Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31382d3138203d3e203137383039.roa
File:                     3231302e3230392e3139322e302f31382d3138203d3e203137383039.roa (raw, json)
Hash identifier:          oAntwEAVB+3nSpCDlRs4c82XRnqZqCwhm8+tkQwB44E=
Subject key identifier:   04:2B:0B:C4:6E:03:66:53:9E:A6:26:26:14:25:04:B8:AE:86:AE:7D
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       2FCD2D30C64407078275D27007C390C1AF2EAD89
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31382d3138203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:23 +0000
ROA not before:           Thu 21 May 2026 15:52:23 +0000
ROA not after:            Thu 20 May 2027 15:57:23 +0000
asID:                     17809
IP address blocks:        210.209.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:cd:2d:30:c6:44:07:07:82:75:d2:70:07:c3:90:c1:af:2e:ad:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:23 2026 GMT
            Not After : May 20 15:57:23 2027 GMT
        Subject: CN=042B0BC46E0366539EA62626142504B8AE86AE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:ec:14:75:ae:82:19:38:ea:ec:25:02:32:
                    34:9f:52:61:b1:ad:9c:cd:7b:1b:3b:16:39:8f:bf:
                    46:4d:5a:f5:c6:b5:47:63:cd:0b:c3:b2:d1:00:43:
                    ee:c7:bb:ee:02:77:76:6c:89:29:0b:6f:93:24:a1:
                    c3:f7:f2:ba:7c:c3:61:5e:f4:9e:b5:05:7e:df:26:
                    4c:42:73:97:d5:53:79:da:39:b1:d8:41:34:24:b7:
                    ea:5f:2b:a0:78:90:c1:fa:3d:8c:85:7c:f1:9a:67:
                    c9:bb:26:22:87:4f:eb:b0:5f:62:23:55:a7:e2:eb:
                    ae:35:49:67:29:17:6d:65:c2:8a:e1:a6:54:bb:36:
                    0e:cc:a2:ee:30:ee:9a:38:1d:e4:b4:cf:1d:7d:76:
                    61:26:54:da:8e:3e:09:50:54:26:03:b7:d3:5e:2f:
                    4a:cd:34:36:d2:36:7c:8f:68:44:c6:c8:47:0e:53:
                    e4:97:83:d2:39:52:24:03:e5:fb:05:21:f0:e9:4a:
                    37:d6:c3:a5:e2:da:fe:9d:89:bd:88:ba:98:cc:6f:
                    76:d8:a3:40:96:6b:98:7a:45:ea:29:a8:cb:e3:75:
                    77:a2:b3:de:bd:ae:53:72:aa:94:68:6a:d5:9d:84:
                    4c:ab:7c:3d:a7:3b:eb:a3:b2:e8:a5:fa:7f:a2:a5:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:0B:C4:6E:03:66:53:9E:A6:26:26:14:25:04:B8:AE:86:AE:7D
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31382d3138203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:bc:f4:cb:c1:d6:9b:7e:05:0e:de:15:99:8c:87:29:45:30:
         3f:40:66:17:b6:f7:a6:54:b1:41:22:6f:25:c3:98:85:b3:27:
         c6:80:24:5d:b4:07:bc:38:86:07:4b:ad:3d:b4:a2:b4:c3:6d:
         32:af:eb:6c:b6:0a:86:f6:ee:9d:fb:6a:56:90:e3:4e:5a:1a:
         0a:07:4f:63:3d:ba:a0:80:44:f7:5b:af:04:88:ff:67:53:cd:
         9c:20:82:d3:51:85:02:27:b0:b9:1a:28:fd:23:50:07:a2:c2:
         e4:85:01:09:e4:7c:c4:f4:4e:de:ed:89:bf:df:d0:87:41:d8:
         be:7c:11:62:c4:b7:06:0b:80:3d:36:78:65:b7:76:11:cf:e4:
         ad:61:9c:dc:41:d8:70:e0:ce:3a:ea:41:78:40:78:f0:ca:c9:
         73:89:06:d1:df:e7:c5:4c:80:ac:7c:87:5a:3f:f6:52:fe:8e:
         c2:81:eb:87:32:d9:83:b7:15:41:c7:61:73:56:de:c7:60:41:
         9e:78:76:3d:33:67:7d:76:ea:44:9f:f1:c0:78:95:86:c4:73:
         87:61:85:13:34:07:9f:d2:5b:12:10:00:7e:ff:26:52:08:3d:
         d0:23:40:59:80:72:c5:85:89:bf:dd:58:57:97:d8:9e:67:b7:
         af:d9:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:43 2026 by rpki-client