
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3137362e302f32302d3230203d3e203137383039.roa
File: 3231302e3230392e3137362e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier: nscyyMk+lFz3nHYbABIDoHq83UIvCw8wVRUFYWLVtsw=
Subject key identifier: 21:E2:3D:30:6C:21:0C:96:CD:25:DB:98:4E:99:9E:77:17:1A:32:E0
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 37EE1386CD9B7D9185A9E41A75C57BFF834C28B5
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3137362e302f32302d3230203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:41 +0000
ROA not before: Thu 21 May 2026 15:52:41 +0000
ROA not after: Thu 20 May 2027 15:57:41 +0000
asID: 17809
IP address blocks: 210.209.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ee:13:86:cd:9b:7d:91:85:a9:e4:1a:75:c5:7b:ff:83:4c:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:41 2026 GMT
Not After : May 20 15:57:41 2027 GMT
Subject: CN=21E23D306C210C96CD25DB984E999E77171A32E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:e8:cc:6b:7e:c0:01:24:55:d7:55:fe:b4:
27:f8:39:83:f6:7f:57:e3:01:e2:41:ee:52:1c:8c:
34:2f:a3:7b:90:4e:cf:fd:5a:5e:45:a1:bf:de:b2:
56:48:d7:17:02:57:50:16:e9:35:16:64:87:91:7e:
25:b3:40:00:1a:97:9c:40:6a:c9:6f:80:3f:0e:6d:
66:f4:a5:94:e9:fc:e7:09:78:cc:75:df:8e:03:4e:
e1:af:93:a6:d6:11:52:96:14:08:fe:b7:e3:7e:1c:
92:c6:28:68:73:c7:28:25:04:a2:78:fb:df:84:2d:
b8:45:27:6b:ce:1b:6c:62:2a:1f:62:25:14:79:04:
dd:d6:c1:f1:dd:fc:e0:51:49:59:75:5d:8b:76:ab:
29:c5:15:12:fd:7a:57:b2:0e:5a:2a:77:86:60:72:
ca:6f:8c:cf:8b:de:54:ca:6c:35:b3:e0:19:7f:48:
33:bd:bd:af:59:e2:cd:78:35:01:b2:7b:40:8e:b0:
85:69:c9:24:3b:86:9a:3f:98:46:bb:03:76:99:30:
ff:04:b7:63:98:39:ca:63:93:39:f7:d5:27:8e:b7:
31:17:92:93:c8:08:d5:08:57:34:e2:71:50:ac:fd:
37:86:51:66:e1:41:d5:88:0a:fd:6d:bf:fa:41:8e:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:3D:30:6C:21:0C:96:CD:25:DB:98:4E:99:9E:77:17:1A:32:E0
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3137362e302f32302d3230203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:56:02:a9:f0:65:aa:7f:b4:ad:8b:36:bc:00:44:6b:34:52:
49:e5:34:d0:74:bb:e9:ae:dd:07:f2:d5:85:e8:67:24:f1:be:
44:98:57:28:bc:89:df:98:b7:97:eb:a9:e9:a3:2d:aa:42:96:
d5:17:64:ac:2d:7a:36:39:9b:52:1b:04:13:fb:a8:e0:f8:46:
db:30:8e:5e:03:8f:47:ab:ed:26:d2:79:9a:dc:bb:63:bd:ca:
e9:14:3b:8c:32:1f:85:26:2c:16:e5:7e:19:69:ca:45:f6:d3:
6b:4b:f3:98:c2:d8:36:f4:4f:ef:c3:83:45:e3:88:bc:15:a9:
1a:94:56:37:2e:0c:67:d6:8a:01:8e:0b:0d:99:aa:18:8f:ac:
37:ca:fa:83:ee:c0:8f:85:23:90:3b:cb:f4:b2:20:6b:17:ff:
0c:8c:aa:f0:77:dc:7b:0e:27:cd:65:1d:71:08:38:e1:5c:36:
fb:27:e8:5a:40:a0:dc:e0:0a:81:c5:08:90:33:53:20:05:0b:
26:57:64:70:a7:a5:2a:5e:a8:42:6b:ea:7d:d8:db:71:82:56:
b1:3d:5c:0c:05:91:b7:54:39:a0:85:d6:94:c1:73:d5:6f:66:
3a:9b:cc:7e:00:ed:0c:f9:df:60:b6:13:4f:1a:ec:03:79:04:
dd:2a:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:13 2026 by rpki-client