
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e203137383039.roa
File: 3231302e3230392e3132382e302f31372d3234203d3e203137383039.roa (raw, json)
Hash identifier: 6QAJ3USD3dZpzLZSRB/z300DjX5f9oVP1fEX/THc9Vo=
Subject key identifier: F6:68:AE:7B:F0:33:0E:57:95:CF:6F:33:4C:A6:9F:2B:05:9B:4B:AD
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 07ED5708D61E3E00EE10F5C1281368C8F3F943DE
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:34 +0000
ROA not before: Thu 21 May 2026 15:52:34 +0000
ROA not after: Thu 20 May 2027 15:57:34 +0000
asID: 17809
IP address blocks: 210.209.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ed:57:08:d6:1e:3e:00:ee:10:f5:c1:28:13:68:c8:f3:f9:43:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:34 2026 GMT
Not After : May 20 15:57:34 2027 GMT
Subject: CN=F668AE7BF0330E5795CF6F334CA69F2B059B4BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:08:7f:e2:a0:3f:3b:56:92:99:d8:80:6d:
34:de:22:d1:90:cf:2b:72:72:58:06:19:78:3d:64:
a7:4c:96:ac:90:e2:94:0b:37:fd:f6:fa:02:4d:4f:
7e:71:4c:1a:da:7a:13:02:57:e1:f9:c0:21:17:9b:
7f:e7:92:4a:db:9c:24:c0:60:1a:36:4e:8d:13:95:
5e:d8:d2:0e:a4:1a:9d:f6:fb:44:30:7c:50:25:cc:
0e:43:0e:63:7d:cf:0e:4c:be:57:24:45:65:5d:36:
62:62:3f:cc:c6:e9:10:61:1c:0e:b1:86:a2:ec:1e:
29:4d:90:c2:65:c6:03:a9:7e:63:be:a1:7e:b1:28:
b0:f6:01:6e:02:a7:80:61:ac:94:ad:5d:a2:ea:13:
ef:a3:a0:10:26:0f:44:b6:e5:3a:95:ff:d9:77:82:
83:30:4c:65:58:4b:bc:4f:ac:d1:7f:2c:27:2a:31:
8a:f4:6c:3f:90:71:d6:f4:5e:3c:f0:e1:f9:1d:9f:
fb:5f:e3:ac:b0:1c:c7:58:88:c9:f4:ad:87:d2:be:
8f:54:58:47:04:9d:e8:ff:eb:94:74:f3:1c:5b:f3:
e4:8a:0d:26:39:2a:92:36:b2:24:15:cf:e0:20:cc:
0b:08:06:27:30:d7:f0:fe:1a:dc:68:e4:2b:49:04:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:AE:7B:F0:33:0E:57:95:CF:6F:33:4C:A6:9F:2B:05:9B:4B:AD
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7b:bd:17:06:be:d9:27:bb:2c:75:92:b0:68:18:50:7e:80:d0:
0b:36:fb:1e:98:e7:a1:8c:0a:1b:e3:68:58:55:30:53:1b:e3:
1c:52:7e:76:18:99:e5:ea:ae:e4:d9:e0:e0:28:36:54:8c:5f:
af:95:5a:e9:bf:0a:2d:61:a0:54:ca:51:d7:41:50:40:cc:a2:
84:40:53:ac:17:ed:c0:dd:f7:55:9f:29:67:4b:b7:d4:f5:aa:
61:06:db:fd:64:ae:6d:cf:1b:57:12:14:7a:47:73:2a:71:ad:
6b:08:61:25:8a:f2:f1:2a:7a:b1:00:4d:a3:76:60:f0:b1:32:
94:ba:83:33:5e:09:9c:95:da:ed:c0:58:5c:69:b6:68:61:66:
39:e8:0e:53:06:a9:b6:6a:e8:f6:00:6b:2f:eb:92:87:d6:63:
af:f3:4d:e9:12:53:9b:31:a5:14:dd:49:0d:10:f8:da:25:f2:
db:8b:e6:26:ad:53:9d:8b:c4:c3:e3:24:ca:a8:2a:85:f6:ca:
85:48:82:b4:8e:6a:76:8e:07:9e:4c:eb:ec:03:0d:dc:21:7c:
44:e8:ac:54:96:fc:50:fa:f6:0c:dd:21:f7:39:84:7d:49:a0:
4a:f2:6d:00:5e:36:93:9f:f9:7c:3d:47:c1:85:15:5f:ca:b4:
50:5b:8f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:31 2026 by rpki-client