
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f32302d3230203d3e203137383039.roa
File: 3231302e3230392e3132382e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier: gkzTAYJXQF3uG2MQhJMstqqxYrrrOEOorWdXDr2mGR0=
Subject key identifier: 10:98:AD:16:66:09:93:31:D5:AF:65:E1:D5:7B:71:CE:7C:96:AD:5E
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 2DE397189BD28D5A8BF5A1434F0AA6CDD073EE2D
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f32302d3230203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:57 +0000
ROA not before: Thu 21 May 2026 15:52:57 +0000
ROA not after: Thu 20 May 2027 15:57:57 +0000
asID: 17809
IP address blocks: 210.209.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e3:97:18:9b:d2:8d:5a:8b:f5:a1:43:4f:0a:a6:cd:d0:73:ee:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:57 2026 GMT
Not After : May 20 15:57:57 2027 GMT
Subject: CN=1098AD1666099331D5AF65E1D57B71CE7C96AD5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:23:b0:63:c7:b0:f2:5a:b5:20:58:9a:4f:
ba:31:32:a5:cb:8e:98:2d:f5:31:3f:d6:f6:72:1e:
3a:59:0d:4f:59:36:c5:db:2c:80:bd:b7:78:ea:13:
cd:46:57:34:5b:1a:88:be:d0:e8:d5:19:79:8c:5a:
48:b5:09:18:b3:aa:f0:a3:7f:9d:ca:2b:36:4c:cb:
b0:9f:eb:bb:07:4f:b8:82:b6:3e:87:b4:91:e3:5c:
25:ef:cb:84:53:03:1e:e0:21:63:66:c7:f2:5e:37:
d4:04:28:c9:62:c2:67:62:51:5f:06:7a:50:eb:ce:
45:55:26:d6:0a:86:44:82:ae:3d:1e:bb:75:70:ae:
0b:8f:14:f2:73:5b:ff:2c:1d:5d:02:3c:81:d4:44:
3c:6c:ba:87:91:0c:c9:b8:ab:65:2f:bb:f8:c2:33:
04:bd:ec:b2:4f:1b:f8:85:18:43:09:92:0c:f2:67:
03:bd:a3:3a:aa:ef:3b:59:20:f3:5b:86:33:48:7e:
9a:02:da:66:27:76:71:11:fe:18:b6:2e:a2:fe:67:
16:e1:76:73:71:05:c1:b0:6b:af:37:c1:2b:0e:08:
e2:1c:51:9e:fd:8b:70:54:07:dd:b0:dc:26:e6:b2:
38:1c:4a:97:46:41:8c:b2:b8:a9:20:77:5c:15:3b:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:AD:16:66:09:93:31:D5:AF:65:E1:D5:7B:71:CE:7C:96:AD:5E
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f32302d3230203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:8c:3e:d6:f7:f8:4e:59:5b:d5:a0:ea:cf:aa:6b:c5:c1:a6:
f2:ac:11:c7:f7:62:7a:92:1c:7c:d7:14:64:f5:29:4b:18:78:
29:d0:b4:31:4d:97:6f:d6:1f:49:a9:ac:a6:a1:60:e6:50:11:
1c:42:7e:d1:6d:97:ee:31:c9:c9:31:3d:ec:34:de:7b:aa:93:
62:0e:7f:d7:d3:84:75:a4:6e:b5:74:04:94:8e:2a:88:35:9c:
89:6c:97:e0:ab:ff:b7:71:3f:c4:99:1f:a2:05:b4:59:d9:74:
a5:d3:80:fc:9e:e3:2c:03:b4:3a:90:0c:c3:73:18:37:2e:c0:
1a:a6:de:71:fa:98:14:7b:9e:ad:fa:14:3a:87:4b:96:fd:40:
8d:2f:60:cc:77:e2:90:4e:07:73:5a:37:26:22:d0:5b:ff:96:
06:10:ad:a0:e9:f9:e7:6e:bb:25:bc:50:3e:c8:4e:0c:12:a3:
de:69:d0:b0:02:79:30:af:3e:42:60:1d:bb:02:2b:2a:84:cb:
a2:60:aa:50:6a:36:ba:d8:fc:05:4e:3b:fb:51:1a:6f:d2:e7:
bc:6d:d1:84:c4:80:45:8f:81:2a:9d:ea:42:d8:0f:b1:58:0d:
12:c4:21:7f:54:bd:ad:ca:e5:d4:ab:b4:a0:03:06:38:8c:42:
b9:69:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:05:45 2026 by rpki-client