Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3136302e302f32302d3230203d3e203137383039.roa
File:                     3231302e3230392e3136302e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier:          FbFeawMOFadDnj9gqyCptPvbX7V9aO3sLL91+26MjIo=
Subject key identifier:   5F:62:07:19:A1:F3:F2:79:4B:00:BD:08:19:A8:73:FC:58:95:57:E9
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       6075BEBCBE2265B0360D65BC9CB3C2603D919B33
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3136302e302f32302d3230203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:10 +0000
ROA not before:           Thu 21 May 2026 15:52:10 +0000
ROA not after:            Thu 20 May 2027 15:57:10 +0000
asID:                     17809
IP address blocks:        210.209.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:75:be:bc:be:22:65:b0:36:0d:65:bc:9c:b3:c2:60:3d:91:9b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:10 2026 GMT
            Not After : May 20 15:57:10 2027 GMT
        Subject: CN=5F620719A1F3F2794B00BD0819A873FC589557E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:9a:cd:38:00:cc:e0:0a:dd:c3:d9:3e:8d:
                    90:9b:40:43:a4:9d:c5:3d:57:25:e3:df:3f:d9:d4:
                    26:44:27:25:a9:9f:ee:d2:df:3b:df:a8:d3:e4:12:
                    a2:01:4f:bc:6e:8d:fc:7b:de:d0:a0:07:99:95:c7:
                    ca:0e:2a:36:a6:de:c8:9b:2c:41:88:1f:05:fd:e6:
                    e7:3d:49:fc:d2:2d:af:5c:e5:c1:01:8a:9c:88:3b:
                    fe:55:8a:c5:1c:65:38:aa:d6:9c:ed:31:e3:ce:a4:
                    0e:98:57:b0:26:f3:16:a4:b4:ce:f2:f9:0e:fa:1f:
                    bf:77:0a:e0:ea:c5:af:bc:95:06:96:ab:ed:6d:02:
                    b0:f8:b8:c7:68:2b:5c:7a:a7:f8:58:1c:d6:62:45:
                    20:1d:99:9d:63:26:33:71:b6:af:25:13:54:32:8e:
                    3a:f2:bf:ba:91:8f:f2:9e:ab:15:bd:42:c8:4e:4a:
                    37:79:be:94:4b:16:1e:a0:20:f4:a7:c2:ab:29:5b:
                    e9:1b:ac:a2:f3:20:6c:f6:d4:a0:1a:7a:46:55:df:
                    dc:84:93:ad:13:6a:0b:70:fd:a1:82:7e:13:75:f4:
                    73:7f:51:60:9e:eb:03:e8:3f:40:ef:70:da:cb:db:
                    d7:21:9d:65:cf:7c:1d:7a:88:1f:f5:51:f2:b7:d3:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:62:07:19:A1:F3:F2:79:4B:00:BD:08:19:A8:73:FC:58:95:57:E9
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3136302e302f32302d3230203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:85:7c:f5:16:2f:16:d8:f1:eb:96:28:59:f9:25:0b:b4:80:
         0c:35:2a:e3:eb:a7:00:40:cd:46:52:88:6f:b8:2a:07:3f:54:
         13:3f:5e:da:da:97:35:2a:04:71:be:b1:e9:02:e5:eb:88:ae:
         b3:aa:ed:6f:3a:24:e2:f1:98:ba:03:2e:ae:14:c9:0e:19:7d:
         65:41:f0:2c:3a:5b:b7:3f:db:48:a2:8d:2c:54:24:a1:62:63:
         97:9f:79:db:f3:09:83:ea:ea:3f:59:9e:09:93:3f:d2:09:2f:
         50:44:ff:e7:e8:69:1d:0e:76:c9:61:4a:c7:37:c7:ed:23:3f:
         58:c6:4a:34:e4:6a:fc:7d:83:c0:1b:b1:67:b2:f5:00:f4:0e:
         4f:35:4b:3d:f8:93:89:e9:68:8c:85:f0:0e:61:21:09:f7:b4:
         c3:9b:9a:38:5b:2d:6a:74:6e:cb:f1:19:32:73:f5:05:04:69:
         75:4a:4e:0a:06:7e:34:e9:9c:ae:05:f3:40:b2:68:1b:19:8e:
         04:97:ee:94:91:5b:f4:5b:fe:45:8f:30:2b:fd:bb:cb:72:df:
         20:5c:80:31:af:97:61:ae:66:c2:cc:c2:ea:78:9e:fd:a6:d2:
         2e:a9:27:02:dd:f6:fb:22:73:76:2f:5b:25:05:24:bd:77:a2:
         78:d9:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:52 2026 by rpki-client