Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e382e302f32312d3231203d3e203137383039.roa
File:                     3230332e3232322e382e302f32312d3231203d3e203137383039.roa (raw, json)
Hash identifier:          hb+8yE2CK6xo9Q5DuZoeZz7CqBG1JSDFG36O5cKRwYo=
Subject key identifier:   1A:E5:2B:B7:46:7A:29:FE:C5:89:A2:B9:5B:FE:44:74:A7:A7:35:4F
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       6A01DB7235BEDF2B8DB9D3AADCA3E3A5C6BF376E
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e382e302f32312d3231203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:26 +0000
ROA not before:           Thu 21 May 2026 15:52:26 +0000
ROA not after:            Thu 20 May 2027 15:57:26 +0000
asID:                     17809
IP address blocks:        203.222.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:01:db:72:35:be:df:2b:8d:b9:d3:aa:dc:a3:e3:a5:c6:bf:37:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:26 2026 GMT
            Not After : May 20 15:57:26 2027 GMT
        Subject: CN=1AE52BB7467A29FEC589A2B95BFE4474A7A7354F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:98:21:19:58:fa:b6:65:05:12:70:04:14:8f:
                    1b:c2:0e:10:8b:86:db:75:53:e9:07:d6:56:9c:35:
                    eb:69:5b:51:18:24:fb:5a:21:8e:5f:2b:be:03:ae:
                    be:c5:78:1f:0e:7d:7c:c1:45:3f:39:be:fb:3b:a1:
                    fb:ba:06:62:40:1d:9c:60:ac:3c:40:b2:b6:db:6e:
                    6b:4a:3b:c2:1c:25:ca:ec:74:c9:af:0b:ae:20:bc:
                    09:4c:8d:06:ac:b8:c5:2e:2c:75:cc:8e:17:97:30:
                    b3:66:71:ee:b4:23:a6:d1:80:a1:34:37:ce:33:59:
                    e7:e7:5e:80:2e:80:8c:fe:0c:c0:53:43:5b:14:ca:
                    78:13:e5:fa:23:c7:ce:79:e8:eb:40:09:45:f1:0d:
                    aa:df:db:68:2e:f8:38:88:19:8f:33:52:80:db:1c:
                    22:04:06:0c:cd:00:e9:69:47:5d:46:97:c1:c5:ba:
                    1e:47:91:fc:8f:f3:b7:e3:03:b4:c6:c8:b7:99:9e:
                    7a:d5:b1:7d:8c:db:0f:d2:5b:d1:ce:b7:37:42:61:
                    2e:6f:42:12:5a:72:61:79:c0:c3:a5:de:68:ff:69:
                    0a:75:0b:fc:e8:0e:a9:8a:6a:3e:46:4b:3e:38:fc:
                    4e:ae:6f:10:10:7f:9b:50:0b:92:53:d6:1b:ec:99:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E5:2B:B7:46:7A:29:FE:C5:89:A2:B9:5B:FE:44:74:A7:A7:35:4F
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e382e302f32312d3231203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:ad:ca:f1:f0:2f:67:cc:d8:17:e0:0e:ce:ca:1a:bd:ec:84:
         87:68:21:e1:c5:66:11:f1:b5:31:94:33:6f:96:27:76:ef:8a:
         a8:73:91:8f:28:b1:c7:cd:ed:7f:eb:9e:65:1f:7e:a0:cc:0a:
         5c:09:02:14:fb:3b:71:3a:cc:21:fe:64:29:6d:02:c2:92:05:
         5e:f5:91:5c:59:e8:be:e0:c3:e8:85:cd:2a:ac:9a:a2:82:3c:
         b1:e5:9d:76:75:71:73:59:5f:51:fe:5f:55:e9:85:82:be:89:
         2d:db:58:72:18:9d:81:2c:a2:ed:f9:63:cc:9a:ff:de:5d:4f:
         2c:04:df:94:ae:b4:f9:a0:69:43:48:bc:dc:de:3f:2d:0f:80:
         77:0b:09:07:94:8f:70:0b:7e:7b:65:da:ba:26:ae:13:97:19:
         53:d1:69:ad:da:46:70:fb:39:35:70:c0:8e:71:8d:9a:09:40:
         9e:67:8c:ec:21:17:89:16:cb:fa:c8:e2:41:2a:6f:bc:7d:29:
         38:b4:ae:03:a2:1b:71:21:26:e6:be:71:08:c8:7a:f0:44:95:
         69:84:26:21:bd:5f:2f:78:6f:95:65:7a:38:d5:b3:96:62:b2:
         c5:2a:bc:47:0f:8a:ef:a0:2d:ca:59:5c:43:29:46:03:47:8a:
         11:96:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:50 2026 by rpki-client