
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa
File: 3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa (raw, json)
Hash identifier: t7/0cOmsreeLm+dK5/jYrPk35zrlYChFaIlOC7H3y/o=
Subject key identifier: AE:8A:24:F5:1A:9A:AA:0A:CB:82:15:11:86:21:0E:16:04:F2:49:67
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 14B3BBE65FCEDFF24AA0655DBEB7DBC96F953557
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:51 +0000
ROA not before: Thu 21 May 2026 15:52:51 +0000
ROA not after: Thu 20 May 2027 15:57:51 +0000
asID: 17809
IP address blocks: 210.209.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 00:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b3:bb:e6:5f:ce:df:f2:4a:a0:65:5d:be:b7:db:c9:6f:95:35:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:51 2026 GMT
Not After : May 20 15:57:51 2027 GMT
Subject: CN=AE8A24F51A9AAA0ACB82151186210E1604F24967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c6:1e:9e:fd:d5:27:f2:39:76:34:c1:e0:
77:e2:d3:6d:20:ec:72:1e:ad:62:75:dd:94:b9:d3:
98:73:ad:22:38:33:f0:ba:a8:64:c0:a6:1d:7c:08:
41:ef:57:68:f0:0a:50:1c:67:c2:e8:01:3b:cb:15:
1d:60:27:09:dd:23:8c:84:70:4a:e9:58:56:ac:f7:
a7:ea:6a:9e:f5:55:a6:57:b2:08:9d:c2:c5:2c:14:
d9:88:4d:e7:a8:e3:93:dd:5b:d7:35:44:ff:51:58:
cf:2e:a8:ac:67:91:01:80:6b:2f:45:25:cf:76:af:
d1:ce:3e:87:04:a8:e6:ce:b6:5d:0e:73:a9:96:b6:
2d:6c:cb:ee:10:d3:c6:ee:b9:7d:2a:f8:56:dc:8b:
43:83:9f:b1:08:f3:9d:16:2e:d7:d4:d3:f9:77:05:
be:61:ea:c4:81:b4:58:37:75:7f:1d:49:3f:23:2f:
05:4a:be:90:ee:8c:a4:fc:59:be:88:3e:b2:d8:8d:
8c:1b:a9:fb:80:ae:7a:fe:78:89:97:12:a0:28:f7:
d1:a0:b6:23:f0:a4:44:a1:d8:71:6b:65:e9:a2:fa:
38:54:c5:fe:3f:6d:eb:e1:b2:7d:02:9d:0f:f8:b3:
73:71:12:25:0c:a9:88:47:27:bb:17:1f:5f:aa:03:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:24:F5:1A:9A:AA:0A:CB:82:15:11:86:21:0E:16:04:F2:49:67
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3230382e302f32302d3230203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.209.208.0/20
Signature Algorithm: sha256WithRSAEncryption
56:b4:8e:dc:c9:7c:d0:31:8b:aa:47:da:fc:51:a4:3e:ee:3a:
95:64:bb:0c:c4:e9:a7:03:7c:b3:be:1a:01:e3:60:b4:38:02:
c0:cc:5d:25:38:9b:cb:5c:43:63:76:23:4a:60:ac:c1:17:6d:
b2:fe:eb:05:e2:fa:46:bc:c3:ea:13:42:44:a9:e0:c2:a8:cd:
8f:ef:3b:d5:9f:57:2e:aa:a6:b4:ed:98:88:2e:58:6b:a2:14:
a6:aa:4f:28:da:7d:ed:92:8b:93:fc:4b:c2:dc:5f:a9:45:21:
46:ce:b0:1d:79:69:14:df:3d:75:0d:84:05:f3:18:2b:27:4e:
48:c0:0a:3b:cd:8a:e2:9a:25:29:04:69:a4:a2:eb:2e:0f:4a:
23:27:67:d8:9e:95:7c:1e:21:f6:ec:e0:54:ca:72:f8:da:bb:
d5:77:a1:4b:f9:ae:f0:f2:dc:c2:a1:f0:b0:ce:d2:0c:b3:13:
cd:0f:54:1f:a2:a5:ba:ff:59:9a:e7:99:76:77:3c:5e:92:f2:
ad:c5:37:4f:2f:bc:8f:76:93:27:6f:55:99:4f:47:ca:2f:0a:
9c:dd:44:40:0c:4d:37:9a:85:8e:b2:b7:c5:69:8c:0f:63:68:
29:d3:58:19:22:7c:fd:d3:ef:39:1d:6d:d1:58:ef:06:52:a2:
f6:e2:97:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:54 2026 by rpki-client