Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e342e302f32322d3232203d3e203137383039.roa
File:                     3230332e3232322e342e302f32322d3232203d3e203137383039.roa (raw, json)
Hash identifier:          SOmBaM1cOL/0Z6kCUYeuiDOjtHOIf/j8e6dmfQAJEjs=
Subject key identifier:   A7:AC:FB:16:97:C0:98:9A:23:41:EC:02:7E:95:34:7D:32:96:74:BA
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       77A0D32056F98425BB87DF2D6769B3DCF31329B3
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e342e302f32322d3232203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:49 +0000
ROA not before:           Thu 21 May 2026 15:52:49 +0000
ROA not after:            Thu 20 May 2027 15:57:49 +0000
asID:                     17809
IP address blocks:        203.222.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a0:d3:20:56:f9:84:25:bb:87:df:2d:67:69:b3:dc:f3:13:29:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:49 2026 GMT
            Not After : May 20 15:57:49 2027 GMT
        Subject: CN=A7ACFB1697C0989A2341EC027E95347D329674BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:81:fa:17:bb:2e:95:40:da:78:53:b7:4b:c9:
                    11:42:c2:1c:51:40:b0:9f:77:2d:c1:0e:4c:f2:34:
                    e5:79:74:1d:02:58:2d:f3:11:2e:f8:5a:83:78:07:
                    12:13:6e:91:02:b6:38:59:d1:42:8d:c8:06:90:e8:
                    68:b6:3a:ee:ab:b6:5f:87:e7:8b:bb:49:cb:74:87:
                    e5:a6:37:2e:2c:9e:ad:02:98:78:80:ce:50:86:82:
                    f7:08:5b:c4:6e:a1:40:f3:7a:1e:d1:56:7b:47:95:
                    bc:c8:ce:d3:0b:11:07:ef:37:7b:38:e6:eb:7c:6c:
                    5a:da:dd:2d:2e:3d:8e:18:8f:fe:45:25:3f:73:c1:
                    63:df:f8:80:03:02:e0:2c:f2:32:4a:d8:17:b1:1b:
                    18:e2:3c:7b:cb:a8:6b:56:34:d2:5f:d2:43:86:cd:
                    c6:c2:02:9d:db:50:00:61:4b:ca:a6:98:4d:3a:f6:
                    cd:7d:17:8f:a9:08:b3:11:f4:96:5d:fb:b8:05:a8:
                    c4:8f:eb:a4:ac:64:49:87:95:03:43:e1:e7:32:54:
                    51:bc:2a:41:19:fd:f6:16:85:49:77:cc:06:20:dc:
                    1f:39:1b:2f:06:fe:1f:ca:2c:e3:07:30:28:39:6a:
                    87:79:65:2b:5c:e1:e7:af:30:05:10:38:4a:8d:4a:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:FB:16:97:C0:98:9A:23:41:EC:02:7E:95:34:7D:32:96:74:BA
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e342e302f32322d3232203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:91:ff:14:14:f3:0b:6b:27:98:c5:1e:68:66:fe:98:98:ec:
         42:f9:af:90:16:47:fc:07:03:f7:28:ff:b0:89:d3:aa:43:8d:
         37:de:f9:4c:f4:f7:ea:16:8b:6e:39:7a:6e:de:0b:d6:fd:e6:
         1a:3c:af:df:c4:b1:2c:0f:ac:c4:8d:e5:5e:b9:23:24:ca:40:
         f6:5d:4f:fc:05:44:5c:27:44:bf:75:92:3d:5a:e2:f9:b2:e8:
         45:45:d7:82:1e:53:d2:85:66:da:68:47:d2:6e:16:17:e1:a5:
         6e:e5:b5:75:e5:b1:2c:6e:63:55:f4:c4:d3:64:b0:e8:8d:a7:
         e4:15:f9:4e:d2:47:05:a3:0a:6c:52:4f:03:38:83:21:dc:a4:
         a4:ba:3c:4f:07:43:b1:15:a3:29:da:17:3f:47:b8:98:ec:1e:
         a3:0b:23:00:e9:ed:db:4b:68:95:f5:de:85:3c:75:0e:41:85:
         51:3a:2d:db:dd:13:50:08:8e:78:6d:4e:9e:4d:80:71:0e:15:
         e7:61:d6:f7:c5:69:b8:52:26:9d:16:3b:f4:93:93:99:86:62:
         02:9f:43:a0:75:8e:f2:ff:c6:bd:08:9f:84:61:5f:02:0d:49:
         eb:ee:9d:bf:2b:de:dd:9e:34:18:7f:7b:73:f3:66:fa:cf:7b:
         44:d7:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:55 2026 by rpki-client