Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2039343136.roa
File:                     3231302e3230392e3132382e302f31372d3234203d3e2039343136.roa (raw, json)
Hash identifier:          Nx7o48lGN3SIMZG9d1agNXu6Yp8lamx32cgbyxUiPkg=
Subject key identifier:   C8:91:0E:51:A9:61:C6:9A:AC:FE:BF:8C:85:96:B9:3F:88:72:F3:F8
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       61F39FEF2791BAD346A005BFDE8F4343A1D9B52B
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2039343136.roa
Signing time:             Thu 21 May 2026 15:57:52 +0000
ROA not before:           Thu 21 May 2026 15:52:52 +0000
ROA not after:            Thu 20 May 2027 15:57:52 +0000
asID:                     9416
IP address blocks:        210.209.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f3:9f:ef:27:91:ba:d3:46:a0:05:bf:de:8f:43:43:a1:d9:b5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:52 2026 GMT
            Not After : May 20 15:57:52 2027 GMT
        Subject: CN=C8910E51A961C69AACFEBF8C8596B93F8872F3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e2:b3:36:5a:9c:8f:fb:dc:dc:5a:4d:e3:34:
                    e1:b6:01:85:6e:36:0b:72:70:b8:5a:a7:d1:e3:88:
                    c0:f6:c3:79:0a:64:a0:ef:50:a1:6d:97:d9:2e:ef:
                    12:63:82:92:82:96:f1:76:99:60:ac:65:35:a9:95:
                    0e:96:6e:ed:5c:39:50:97:35:69:8d:69:56:32:eb:
                    2a:7c:81:a5:04:41:35:09:1b:7a:2b:56:c7:ee:5b:
                    51:5a:02:02:49:2f:d4:d5:19:15:7f:71:fa:7c:73:
                    98:64:ef:41:8f:57:7e:55:ab:5d:81:c7:f6:fb:43:
                    3f:30:e6:c8:98:2d:06:28:4f:54:ce:db:97:f9:e2:
                    72:c7:9d:d0:2e:4d:0b:3f:57:c8:aa:41:7e:23:f1:
                    69:62:92:c9:6c:fc:ee:cb:79:c1:62:be:45:e4:1a:
                    30:fa:94:d2:14:05:d0:1c:61:83:ea:f0:2b:73:11:
                    0e:70:94:9b:f9:c7:b4:9e:8b:41:8f:7a:2d:f4:31:
                    48:2e:86:1d:c2:2e:4b:6b:28:fe:91:4b:29:88:00:
                    97:61:10:09:6e:f7:f3:a6:74:27:af:72:31:e3:86:
                    be:1e:57:bf:22:03:85:04:ff:9a:db:02:38:9c:05:
                    86:66:52:8d:9f:86:0a:ec:f1:aa:8d:47:ad:83:d8:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:91:0E:51:A9:61:C6:9A:AC:FE:BF:8C:85:96:B9:3F:88:72:F3:F8
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:6e:87:29:45:80:92:3e:a3:b0:76:8f:87:fb:e9:10:2e:
         fe:57:ad:fa:f1:7f:28:76:b7:31:b7:78:9b:f1:81:29:84:ef:
         a2:c0:3c:15:26:ba:db:fb:85:e6:fb:3a:f3:99:56:5c:b2:dd:
         d5:4b:49:1e:b3:07:e1:fe:39:86:df:2d:1f:bf:d5:3a:a9:ac:
         54:60:49:63:42:c2:b5:bd:ce:42:57:b9:8f:16:19:ce:47:9f:
         dd:b7:de:47:6a:c9:eb:5b:ae:93:77:1f:f5:bf:11:68:2f:dc:
         d3:ec:ea:62:15:fd:95:06:f7:d5:19:4e:f4:3d:80:9b:21:16:
         68:40:4b:40:e1:83:9e:a6:b8:c9:00:f0:8b:82:66:f5:1b:ab:
         22:e0:39:4b:62:a5:31:27:70:e3:93:a0:4b:93:a2:b5:1e:d3:
         b0:d6:5c:4e:b1:64:15:24:3d:fa:87:29:2b:03:c4:21:40:e9:
         e9:70:f4:7c:f1:62:d0:81:7c:a1:b6:f4:1b:c2:ca:26:18:cd:
         b3:db:88:d2:b2:16:34:0d:18:b0:4b:10:48:65:e5:ae:d6:bd:
         f2:59:4d:7a:5a:62:dc:9c:27:35:09:ec:aa:7c:18:eb:d3:ea:
         3b:bf:d1:ec:26:19:e9:09:2d:29:fa:20:3a:d8:4a:56:7c:e2:
         52:99:ea:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:59 2026 by rpki-client