
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa
File: 3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier: SXCMpOX688vUnLRr14uOWX5hEvjPCEve4njOEXCc8fg=
Subject key identifier: B2:43:F7:C0:CD:23:B2:AF:E8:C6:CE:19:6E:CB:12:B1:2B:65:6E:AF
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 495E3796D6216D3633F451AB59B6DBC7A0F1491F
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:13 +0000
ROA not before: Thu 21 May 2026 15:52:13 +0000
ROA not after: Thu 20 May 2027 15:57:13 +0000
asID: 17809
IP address blocks: 210.209.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:5e:37:96:d6:21:6d:36:33:f4:51:ab:59:b6:db:c7:a0:f1:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:13 2026 GMT
Not After : May 20 15:57:13 2027 GMT
Subject: CN=B243F7C0CD23B2AFE8C6CE196ECB12B12B656EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:57:83:d8:36:dc:71:9f:7d:b1:d8:d0:55:
98:63:ad:7d:e1:08:9b:f0:f4:f9:42:08:3a:1b:eb:
da:bf:6c:92:98:93:96:b9:fa:66:e2:58:01:4f:62:
32:a5:48:a7:a4:c0:d8:d0:9c:fe:8b:ba:e6:b0:f7:
31:0d:ca:ec:4c:d3:ef:72:a5:ac:4d:d4:b3:46:45:
2c:a6:9b:e7:ab:4d:45:b8:80:85:99:48:06:60:a8:
6e:12:f5:73:38:46:a5:56:40:19:1c:8c:e5:c9:db:
99:c2:38:80:b6:cd:cf:4a:f1:28:91:ab:13:3a:bd:
f8:c3:77:94:de:f7:b7:41:93:11:50:e3:f4:09:74:
de:da:1c:3d:04:d5:59:8c:d6:bf:df:d2:41:b6:d0:
57:0d:73:62:61:2d:51:6d:4a:c1:b2:d4:d7:f5:1c:
7d:51:84:07:19:92:8a:17:65:c5:cf:aa:9b:48:75:
c7:c4:3d:be:5f:66:9b:5e:65:db:5d:23:06:62:26:
8c:f7:48:e2:c6:51:ef:40:dc:e9:90:b2:74:16:c2:
20:2c:ff:d0:ac:70:29:2d:e0:c9:3c:02:8b:f2:fa:
1e:fe:dd:87:6b:39:36:13:48:f3:ec:d4:86:64:cb:
e9:ab:5e:ae:2b:43:c2:4c:59:bd:60:5b:c0:0b:2c:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:F7:C0:CD:23:B2:AF:E8:C6:CE:19:6E:CB:12:B1:2B:65:6E:AF
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3139322e302f32302d3230203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.192.0/20
Signature Algorithm: sha256WithRSAEncryption
84:d5:b5:dc:b1:7e:bb:6c:84:7d:08:75:a8:13:95:ab:bb:6c:
e5:94:0a:75:c6:83:c0:0e:78:3c:59:86:05:9a:79:d5:85:dc:
55:e6:f1:15:df:6f:ef:03:8b:fc:66:01:d5:92:c7:70:6f:e9:
f9:f1:1c:09:1c:e4:5b:38:1a:41:1f:fc:74:33:bb:e4:a8:4f:
22:cd:eb:2a:2d:b1:da:de:e1:f5:ef:b4:d9:4f:99:16:73:3f:
6a:5c:4d:df:27:a7:92:0a:e2:d8:ce:dd:16:0f:50:ab:44:ed:
69:d2:88:16:10:6b:a2:b5:bb:7f:c5:30:c3:d0:9e:63:78:5b:
80:bf:83:9e:df:88:99:00:f8:04:8a:14:65:b8:ed:46:48:e4:
13:d0:11:65:b8:ce:56:26:70:46:ea:90:81:20:07:e0:61:15:
96:1c:2e:4c:50:59:26:d7:de:f2:7a:7f:e7:6a:69:d3:e4:2f:
cb:20:54:29:ae:51:35:b4:bd:1f:32:93:6e:f5:21:ce:d2:6b:
f0:63:41:e6:8b:a0:98:20:2f:86:1c:c3:f5:01:75:86:63:9f:
0a:e7:83:5c:e8:dc:74:ba:28:ae:68:1b:86:7e:a8:71:05:4e:
e7:42:e4:69:a7:db:ac:17:1f:74:3f:5d:f8:3f:72:ba:a8:c4:
d8:13:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:58 2026 by rpki-client