
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32342e302f32312d3231203d3e203137383039.roa
File: 3230332e3232322e32342e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier: IeBiTiK1Ha2vUNP0gfTAf/hHgNYE0EQsIclKYWfv/7k=
Subject key identifier: 12:9B:68:98:06:2A:90:F8:F2:BB:12:F5:5D:0E:DF:98:FF:31:CE:1A
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 2A627BC20742A578EF544C4CA024A15DEE75B4BB
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32342e302f32312d3231203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:05 +0000
ROA not before: Thu 21 May 2026 15:52:05 +0000
ROA not after: Thu 20 May 2027 15:57:05 +0000
asID: 17809
IP address blocks: 203.222.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:62:7b:c2:07:42:a5:78:ef:54:4c:4c:a0:24:a1:5d:ee:75:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:05 2026 GMT
Not After : May 20 15:57:05 2027 GMT
Subject: CN=129B6898062A90F8F2BB12F55D0EDF98FF31CE1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:00:bd:e1:0e:4b:43:98:d6:8f:fc:d6:5f:
cf:66:10:5a:06:ff:62:94:71:00:72:2e:7b:d9:75:
72:60:27:d9:0e:dc:92:08:b6:f2:ba:44:2d:b8:7c:
c2:b9:3c:22:ad:96:3d:58:20:44:d5:1f:44:02:c7:
8e:6c:94:66:c7:d8:5a:0a:96:a6:7c:12:5d:a9:1d:
78:22:a5:fb:d5:13:60:03:6c:21:4c:4e:a1:72:d5:
e3:bb:7f:39:8a:50:bf:6a:fd:8b:32:f8:67:43:59:
17:de:dc:95:80:cd:44:55:9c:51:10:d8:a2:c3:ad:
ae:e6:a5:0f:bf:58:e3:d0:10:a4:7d:d8:35:d4:70:
85:ab:47:f2:95:ba:80:e1:2e:d6:ec:58:ff:a1:f7:
0e:d7:67:51:f0:fd:75:f0:4a:e2:61:41:1e:a3:38:
5d:7e:cd:eb:8c:c7:89:25:31:1a:f9:ba:a2:13:38:
a5:df:1c:fe:b6:b5:b9:75:0d:21:1e:80:14:13:a3:
35:6b:51:8b:ef:14:1a:e2:b0:41:51:73:d3:44:b3:
0c:3e:77:41:1e:e2:aa:67:aa:4c:7b:98:b0:ec:9d:
66:77:6d:ed:14:51:98:64:e2:70:7b:07:f1:71:3e:
db:4a:e8:1a:80:2e:05:86:a0:69:d0:be:27:0e:c0:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:68:98:06:2A:90:F8:F2:BB:12:F5:5D:0E:DF:98:FF:31:CE:1A
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32342e302f32312d3231203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.222.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:ad:a2:f7:8d:28:e1:df:86:99:0b:2b:26:94:2b:97:3d:1c:
03:4f:fb:68:ab:15:dc:d4:c4:49:97:62:ef:67:e1:f1:a5:d2:
19:9d:86:83:3a:c7:3a:05:fa:fb:6c:fe:e5:bb:cd:d2:44:92:
fa:cf:5f:33:fd:59:8d:60:78:d2:c3:88:0d:84:83:75:d1:1a:
cf:de:2d:98:ff:85:8c:c1:80:51:5a:c5:9a:f7:a0:8a:27:f7:
19:41:45:eb:b2:2f:67:3c:01:ea:76:0b:55:96:3c:5d:b8:90:
84:d1:f1:d0:a2:4e:68:11:c4:29:91:fb:cb:11:82:81:93:9f:
8f:36:ba:2e:7d:d9:f2:4b:29:68:cc:a8:6f:e2:f6:b4:ab:d1:
f9:d7:ce:08:db:33:27:8a:fd:8a:f7:a1:db:90:14:c3:25:db:
78:7d:8c:6e:36:28:88:c2:18:ce:fd:47:27:d1:56:c8:99:74:
66:d4:4a:02:7d:ce:29:b9:20:bd:79:15:75:cb:16:19:ae:02:
b2:f7:8a:2d:d9:27:e4:62:05:e1:3b:ef:50:d6:14:82:55:4d:
29:6d:03:a3:79:d9:c4:e3:aa:04:39:99:ea:77:c8:08:6b:9f:
ce:4d:d9:f7:0a:c9:15:f4:24:03:0a:e8:53:95:d2:83:b6:ed:
a2:6e:28:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:18 2026 by rpki-client