Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131312e36372e34382e302f32302d3234203d3e2034373830.roa
File:                     3131312e36372e34382e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier:          GHz+X98eCiPTEJB63tklUiLpLOURQkjbnkFRdWMOIQ0=
Subject key identifier:   94:42:DE:08:BF:A0:8A:03:F4:4B:3D:99:F6:13:3A:EE:20:B4:07:71
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       3D0E875E004FAF3D4ABD787C716C0A83F5E7D7D2
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131312e36372e34382e302f32302d3234203d3e2034373830.roa
Signing time:             Thu 21 May 2026 15:57:25 +0000
ROA not before:           Thu 21 May 2026 15:52:25 +0000
ROA not after:            Thu 20 May 2027 15:57:25 +0000
asID:                     4780
IP address blocks:        111.67.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 21:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0e:87:5e:00:4f:af:3d:4a:bd:78:7c:71:6c:0a:83:f5:e7:d7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:25 2026 GMT
            Not After : May 20 15:57:25 2027 GMT
        Subject: CN=9442DE08BFA08A03F44B3D99F6133AEE20B40771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0e:05:ff:29:ea:3f:4a:a7:e5:69:58:32:ab:
                    e7:40:a6:b5:c1:f5:ba:1d:10:10:d9:87:d2:02:ea:
                    f8:cb:89:ca:46:7f:0b:3d:47:82:ff:e3:20:9a:33:
                    a8:45:db:c3:8b:bd:a3:37:82:95:3c:1b:de:bc:b3:
                    d8:57:72:d4:d6:e4:78:1a:40:6c:8a:da:fe:c5:a4:
                    db:e3:95:1d:69:e9:e0:8a:93:21:5f:21:df:8e:93:
                    4f:8e:ed:5e:19:f2:64:0c:42:ea:cf:6e:2f:dc:d1:
                    a4:fb:a2:65:15:44:de:6e:84:aa:4d:20:27:af:a1:
                    45:c6:31:f0:a1:78:92:b4:49:d1:49:ec:d8:c4:f3:
                    ac:ef:9c:7d:e8:c2:dc:d8:a5:c5:d1:29:c1:3b:6c:
                    be:02:6a:c4:57:48:08:cb:29:a7:d4:b5:38:d4:20:
                    9a:05:a5:c4:d1:c3:5d:ef:4f:77:13:52:50:62:69:
                    74:bd:77:66:7e:12:fa:e7:18:36:11:42:bc:df:6a:
                    94:9f:ad:9a:18:58:32:87:1d:d2:fb:7d:7b:cf:de:
                    9b:2f:d0:25:6c:00:c8:4e:68:94:d7:5f:36:38:66:
                    2f:e2:08:aa:92:59:4b:84:76:36:7a:19:21:cf:87:
                    2e:ab:7d:cd:1e:09:ac:3d:78:00:9a:e5:2f:d5:85:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:DE:08:BF:A0:8A:03:F4:4B:3D:99:F6:13:3A:EE:20:B4:07:71
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131312e36372e34382e302f32302d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:bf:36:87:31:d6:9c:10:9f:43:1b:fb:be:5e:22:cb:32:99:
         19:a5:89:8f:75:7b:76:f2:56:0e:43:a1:d1:a6:2e:0a:68:c3:
         ad:8f:09:35:5e:7d:b0:55:b4:c8:c2:c6:f2:37:b9:93:22:64:
         b8:78:25:ae:63:8c:1c:fb:35:f8:74:f4:7e:f8:b0:57:eb:1f:
         52:ec:b9:9d:7e:bd:b5:27:0b:d5:a8:4c:e4:bf:52:10:4f:6e:
         d4:81:06:43:95:a2:91:c8:ad:e6:e8:78:57:9b:65:86:4b:21:
         bf:50:84:a4:8a:c1:1f:e9:91:13:83:8b:8b:9d:e1:86:74:59:
         b6:4a:50:63:f1:89:49:39:78:c5:0e:2a:b3:89:1c:b2:9c:c2:
         51:9c:a4:f4:43:e8:a9:87:8b:c0:a8:41:18:73:11:cb:bc:cd:
         bf:e5:6b:52:71:31:90:4c:c3:28:e8:f6:b7:6d:0d:aa:41:28:
         f1:a0:cf:73:2d:85:9c:1d:a8:34:04:15:74:69:26:28:c9:5c:
         3d:07:37:7d:cd:61:d0:f0:b0:dd:2f:7e:3f:97:79:c3:d0:c7:
         67:a7:2c:ed:4f:10:f0:0b:72:ff:5c:41:a1:a8:b4:a6:24:3b:
         78:58:4f:ab:72:94:af:3c:23:1a:a1:39:c9:b1:75:ce:66:9e:
         d4:19:3c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:17 2026 by rpki-client