Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/32372e39362e3232342e302f31392d3234203d3e203137383039.roa
File:                     32372e39362e3232342e302f31392d3234203d3e203137383039.roa (raw, json)
Hash identifier:          LzKK40l3ijrF5l/EZ4yZSdftCzSJIO+vzl4B9ebXCD0=
Subject key identifier:   81:B9:80:87:65:EB:A8:45:A1:C3:57:10:3C:47:7B:55:38:F7:CB:17
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       5437CBCACA485A05111797F5D4227CA69E9A3A22
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/32372e39362e3232342e302f31392d3234203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:22 +0000
ROA not before:           Thu 21 May 2026 15:52:22 +0000
ROA not after:            Thu 20 May 2027 15:57:22 +0000
asID:                     17809
IP address blocks:        27.96.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:37:cb:ca:ca:48:5a:05:11:17:97:f5:d4:22:7c:a6:9e:9a:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:22 2026 GMT
            Not After : May 20 15:57:22 2027 GMT
        Subject: CN=81B9808765EBA845A1C357103C477B5538F7CB17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6b:54:1f:52:fe:f7:4d:27:e9:79:29:25:3a:
                    17:ca:6d:1e:ab:ff:17:83:68:70:33:0d:d2:22:c4:
                    1b:80:db:50:9c:7c:28:45:4b:e5:c5:3a:2b:52:46:
                    8e:93:53:5f:82:97:17:82:c1:b6:a9:3c:bf:48:60:
                    87:ce:63:81:54:21:c0:0e:87:a9:3f:ff:70:eb:f7:
                    50:4d:7d:59:64:52:1f:21:3f:cd:e9:71:66:ab:cd:
                    aa:54:fa:77:3f:d2:bf:fc:02:62:b6:73:fc:05:72:
                    ef:67:79:be:aa:d4:87:b6:e1:67:d3:57:cf:40:17:
                    53:70:a9:8e:7c:ee:d9:15:f8:59:8a:de:0a:6a:7d:
                    0d:81:d2:83:a0:04:b6:c1:4e:03:39:96:99:2e:ea:
                    7c:18:3b:a4:33:a0:ba:4a:7d:0e:fa:e3:ba:0f:2e:
                    ce:44:df:72:9c:ac:a7:39:dc:56:e3:3c:84:65:0e:
                    47:9f:45:f4:69:e0:11:65:f8:d4:d5:8a:06:d0:fe:
                    33:4b:06:0e:d0:61:6a:01:a4:22:88:44:8f:a9:a8:
                    95:45:e6:8d:93:d8:24:38:28:d3:02:b6:e6:b7:73:
                    d6:f8:f5:0e:4c:de:96:c8:a7:77:34:ff:ee:7c:98:
                    19:fb:89:02:76:1c:28:88:48:bd:47:34:bb:3e:58:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:80:87:65:EB:A8:45:A1:C3:57:10:3C:47:7B:55:38:F7:CB:17
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/32372e39362e3232342e302f31392d3234203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:44:6c:8f:7a:7c:5a:c3:70:01:3b:63:a0:3f:27:b2:81:
         22:23:27:90:9b:f4:48:8c:83:56:1c:de:b6:2f:8e:5a:f9:aa:
         56:82:76:3a:39:c4:a2:00:00:2a:54:ed:a2:a5:6f:0d:f1:bf:
         49:87:ea:b3:9c:77:69:9f:c6:87:52:05:59:01:d3:89:ad:37:
         b1:6c:3f:23:62:66:b4:91:0c:6a:86:2a:8e:90:2a:24:07:21:
         fb:fb:6b:72:bb:96:61:8e:41:ec:a4:90:68:47:ae:ae:66:16:
         08:dd:35:f8:92:86:8e:66:50:23:c2:c7:1e:ac:cb:37:14:02:
         b6:50:b8:96:d1:05:a3:e6:47:5b:e9:b3:5c:35:fb:d2:33:98:
         19:89:3a:35:a2:bd:bf:a3:15:12:bf:78:da:9e:ac:85:39:53:
         f3:ff:b1:75:89:7b:4d:41:44:bd:86:9f:66:25:c6:96:51:65:
         c4:6a:61:f0:7a:3e:48:43:bc:8c:56:13:8c:1b:5d:c9:5e:dd:
         11:98:52:fe:ca:ca:ba:e4:fd:bf:be:09:91:04:3f:f5:a7:40:
         99:90:82:fe:46:88:ef:df:bd:6d:fc:2b:98:09:8f:5b:a4:26:
         8b:08:02:6a:05:e4:87:c6:24:db:a7:0a:ed:fc:25:94:8b:1a:
         87:3a:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:22 2026 by rpki-client