Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31382d3138203d3e203137383039.roa
File:                     3231302e3230392e3132382e302f31382d3138203d3e203137383039.roa (raw, json)
Hash identifier:          2xBGKX3ypthaa264rQCpobxADp5AlX5lXlz8E/r8zMM=
Subject key identifier:   FD:70:EA:A1:8A:48:A3:79:19:B7:64:60:EE:5A:7E:66:BE:C0:D7:4F
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       25B34E9FC61B75D82AB23B6CE921A244AFDAA0CE
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31382d3138203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:18 +0000
ROA not before:           Thu 21 May 2026 15:52:18 +0000
ROA not after:            Thu 20 May 2027 15:57:18 +0000
asID:                     17809
IP address blocks:        210.209.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b3:4e:9f:c6:1b:75:d8:2a:b2:3b:6c:e9:21:a2:44:af:da:a0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:18 2026 GMT
            Not After : May 20 15:57:18 2027 GMT
        Subject: CN=FD70EAA18A48A37919B76460EE5A7E66BEC0D74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:72:55:cf:f1:a3:5f:f3:a4:22:46:d3:51:
                    f1:af:27:34:e6:3f:b0:11:2d:e4:43:ce:20:a0:35:
                    23:39:86:50:9d:41:ff:37:f4:2f:7e:1d:f2:6e:9d:
                    3f:0b:88:41:70:60:42:97:19:4a:38:f4:9f:c4:18:
                    b0:4f:b1:6a:94:93:f7:f7:74:be:1a:05:10:8e:48:
                    4f:bf:31:2c:a6:cf:ec:85:e6:fe:fe:6c:9b:85:72:
                    fe:28:76:24:49:0d:e4:44:ed:a5:6d:43:04:79:c3:
                    c2:1a:7f:85:de:d2:41:be:e5:25:69:60:80:a0:0c:
                    84:83:05:b3:8b:2a:04:04:ed:c2:20:19:de:85:2b:
                    92:35:9f:06:8b:6b:fc:e3:08:7e:04:35:9e:c2:4d:
                    4a:89:2b:e8:a7:b6:23:12:ae:24:3e:c9:b8:9a:e8:
                    64:ee:46:ea:89:d7:9e:8f:6c:16:f0:4d:bc:90:f9:
                    62:31:3d:a7:3d:47:83:db:e1:fb:48:1c:29:fb:12:
                    60:7e:76:85:09:ea:48:28:8d:89:b4:b9:ec:de:1e:
                    74:27:a4:1d:a5:5d:8e:73:31:6f:47:e7:84:c5:1a:
                    6d:b6:55:e7:ef:df:88:c5:94:74:77:7f:09:73:59:
                    62:2d:8d:bd:c6:6e:72:8d:05:31:63:12:88:12:a6:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:70:EA:A1:8A:48:A3:79:19:B7:64:60:EE:5A:7E:66:BE:C0:D7:4F
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31382d3138203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:55:fa:ba:20:c4:93:3a:26:13:38:f9:90:40:d2:d2:c5:
         46:d3:a9:f0:37:ed:f6:6a:b7:0b:f6:73:11:18:52:49:29:f8:
         46:fc:59:f5:1e:55:11:dc:be:94:63:b8:41:72:8a:4b:b5:37:
         d7:b9:ec:23:bb:6c:37:9c:3f:31:dc:75:c8:64:c8:0d:f8:e3:
         1b:80:42:5d:49:ce:9a:c6:aa:09:1c:c1:8f:0f:61:af:aa:a9:
         7e:04:11:48:a4:b2:f3:2b:f2:ca:3e:f2:6b:90:e7:ac:ef:1b:
         f8:e1:6d:ed:46:bf:77:4b:df:34:af:15:64:d2:70:7a:35:1e:
         a7:5f:eb:ee:0c:f8:c9:3c:22:fd:b9:64:97:ba:23:f8:e7:6a:
         3a:74:df:dc:ba:68:e3:80:59:25:aa:bc:38:e4:77:e4:58:9a:
         26:4a:bb:c5:e7:15:2a:9f:ae:b6:a6:db:6f:2e:b8:58:8e:d3:
         17:bc:5a:70:9b:21:a6:d6:15:60:41:00:5a:ed:f7:42:dc:29:
         75:37:82:2d:92:ee:3a:31:8d:bd:0e:ad:bd:34:23:5f:eb:eb:
         1c:a9:9d:b5:d8:33:5c:40:49:55:8f:db:ea:13:bc:94:83:02:
         06:ca:50:6e:b8:2e:c4:03:56:91:e1:e3:5c:99:a6:e4:ad:1b:
         d6:4b:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:59 2026 by rpki-client