Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa
File:                     3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier:          SXCMpOX688vUnLRr14uOWX5hEvjPCEve4njOEXCc8fg=
Subject key identifier:   B2:43:F7:C0:CD:23:B2:AF:E8:C6:CE:19:6E:CB:12:B1:2B:65:6E:AF
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       495E3796D6216D3633F451AB59B6DBC7A0F1491F
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:13 +0000
ROA not before:           Thu 21 May 2026 15:52:13 +0000
ROA not after:            Thu 20 May 2027 15:57:13 +0000
asID:                     17809
IP address blocks:        210.209.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5e:37:96:d6:21:6d:36:33:f4:51:ab:59:b6:db:c7:a0:f1:49:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:13 2026 GMT
            Not After : May 20 15:57:13 2027 GMT
        Subject: CN=B243F7C0CD23B2AFE8C6CE196ECB12B12B656EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:57:83:d8:36:dc:71:9f:7d:b1:d8:d0:55:
                    98:63:ad:7d:e1:08:9b:f0:f4:f9:42:08:3a:1b:eb:
                    da:bf:6c:92:98:93:96:b9:fa:66:e2:58:01:4f:62:
                    32:a5:48:a7:a4:c0:d8:d0:9c:fe:8b:ba:e6:b0:f7:
                    31:0d:ca:ec:4c:d3:ef:72:a5:ac:4d:d4:b3:46:45:
                    2c:a6:9b:e7:ab:4d:45:b8:80:85:99:48:06:60:a8:
                    6e:12:f5:73:38:46:a5:56:40:19:1c:8c:e5:c9:db:
                    99:c2:38:80:b6:cd:cf:4a:f1:28:91:ab:13:3a:bd:
                    f8:c3:77:94:de:f7:b7:41:93:11:50:e3:f4:09:74:
                    de:da:1c:3d:04:d5:59:8c:d6:bf:df:d2:41:b6:d0:
                    57:0d:73:62:61:2d:51:6d:4a:c1:b2:d4:d7:f5:1c:
                    7d:51:84:07:19:92:8a:17:65:c5:cf:aa:9b:48:75:
                    c7:c4:3d:be:5f:66:9b:5e:65:db:5d:23:06:62:26:
                    8c:f7:48:e2:c6:51:ef:40:dc:e9:90:b2:74:16:c2:
                    20:2c:ff:d0:ac:70:29:2d:e0:c9:3c:02:8b:f2:fa:
                    1e:fe:dd:87:6b:39:36:13:48:f3:ec:d4:86:64:cb:
                    e9:ab:5e:ae:2b:43:c2:4c:59:bd:60:5b:c0:0b:2c:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:43:F7:C0:CD:23:B2:AF:E8:C6:CE:19:6E:CB:12:B1:2B:65:6E:AF
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:b5:dc:b1:7e:bb:6c:84:7d:08:75:a8:13:95:ab:bb:6c:
         e5:94:0a:75:c6:83:c0:0e:78:3c:59:86:05:9a:79:d5:85:dc:
         55:e6:f1:15:df:6f:ef:03:8b:fc:66:01:d5:92:c7:70:6f:e9:
         f9:f1:1c:09:1c:e4:5b:38:1a:41:1f:fc:74:33:bb:e4:a8:4f:
         22:cd:eb:2a:2d:b1:da:de:e1:f5:ef:b4:d9:4f:99:16:73:3f:
         6a:5c:4d:df:27:a7:92:0a:e2:d8:ce:dd:16:0f:50:ab:44:ed:
         69:d2:88:16:10:6b:a2:b5:bb:7f:c5:30:c3:d0:9e:63:78:5b:
         80:bf:83:9e:df:88:99:00:f8:04:8a:14:65:b8:ed:46:48:e4:
         13:d0:11:65:b8:ce:56:26:70:46:ea:90:81:20:07:e0:61:15:
         96:1c:2e:4c:50:59:26:d7:de:f2:7a:7f:e7:6a:69:d3:e4:2f:
         cb:20:54:29:ae:51:35:b4:bd:1f:32:93:6e:f5:21:ce:d2:6b:
         f0:63:41:e6:8b:a0:98:20:2f:86:1c:c3:f5:01:75:86:63:9f:
         0a:e7:83:5c:e8:dc:74:ba:28:ae:68:1b:86:7e:a8:71:05:4e:
         e7:42:e4:69:a7:db:ac:17:1f:74:3f:5d:f8:3f:72:ba:a8:c4:
         d8:13:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:58 2026 by rpki-client