Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3139322e302f31382d3234203d3e203138303436.roa
File:                     3131392e31352e3139322e302f31382d3234203d3e203138303436.roa (raw, json)
Hash identifier:          pqBWfJG/45ibI8C5V4h16B9rrxnDQXD/QcfnVilq8MM=
Subject key identifier:   46:80:AE:9C:0E:F7:CE:EB:BC:0F:56:FB:E6:A0:41:58:CC:45:B0:34
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       4E3FCA04B2C72956C163D84731ABAA6D5C822FBC
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3139322e302f31382d3234203d3e203138303436.roa
Signing time:             Thu 21 May 2026 15:57:47 +0000
ROA not before:           Thu 21 May 2026 15:52:47 +0000
ROA not after:            Thu 20 May 2027 15:57:47 +0000
asID:                     18046
IP address blocks:        119.15.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3f:ca:04:b2:c7:29:56:c1:63:d8:47:31:ab:aa:6d:5c:82:2f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:47 2026 GMT
            Not After : May 20 15:57:47 2027 GMT
        Subject: CN=4680AE9C0EF7CEEBBC0F56FBE6A04158CC45B034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:28:47:c9:69:54:13:4c:30:2b:21:c5:4d:
                    08:58:2d:54:b9:a8:72:f1:2a:b0:e7:bb:aa:dd:60:
                    4c:0d:03:ce:90:c6:85:54:ed:0f:6d:2e:7c:7c:3a:
                    72:5b:61:17:7f:d8:1b:ba:31:95:5c:63:b2:e9:e2:
                    53:ab:36:2e:6e:30:7a:97:f3:c6:ed:cb:bd:3e:b8:
                    2a:38:08:7e:8a:da:81:46:a8:1d:7b:fe:16:76:1e:
                    f9:51:be:02:0d:16:e8:0c:0c:96:e8:b7:70:d9:44:
                    26:26:4e:f5:fd:1c:c0:10:02:5f:09:8f:be:7e:e8:
                    47:e4:1f:31:9c:72:47:80:b8:90:b4:99:7c:9c:ee:
                    4e:97:28:a2:09:70:47:c0:cb:60:12:45:89:3c:05:
                    63:62:fa:c7:94:f1:ed:eb:15:67:b1:4e:30:50:d3:
                    af:21:23:64:ae:ad:b4:c0:19:6f:e5:d3:ac:30:db:
                    f6:f9:71:f9:29:d4:4d:5f:61:49:e9:4d:30:9e:53:
                    f7:1a:6e:42:11:41:8c:95:2a:04:8c:d9:f0:19:55:
                    25:f7:e4:68:b5:cc:c6:15:f3:9b:af:b8:c5:0e:5e:
                    aa:53:40:48:13:5e:e5:a2:38:f8:1f:f3:9b:6c:48:
                    f4:78:1a:bb:4a:52:ba:12:ce:d9:7c:5a:cc:20:b8:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:80:AE:9C:0E:F7:CE:EB:BC:0F:56:FB:E6:A0:41:58:CC:45:B0:34
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3139322e302f31382d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:1b:1a:24:d4:ae:6a:93:bc:5b:db:5f:88:c4:0a:f4:2a:e2:
         11:c3:1a:a5:bd:51:3d:76:93:b8:6f:17:ff:a3:39:b4:79:91:
         3b:0d:df:62:20:83:61:3b:48:7d:3e:c8:04:3f:a5:ff:f4:c4:
         9e:2c:bf:5d:d4:a5:f3:2b:dd:a4:bf:da:ba:05:0e:2d:61:74:
         0d:bf:68:6c:77:6e:e6:82:b1:72:ed:71:27:28:8c:d1:3a:29:
         8b:cd:98:f5:bb:3c:93:00:67:a2:8b:e7:a1:84:ad:24:62:8e:
         45:0f:f5:da:74:f7:3d:7c:ea:61:84:bf:30:6b:68:4e:cb:0a:
         c2:28:f1:76:d3:d5:d6:da:65:5c:5c:34:31:40:d3:a3:96:78:
         1b:78:3c:e0:ec:ea:94:46:09:57:21:f9:c3:bd:9c:0a:68:f1:
         d2:ad:97:fd:4d:fa:6e:3d:fb:3d:df:b1:6d:1d:f0:26:cd:63:
         27:05:f3:74:ed:16:e3:0b:1e:18:37:19:bf:65:39:cf:92:4f:
         11:8f:b3:ab:f0:e5:83:09:2d:05:37:5d:b4:59:c5:df:23:cc:
         28:4e:8f:48:de:5d:5a:c9:1b:e5:82:64:80:83:5b:35:83:2b:
         27:e2:9d:2e:3f:96:68:d9:02:ba:8e:cf:e5:31:31:1c:46:79:
         75:ab:de:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:42 2026 by rpki-client