Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31392d3139203d3e203137383039.roa
File:                     3231302e3230392e3132382e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          cAv70fMb9/5wrBvkvGWC4IO3pdDkl5C7nSuCMFkUACI=
Subject key identifier:   43:ED:40:8F:BA:FE:2E:2B:B1:61:BB:88:73:18:BB:7A:52:45:F6:F9
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       12CB3057BF643F32CA1C34F419961E1BA32B8A46
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:46 +0000
ROA not before:           Thu 21 May 2026 15:52:46 +0000
ROA not after:            Thu 20 May 2027 15:57:46 +0000
asID:                     17809
IP address blocks:        210.209.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cb:30:57:bf:64:3f:32:ca:1c:34:f4:19:96:1e:1b:a3:2b:8a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:46 2026 GMT
            Not After : May 20 15:57:46 2027 GMT
        Subject: CN=43ED408FBAFE2E2BB161BB887318BB7A5245F6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:d4:f7:2b:c1:c4:60:20:bd:b4:9c:6c:f7:
                    5b:b1:34:79:52:61:b2:c7:b3:c2:a5:45:7f:68:de:
                    1a:5e:af:29:14:c1:17:7f:40:1f:e4:cf:0b:a7:1c:
                    ce:7b:66:2c:07:a0:67:e6:cb:75:36:aa:c8:d1:ce:
                    a3:a6:f3:d9:eb:d5:a9:00:63:1e:8b:a7:fb:a8:ee:
                    00:a2:fb:a9:4a:52:02:cd:c4:6a:b2:bb:03:b1:c4:
                    a9:be:88:a7:0d:53:04:e9:85:3f:84:c2:2f:d3:88:
                    fe:10:c9:57:9a:77:86:5f:b4:86:78:ee:7a:94:e3:
                    bc:ec:23:0c:5a:df:e4:46:73:cd:05:ec:19:cd:bf:
                    d1:3a:a7:8b:6a:b2:87:dc:15:7d:d3:ab:a4:76:8a:
                    5b:f8:5e:14:5c:47:c2:3c:3b:ae:0d:bc:24:20:09:
                    a4:ed:c1:d9:fc:55:82:e4:1c:4f:4f:8c:a2:0d:b3:
                    7d:86:12:0c:1a:67:14:65:8f:f4:8e:ed:e2:17:44:
                    02:3e:fd:57:44:de:d1:68:fa:3a:f1:22:24:ce:b7:
                    8c:f4:40:c6:0f:fc:99:b9:eb:2c:65:23:7b:21:93:
                    a0:dc:17:a7:40:6b:49:0c:f3:5c:88:ae:6e:d2:fe:
                    9e:26:35:75:77:d6:14:69:62:77:fc:82:52:c0:a3:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:ED:40:8F:BA:FE:2E:2B:B1:61:BB:88:73:18:BB:7A:52:45:F6:F9
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:43:77:37:32:7e:b2:16:ff:46:a0:71:d3:5e:eb:6f:7e:78:
         d7:cc:2f:ad:94:1c:00:a7:5d:03:fd:66:0b:4f:1d:b1:a3:d9:
         e4:a3:7c:ad:d7:c5:91:62:fb:71:92:4b:83:68:72:fc:e3:48:
         1f:c1:86:36:96:d0:38:29:af:4a:2b:79:51:04:fc:21:92:9c:
         69:8f:97:40:04:24:4e:09:74:af:e1:c2:a4:88:76:ce:68:0a:
         89:5a:60:b4:43:89:ae:a9:e1:24:bf:7e:4c:1c:6a:c8:7c:f3:
         c0:a6:f6:6e:16:30:32:32:29:5f:f8:e0:f5:f2:2c:fc:5f:fa:
         62:f1:7c:e1:34:57:23:5f:f3:16:42:c3:21:d4:e4:a2:df:de:
         50:1d:7e:33:b7:a2:02:da:83:20:53:00:4f:57:d0:c2:6a:f6:
         4b:44:ff:d2:32:87:40:71:50:11:3d:a8:9b:46:52:09:a9:da:
         ab:b2:f4:25:4d:4a:76:d9:0e:68:e8:28:de:41:6f:8d:10:e2:
         a6:05:b6:e9:47:8e:b0:91:87:16:97:ff:09:87:91:00:25:0b:
         22:b4:f7:5e:4c:3c:7f:f5:98:0a:f4:d5:0b:0b:32:2a:00:f0:
         e7:f6:26:e9:c3:36:00:bb:11:31:aa:7f:9f:44:d8:e6:23:3c:
         38:fd:65:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:53 2026 by rpki-client