Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa
File:                     3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier:          t7/0cOmsreeLm+dK5/jYrPk35zrlYChFaIlOC7H3y/o=
Subject key identifier:   AE:8A:24:F5:1A:9A:AA:0A:CB:82:15:11:86:21:0E:16:04:F2:49:67
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       14B3BBE65FCEDFF24AA0655DBEB7DBC96F953557
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:51 +0000
ROA not before:           Thu 21 May 2026 15:52:51 +0000
ROA not after:            Thu 20 May 2027 15:57:51 +0000
asID:                     17809
IP address blocks:        210.209.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b3:bb:e6:5f:ce:df:f2:4a:a0:65:5d:be:b7:db:c9:6f:95:35:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:51 2026 GMT
            Not After : May 20 15:57:51 2027 GMT
        Subject: CN=AE8A24F51A9AAA0ACB82151186210E1604F24967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:c6:1e:9e:fd:d5:27:f2:39:76:34:c1:e0:
                    77:e2:d3:6d:20:ec:72:1e:ad:62:75:dd:94:b9:d3:
                    98:73:ad:22:38:33:f0:ba:a8:64:c0:a6:1d:7c:08:
                    41:ef:57:68:f0:0a:50:1c:67:c2:e8:01:3b:cb:15:
                    1d:60:27:09:dd:23:8c:84:70:4a:e9:58:56:ac:f7:
                    a7:ea:6a:9e:f5:55:a6:57:b2:08:9d:c2:c5:2c:14:
                    d9:88:4d:e7:a8:e3:93:dd:5b:d7:35:44:ff:51:58:
                    cf:2e:a8:ac:67:91:01:80:6b:2f:45:25:cf:76:af:
                    d1:ce:3e:87:04:a8:e6:ce:b6:5d:0e:73:a9:96:b6:
                    2d:6c:cb:ee:10:d3:c6:ee:b9:7d:2a:f8:56:dc:8b:
                    43:83:9f:b1:08:f3:9d:16:2e:d7:d4:d3:f9:77:05:
                    be:61:ea:c4:81:b4:58:37:75:7f:1d:49:3f:23:2f:
                    05:4a:be:90:ee:8c:a4:fc:59:be:88:3e:b2:d8:8d:
                    8c:1b:a9:fb:80:ae:7a:fe:78:89:97:12:a0:28:f7:
                    d1:a0:b6:23:f0:a4:44:a1:d8:71:6b:65:e9:a2:fa:
                    38:54:c5:fe:3f:6d:eb:e1:b2:7d:02:9d:0f:f8:b3:
                    73:71:12:25:0c:a9:88:47:27:bb:17:1f:5f:aa:03:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8A:24:F5:1A:9A:AA:0A:CB:82:15:11:86:21:0E:16:04:F2:49:67
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:b4:8e:dc:c9:7c:d0:31:8b:aa:47:da:fc:51:a4:3e:ee:3a:
         95:64:bb:0c:c4:e9:a7:03:7c:b3:be:1a:01:e3:60:b4:38:02:
         c0:cc:5d:25:38:9b:cb:5c:43:63:76:23:4a:60:ac:c1:17:6d:
         b2:fe:eb:05:e2:fa:46:bc:c3:ea:13:42:44:a9:e0:c2:a8:cd:
         8f:ef:3b:d5:9f:57:2e:aa:a6:b4:ed:98:88:2e:58:6b:a2:14:
         a6:aa:4f:28:da:7d:ed:92:8b:93:fc:4b:c2:dc:5f:a9:45:21:
         46:ce:b0:1d:79:69:14:df:3d:75:0d:84:05:f3:18:2b:27:4e:
         48:c0:0a:3b:cd:8a:e2:9a:25:29:04:69:a4:a2:eb:2e:0f:4a:
         23:27:67:d8:9e:95:7c:1e:21:f6:ec:e0:54:ca:72:f8:da:bb:
         d5:77:a1:4b:f9:ae:f0:f2:dc:c2:a1:f0:b0:ce:d2:0c:b3:13:
         cd:0f:54:1f:a2:a5:ba:ff:59:9a:e7:99:76:77:3c:5e:92:f2:
         ad:c5:37:4f:2f:bc:8f:76:93:27:6f:55:99:4f:47:ca:2f:0a:
         9c:dd:44:40:0c:4d:37:9a:85:8e:b2:b7:c5:69:8c:0f:63:68:
         29:d3:58:19:22:7c:fd:d3:ef:39:1d:6d:d1:58:ef:06:52:a2:
         f6:e2:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:54 2026 by rpki-client