Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3139203d3e203137383039.roa
File:                     3231302e3230392e3132382e302f31372d3139203d3e203137383039.roa (raw, json)
Hash identifier:          I+runle2a0yEs6u4VbeT6l9ylYlHqZS4D60PR1DNz5g=
Subject key identifier:   E4:BA:9C:07:AA:3F:9E:45:7C:BD:B7:F8:06:F0:93:E0:74:E7:67:17
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       339CA44980D2DF81EF95848D5771DA4A088BAAEE
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:07 +0000
ROA not before:           Thu 21 May 2026 15:52:07 +0000
ROA not after:            Thu 20 May 2027 15:57:07 +0000
asID:                     17809
IP address blocks:        210.209.128.0/17 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9c:a4:49:80:d2:df:81:ef:95:84:8d:57:71:da:4a:08:8b:aa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:07 2026 GMT
            Not After : May 20 15:57:07 2027 GMT
        Subject: CN=E4BA9C07AA3F9E457CBDB7F806F093E074E76717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:f6:da:78:59:2e:13:83:b8:6e:2a:6b:4f:
                    4b:3c:6c:5f:91:ed:71:6a:2d:cb:cf:61:64:6d:5a:
                    f8:09:9a:d9:2b:e7:f6:f2:f6:09:01:e0:54:03:33:
                    ce:22:64:6c:d1:95:26:54:6f:a7:9d:b0:9d:b5:4e:
                    ff:35:9d:d4:e1:da:5f:c5:18:33:56:f7:48:33:3e:
                    e2:e0:15:b9:fe:d4:4a:3a:b3:ed:17:bc:c2:9c:39:
                    55:40:a3:54:f9:4c:b7:1d:65:cb:f8:50:9e:b1:d0:
                    13:b9:05:9b:51:92:1c:80:59:1b:63:be:24:63:e2:
                    03:8a:f3:11:ea:b7:b2:27:10:36:28:a8:59:b6:6f:
                    6c:f5:24:0b:c5:c2:15:a6:57:0b:cf:6f:8f:93:a8:
                    eb:99:eb:d2:97:1a:7a:87:3b:ff:42:48:0a:a5:b7:
                    3a:44:69:c9:e5:79:6e:f9:1a:90:f1:c9:8a:c8:c4:
                    97:90:0c:e8:17:85:3c:cb:75:20:0d:ac:9c:8d:7e:
                    85:79:e2:90:62:f9:f9:8c:1b:d5:88:18:a8:bc:56:
                    bf:90:23:b3:bc:0b:85:b2:e2:2a:5d:f1:a6:1c:c7:
                    b5:31:3c:5f:4f:0c:5a:91:32:e6:74:26:77:08:70:
                    b9:3e:5a:e9:58:78:e0:24:65:3d:9b:36:61:8a:a2:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BA:9C:07:AA:3F:9E:45:7C:BD:B7:F8:06:F0:93:E0:74:E7:67:17
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:ff:3d:31:b0:16:af:f5:b8:92:e7:64:a9:66:c2:f2:17:
         64:43:e5:42:67:53:28:88:ce:5f:fd:cc:dd:e6:b9:bf:4d:91:
         d7:de:d4:f4:a5:df:72:9b:58:20:f5:e0:7d:10:45:2a:c3:44:
         26:bf:c7:25:61:c9:81:04:9c:5b:03:22:ed:eb:6a:61:97:85:
         80:9b:c9:e1:14:fa:09:62:25:5c:d7:de:14:0c:26:64:49:a5:
         11:f9:92:d9:18:3c:f2:89:a0:56:30:35:2f:87:28:b2:60:6b:
         e9:42:76:0f:68:25:7a:f6:7c:27:0e:77:30:99:85:aa:15:d7:
         bd:2a:f8:4d:83:4b:01:54:b3:3c:6a:23:2c:8f:9f:10:62:60:
         55:ce:2b:6c:9f:1b:38:03:7c:b5:44:15:94:fc:fe:31:1b:cc:
         38:a7:09:66:ab:53:f1:01:87:f5:c4:d8:fe:2f:7b:9d:fb:f6:
         7c:e6:0b:cf:2e:c5:25:ac:24:8a:4f:61:5a:3f:29:8c:da:49:
         a4:a5:07:0e:f0:0b:93:6c:8c:09:92:0a:2b:fb:72:19:54:65:
         94:8e:34:1c:3d:6b:73:b9:71:a7:bc:24:14:92:d5:af:84:0a:
         e2:af:8c:a0:96:ba:52:ee:c3:c4:a3:86:f9:df:32:ab:49:73:
         1e:df:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:26 2026 by rpki-client