Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32302d3230203d3e203137383039.roa
File:                     3231302e3230392e3134342e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier:          3FSEu8S+WfxMiO8KTuYQ12xeeJ67uT/1eSchzUpkROo=
Subject key identifier:   63:10:F4:44:F7:C2:38:14:2A:A1:F1:7E:B8:D5:EF:7E:58:9A:EF:7D
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       53639072DC24C75FCF90B55866596AA5EFA73D4C
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32302d3230203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:50 +0000
ROA not before:           Thu 21 May 2026 15:52:50 +0000
ROA not after:            Thu 20 May 2027 15:57:50 +0000
asID:                     17809
IP address blocks:        210.209.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:90:72:dc:24:c7:5f:cf:90:b5:58:66:59:6a:a5:ef:a7:3d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:50 2026 GMT
            Not After : May 20 15:57:50 2027 GMT
        Subject: CN=6310F444F7C238142AA1F17EB8D5EF7E589AEF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:97:99:a4:d8:ba:42:3e:f9:37:e4:6a:1f:
                    a2:68:df:80:d5:9b:7f:79:48:c4:9a:a4:64:b5:1b:
                    3e:e0:62:d2:37:8a:11:10:f6:8e:ff:c4:7f:3a:32:
                    10:23:80:7a:ac:21:5d:1a:8f:05:23:00:73:56:06:
                    8e:07:8e:ca:6f:83:5d:e1:1a:2e:9c:1f:e3:03:6a:
                    06:09:d3:59:55:6e:b8:87:0c:98:e8:50:0e:72:6d:
                    40:08:e7:86:9e:a3:fc:94:09:a0:84:48:3e:9e:cb:
                    75:cd:7a:52:3e:2b:d9:0c:81:fa:33:8e:a0:d5:3e:
                    ab:d8:90:aa:5e:ee:54:f8:83:90:29:95:62:e9:10:
                    3a:8a:b8:ff:d1:55:41:be:2a:5f:ad:05:29:cc:a5:
                    11:6e:29:06:bd:fb:dd:86:3a:39:15:14:2a:c4:48:
                    de:23:7f:18:e4:a7:49:bb:29:49:49:3d:e3:9a:1a:
                    34:6d:42:03:fd:61:07:0f:da:b2:23:6a:00:91:0f:
                    58:5d:4f:18:5b:f8:6b:8f:d5:ab:17:03:94:6e:02:
                    cc:26:34:90:b4:09:c3:58:08:06:c4:8c:3a:5f:2e:
                    b6:55:7b:d0:aa:2c:69:82:45:a1:25:21:7f:29:09:
                    fa:28:c6:c5:b2:4d:47:f6:41:a3:c9:ad:97:e1:74:
                    0a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:F4:44:F7:C2:38:14:2A:A1:F1:7E:B8:D5:EF:7E:58:9A:EF:7D
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32302d3230203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:65:0f:03:ad:b2:d4:f0:30:ee:a3:01:e8:ca:6f:02:b5:80:
         b8:b8:83:27:6b:a8:4f:50:04:74:fe:ba:af:01:a5:63:e5:9a:
         81:7a:10:b7:b5:14:68:43:de:4a:39:b8:67:e6:24:3f:66:1a:
         8b:e1:b1:f2:c4:dd:c5:6d:e4:be:e7:ce:b9:49:17:a1:5e:74:
         56:19:3e:3a:5b:64:1d:97:00:00:19:02:23:e3:e8:71:59:6c:
         72:6e:0a:38:31:4c:96:49:ae:d4:23:c7:77:8c:dc:5b:34:c1:
         97:35:9e:68:e3:1b:fe:d0:1a:e3:b5:3d:10:fd:6e:48:10:31:
         a0:5c:79:46:95:53:ef:5a:31:2d:68:74:ce:2f:d0:55:9f:bb:
         63:82:1e:4c:16:c2:93:f0:f6:7b:79:6a:ef:cd:ef:f3:9e:29:
         5d:fb:b1:6f:21:0e:ca:70:da:6d:c3:90:75:6c:19:41:35:31:
         85:80:9c:9a:de:8c:81:13:c6:e2:8e:2b:00:50:2b:11:e5:07:
         74:02:a5:45:42:08:6d:6b:bb:88:83:83:6c:87:fa:e9:11:73:
         4f:2e:7b:d3:2d:2d:3b:84:ff:c3:cc:91:40:0d:a6:75:4d:c0:
         4e:c4:eb:3f:70:30:56:b3:68:fc:fe:8c:12:da:b7:ee:10:8a:
         3c:d0:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:40 2026 by rpki-client