Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31392d3139203d3e203137383039.roa
File:                     3231302e3230392e3139322e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          4FrUn8AmIJkeTUGPWRY1aUNPl6vKgKpeDnAut9eotgg=
Subject key identifier:   EF:EC:C9:5B:9F:CF:E4:9A:73:16:17:7C:B4:12:7A:82:3B:3B:23:CC
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       6B1228BBF8E8720D2B41ABE711C441687FA8D963
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:09 +0000
ROA not before:           Thu 21 May 2026 15:52:09 +0000
ROA not after:            Thu 20 May 2027 15:57:09 +0000
asID:                     17809
IP address blocks:        210.209.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:12:28:bb:f8:e8:72:0d:2b:41:ab:e7:11:c4:41:68:7f:a8:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:09 2026 GMT
            Not After : May 20 15:57:09 2027 GMT
        Subject: CN=EFECC95B9FCFE49A7316177CB4127A823B3B23CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:85:80:7f:9e:fe:02:c1:e6:65:64:f0:c4:
                    8d:a6:c5:81:0a:cc:ab:7c:7e:45:94:da:e2:e5:42:
                    9d:8a:a5:25:ea:9d:cb:cf:1c:1a:aa:13:23:3a:00:
                    ff:5a:a3:f4:c8:0f:71:64:48:c6:dc:25:7a:9e:81:
                    65:9d:52:08:81:68:ef:9d:26:d4:c2:d3:a0:7c:72:
                    3a:77:08:d3:4f:d3:c7:eb:34:9d:52:59:6a:d9:48:
                    30:8d:fb:6e:08:6b:90:77:a1:40:72:ba:db:9d:d0:
                    4d:15:1e:24:97:74:9a:f1:2c:84:f8:db:78:c9:f1:
                    99:dc:ea:da:e0:7d:45:85:ab:e7:07:be:64:73:bc:
                    3f:69:7f:18:61:fc:54:6b:f7:44:77:00:af:7d:d0:
                    e8:de:d9:de:eb:ad:9b:27:6a:11:aa:32:ff:72:79:
                    cd:1d:f3:fa:8d:aa:0e:b5:f9:d3:71:b8:12:b0:b6:
                    7b:5e:7f:e3:c8:ad:9f:dc:62:26:2a:65:9f:13:0d:
                    e3:da:26:fe:1a:46:13:4b:05:7b:de:4e:2b:06:a3:
                    51:5e:bb:ab:96:ab:73:a6:b8:23:ac:3a:87:da:06:
                    4b:e5:c3:c0:72:8b:86:61:17:a5:4a:7b:30:d1:1e:
                    c5:7b:4f:ee:09:c2:8a:d7:0d:f9:25:6d:d9:49:d9:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:C9:5B:9F:CF:E4:9A:73:16:17:7C:B4:12:7A:82:3B:3B:23:CC
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:45:76:ce:38:7d:b8:e4:38:53:d3:91:6f:e2:50:17:a7:
         a1:11:81:13:b0:8c:90:0b:1b:ed:43:3b:44:d8:20:01:6f:03:
         e9:1a:09:b9:66:cc:1c:4f:2b:10:b7:48:f2:c8:36:bf:69:36:
         94:19:0f:56:56:40:22:17:bf:0c:b5:f8:6c:cf:0d:dd:7d:d7:
         58:ab:f6:4d:dd:39:15:b5:e5:f7:24:76:c5:39:17:31:bd:a9:
         f7:11:3c:a2:31:bf:3a:17:7d:2e:45:21:ec:2b:4a:8a:c5:e4:
         c5:93:f4:d0:b0:23:48:4d:85:81:c4:8a:8a:48:97:45:3b:91:
         fd:9f:92:33:ae:73:c3:01:c2:af:51:f2:c0:15:05:65:91:d2:
         f4:8f:8e:c0:04:61:e3:c1:93:99:86:07:52:18:f0:fa:52:b4:
         92:3f:7a:49:ca:40:74:cd:94:e2:d7:07:3d:9c:8b:41:3d:0f:
         5b:0d:85:5a:2d:d7:dc:ba:88:30:cc:e0:a0:ea:4e:fa:c8:75:
         fe:3e:7c:43:c5:ce:86:1d:bb:55:41:f8:07:0b:4e:12:d7:ab:
         ed:27:7e:d3:d3:b0:1f:8b:de:17:df:2d:e0:62:2d:6b:07:6c:
         6f:76:d5:0e:ae:f0:08:dd:70:de:db:70:e1:f6:21:75:30:8a:
         04:60:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:40 2026 by rpki-client