:e3:34:ef:73:f7:b7:
         a3:92:35:ef:7a:8c:c4:61:2b:59:40:33:6e:75:a1:b8:37:c5:
         60:78:64:ec:d1:45:58:af:78:51:a0:bc:19:71:8d:f5:a4:24:
         f3:c0:74:98:e6:e9:2b:64:a0:8e:29:7c:cd:0a:db:3d:29:c0:
         84:3a:09:30:a4:c2:19:22:00:b4:d4:00:36:0b:2b:ae:59:d5:
         70:4d:f3:4a:a1:2f:f1:27:4b:22:3d:24:aa:c2:d8:2a:f0:d9:
         4a:cd:dd:26:a6:ab:9c:bb:38:11:65:84:cc:fd:73:3e:d5:0b:
         1b:63:23:21:5d:85:ae:91:98:d0:12:60:ee:c1:56:f1:4c:ba:
         a6:d7:92:6b:d4:7a:09:08:2e:06:ed:5d:60:73:a9:7f:88:56:
         08:22:2d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:19 2026 by rpki-client