
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32342d3234203d3e203137383039.roa
File: 3231302e3230392e3134342e302f32342d3234203d3e203137383039.roa (raw, json)
Hash identifier: WfhNbJbXCfO52+Th/NDBF/vzgcx7z+1LFfktCiZ+l2A=
Subject key identifier: 4D:36:6A:58:79:BE:63:A1:8B:34:4F:D3:03:89:4F:1D:33:A7:C4:1E
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 640FE0625F20F0437D3855A497EFF0B8B637DC2C
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32342d3234203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:12 +0000
ROA not before: Thu 21 May 2026 15:52:12 +0000
ROA not after: Thu 20 May 2027 15:57:12 +0000
asID: 17809
IP address blocks: 210.209.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0f:e0:62:5f:20:f0:43:7d:38:55:a4:97:ef:f0:b8:b6:37:dc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:12 2026 GMT
Not After : May 20 15:57:12 2027 GMT
Subject: CN=4D366A5879BE63A18B344FD303894F1D33A7C41E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:c9:b5:34:1a:1e:d9:dc:2c:f3:36:b6:11:
e8:12:10:2c:54:39:c7:d0:ca:f2:e4:75:33:d7:53:
fd:a7:75:82:a0:ce:10:fc:76:b4:09:fa:96:02:a6:
c4:0b:bb:63:af:d8:b6:47:47:c7:df:39:de:36:15:
d9:7e:10:27:cd:b5:0f:71:34:47:61:d7:fe:d2:1a:
15:5c:b0:6c:88:38:da:14:de:dc:bf:d0:a4:10:79:
0f:f2:cf:b2:c9:f8:f9:43:d9:b8:21:59:7b:7b:45:
8b:f5:31:89:02:a4:c9:1e:05:48:d2:b6:a3:77:17:
22:63:28:e8:c2:bb:20:b9:c8:d7:ef:57:c1:fb:cc:
82:60:aa:5d:31:0e:bc:15:52:1b:fa:5c:de:aa:52:
b7:d6:5e:0f:4c:11:82:f8:8c:e3:48:f6:8a:cd:ae:
bf:d2:f8:d4:f2:74:0f:cd:1d:52:4a:44:4e:4d:fe:
15:c9:18:c1:30:1d:e8:1e:2e:17:17:50:a3:af:0a:
d9:a7:27:55:69:ae:0e:a8:73:81:31:2a:12:26:27:
d0:09:b3:c2:b8:0c:c5:d6:eb:ca:62:39:d4:c1:ac:
b6:06:2e:53:15:ae:33:b7:39:50:77:d1:f5:05:01:
bd:38:25:b5:8c:f4:ad:d9:a3:bd:53:d6:93:17:bd:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:6A:58:79:BE:63:A1:8B:34:4F:D3:03:89:4F:1D:33:A7:C4:1E
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3134342e302f32342d3234203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.144.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ca:57:60:f9:05:52:82:a0:5f:c7:48:90:f4:36:77:b2:6b:
e3:f3:6d:b6:16:02:b4:75:19:2b:63:e4:b0:f7:e9:a0:28:5a:
4f:4e:dd:c5:3e:05:90:33:17:4b:1c:f5:74:07:c0:9b:12:7d:
17:6d:20:57:64:a4:6b:3d:80:f7:c6:1f:18:7a:a2:f2:cb:7a:
ad:2a:e6:0e:c1:c7:aa:2f:56:7a:7f:d8:31:ae:1f:86:ef:7b:
f2:9a:c2:db:c2:0a:44:05:8c:94:9e:9c:1e:66:40:84:2b:76:
30:70:99:aa:e4:6b:41:14:40:6e:22:ed:68:e0:45:22:a1:96:
27:36:37:e1:01:f4:ad:56:a5:d7:b4:78:7a:69:9c:6e:ef:34:
41:a7:62:48:55:6b:e3:51:9a:ff:bb:dc:02:4e:4e:68:38:92:
64:e1:8c:c6:ce:f5:b7:af:ad:27:9a:36:f6:d5:79:ed:98:67:
ed:55:7e:17:ab:68:dd:53:d9:a1:90:78:29:9e:dd:e1:f7:74:
f0:b6:9d:ae:cd:bb:ff:5f:b5:12:dd:de:f3:bb:96:ab:86:99:
8a:85:c5:7d:d4:4e:9b:36:89:1a:6a:53:29:03:80:66:32:7a:
6d:54:ff:6d:36:7c:65:50:f3:ce:27:57:0a:5a:ab:77:c8:fe:
4f:83:60:38
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZA/gYl8g8EN9OFWkl+/wuLY33CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyMTJaFw0yNzA1MjAxNTU3MTJaMDMxMTAvBgNV
BAMTKDREMzY2QTU4NzlCRTYzQTE4QjM0NEZEMzAzODk0RjFEMzNBN0M0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwRsm1NBoe2dws8za2EegSECxU
OcfQyvLkdTPXU/2ndYKgzhD8drQJ+pYCpsQLu2Ov2LZHR8ffOd42Fdl+ECfNtQ9x
NEdh1/7SGhVcsGyIONoU3ty/0KQQeQ/yz7LJ+PlD2bghWXt7RYv1MYkCpMkeBUjS
tqN3FyJjKOjCuyC5yNfvV8H7zIJgql0xDrwVUhv6XN6qUrfWXg9MEYL4jONI9orN
rr/S+NTydA/NHVJKRE5N/hXJGMEwHegeLhcXUKOvCtmnJ1Vprg6oc4ExKhImJ9AJ
s8K4DMXW68piOdTBrLYGLlMVrjO3OVB30fUFAb04JbWM9K3Zo71T1pMXvX3hAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUTTZqWHm+Y6GLNE/TA4lPHTOnxB4wHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMxMzAyZTMy
MzAzOTJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM4MzAzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANLRkDANBgkqhkiG9w0BAQsFAAOCAQEAVcpXYPkFUoKgX8dIkPQ2
d7Jr4/NtthYCtHUZK2PksPfpoChaT07dxT4FkDMXSxz1dAfAmxJ9F20gV2Skaz2A
98YfGHqi8st6rSrmDsHHqi9Wen/YMa4fhu978prC28IKRAWMlJ6cHmZAhCt2MHCZ
quRrQRRAbiLtaOBFIqGWJzY34QH0rVal17R4emmcbu80QadiSFVr41Ga/7vcAk5O
aDiSZOGMxs71t6+tJ5o29tV57Zhn7VV+F6to3VPZoZB4KZ7d4fd08Ladrs27/1+1
Et3e87uWq4aZioXFfdROmzaJGmpTKQOAZjJ6bVT/bTZ8ZVDzzidXClqrd8j+T4Ng
OA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:23 2026 by rpki-client