
$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/323430313a616230303a3a2f33322d3634203d3e203137383039.roa
File: 323430313a616230303a3a2f33322d3634203d3e203137383039.roa (raw, json)
Hash identifier: /dGBqUBatz4BAIgd4vH3/G2nFgrpA/PKoGLeQS1DxSg=
Subject key identifier: D6:AA:C6:A0:5A:FE:D3:29:62:4A:52:91:C4:D9:08:2C:95:32:39:BA
Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial: 71E8F78E585C3D42C3EF03A861B9C19B92063F2A
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/323430313a616230303a3a2f33322d3634203d3e203137383039.roa
Signing time: Thu 21 May 2026 15:57:40 +0000
ROA not before: Thu 21 May 2026 15:52:40 +0000
ROA not after: Thu 20 May 2027 15:57:40 +0000
asID: 17809
IP address blocks: 2401:ab00::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 07:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e8:f7:8e:58:5c:3d:42:c3:ef:03:a8:61:b9:c1:9b:92:06:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Validity
Not Before: May 21 15:52:40 2026 GMT
Not After : May 20 15:57:40 2027 GMT
Subject: CN=D6AAC6A05AFED329624A5291C4D9082C953239BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:ba:2e:e8:78:cc:1f:62:16:1d:bf:50:f5:
43:66:da:cb:63:31:81:89:11:45:51:b3:bf:9a:c2:
ef:e9:a7:2f:0f:d2:67:82:a4:56:76:28:d4:d8:38:
c0:21:5d:0f:50:5d:52:e8:f6:1c:33:43:e5:21:fd:
8c:96:07:62:7f:8e:d4:ab:36:a5:1b:88:05:90:7d:
08:1e:55:78:3f:93:18:b7:d7:a7:49:87:55:a9:93:
bf:cf:6b:89:95:32:83:b8:89:83:1c:1b:26:5d:d1:
4b:3f:4e:d6:8f:26:fc:6b:11:f6:28:0c:2c:b6:c6:
d0:5a:c7:ac:a0:e7:02:41:d8:2f:44:19:6b:7e:cd:
0d:34:e2:9a:9b:40:3f:47:b3:e8:ba:8d:72:ca:5b:
2e:fd:18:cb:04:1d:45:3f:90:ea:01:81:25:eb:4e:
b5:81:2a:1c:de:82:c0:80:ad:6d:b0:0a:bd:b1:91:
e7:fd:81:bc:76:fa:11:ff:5b:db:22:b1:89:8e:0d:
30:55:e7:c7:bd:a1:ad:de:87:04:f0:62:56:d4:c6:
4b:60:ee:71:a2:43:2b:e7:85:e3:78:bb:0b:db:77:
eb:a4:2b:80:d2:5d:81:26:8c:14:22:a7:ff:c9:c4:
38:59:9f:80:0b:ed:b9:e9:03:11:5f:4d:ef:d4:5e:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:C6:A0:5A:FE:D3:29:62:4A:52:91:C4:D9:08:2C:95:32:39:BA
X509v3 Authority Key Identifier:
keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/323430313a616230303a3a2f33322d3634203d3e203137383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
2a:66:c7:7b:20:db:0d:8d:5d:f5:d5:76:6f:e1:72:79:e5:25:
5d:b1:a3:5d:b4:5e:34:f7:d2:43:c4:10:83:d9:89:37:de:9c:
1d:a4:86:f0:e9:02:59:3a:78:22:8c:bf:e5:3c:99:a9:f1:3f:
6f:2f:d1:cd:18:bd:1d:58:56:14:b8:91:c0:3e:77:8a:63:67:
df:e3:b9:c3:13:34:75:84:b4:0a:2b:d0:4e:8c:cd:8a:7c:3d:
79:7c:8d:5b:cb:27:05:b8:5d:72:62:31:61:81:eb:83:5f:68:
84:a9:ff:40:8b:32:ab:f2:67:0b:45:64:2d:6b:b9:44:b7:08:
0c:85:5f:c5:d6:5f:ff:ad:7f:7e:50:69:16:d0:5c:9a:2e:ee:
72:06:02:1d:1f:ec:10:ec:34:ca:b3:83:39:d2:69:e5:65:b1:
aa:53:17:87:e6:56:57:fa:e7:68:5e:a5:be:4b:47:6c:53:a7:
cb:7c:70:6c:95:63:ca:12:4b:be:4c:24:2d:83:50:fe:da:1b:
cd:f7:ea:df:98:d5:b8:18:c6:ca:3b:83:d3:b7:ad:82:c7:6c:
3a:29:93:bf:41:ad:2e:00:49:79:67:e8:35:ae:76:e3:2d:21:
35:21:a0:5d:36:ef:21:c1:bd:0d:a9:1f:8e:a0:14:d9:41:97:
a8:7c:f0:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:59 2026 by rpki-client