Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3231362e302f32312d3234203d3e203338383531.roa
File:                     3131392e31352e3231362e302f32312d3234203d3e203338383531.roa (raw, json)
Hash identifier:          fV88aZFCu7pYpiWYbpwK5YA17uzleooMcPlwiOWqtYw=
Subject key identifier:   8B:49:B1:5C:52:B7:66:99:80:52:61:87:42:BC:2D:36:90:D5:97:6A
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       1F021FE874E73D650207789006C8F2A9F5B07667
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3231362e302f32312d3234203d3e203338383531.roa
Signing time:             Thu 21 May 2026 15:57:33 +0000
ROA not before:           Thu 21 May 2026 15:52:33 +0000
ROA not after:            Thu 20 May 2027 15:57:33 +0000
asID:                     38851
IP address blocks:        119.15.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 05:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:1f:e8:74:e7:3d:65:02:07:78:90:06:c8:f2:a9:f5:b0:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:33 2026 GMT
            Not After : May 20 15:57:33 2027 GMT
        Subject: CN=8B49B15C52B766998052618742BC2D3690D5976A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:32:a9:03:f3:86:24:f4:2e:79:f4:8d:17:
                    e8:f3:8c:4b:a2:a9:1a:a0:94:9a:ad:e1:3f:9a:65:
                    4e:59:15:0a:51:a0:c4:71:94:5f:e2:c0:e2:a0:c9:
                    0c:63:26:1f:77:b6:3f:b3:33:4e:65:7a:b0:b5:e0:
                    a4:bf:01:fe:d4:92:c3:a5:99:7a:d0:14:7e:bc:4a:
                    43:c2:f5:73:b3:cc:6d:9f:ac:44:3e:25:60:ee:ef:
                    1b:42:c8:d8:2f:c7:b3:7a:af:81:e7:10:04:f2:a4:
                    d5:c8:62:6f:fa:93:ce:45:bf:95:5e:bd:7c:b7:85:
                    ab:35:33:3e:5d:93:d9:cf:d1:35:ed:e7:46:13:9c:
                    25:ab:8d:60:3c:49:a7:dd:fb:31:0e:b4:a6:51:81:
                    9b:53:e8:7d:fa:50:0b:4e:97:c4:6e:11:2f:0b:0a:
                    ec:f6:0e:c3:1c:e7:32:89:31:e9:47:56:d9:c8:7c:
                    e2:49:27:1a:92:e4:03:7d:b7:ee:e1:8b:a4:fa:56:
                    5a:0a:16:f5:1d:4e:c1:08:b2:5a:72:ec:fb:e4:e4:
                    c5:c3:22:c7:69:b6:72:76:ea:1f:b7:90:da:0d:cf:
                    b4:dd:9c:b8:38:11:67:1a:94:19:09:3e:1e:a7:42:
                    9c:aa:58:97:1f:54:d7:5b:b5:16:e5:4a:42:16:8f:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:B1:5C:52:B7:66:99:80:52:61:87:42:BC:2D:36:90:D5:97:6A
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3231362e302f32312d3234203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:7c:23:8d:6c:8c:5b:fd:67:fa:a3:9f:78:8f:80:47:e7:
         3b:d9:0c:fd:e2:45:3a:b1:9f:68:b1:a8:9a:19:b3:9a:bf:a1:
         83:f1:f5:65:94:dd:94:86:62:9a:32:61:e3:8e:b8:6a:12:10:
         2a:75:5f:6a:4a:10:3d:29:be:59:6d:df:c7:d0:51:7c:aa:2e:
         d9:ba:59:6c:a5:93:68:f9:b7:40:23:b0:64:ce:4a:45:e7:ea:
         c8:17:0b:1b:a5:82:fb:17:45:46:7f:be:cf:fb:7d:7d:27:31:
         e8:a7:44:fc:32:ac:9d:65:6c:57:36:f2:4b:dd:12:4a:e7:91:
         76:3e:c3:c9:f7:d0:ce:d6:0a:4c:c0:90:2e:c1:07:7f:d0:d0:
         a8:e0:eb:72:f7:99:07:a3:01:77:f6:5b:1c:e5:9a:5a:03:71:
         a8:fb:ec:82:cf:86:a9:0a:ba:61:25:9e:fb:d9:3a:2a:4f:bf:
         60:d4:e8:be:01:23:eb:7e:62:28:ed:28:f4:7e:27:fb:74:21:
         80:77:e3:78:c6:0e:4d:e5:d4:53:a3:39:f2:83:9d:06:34:af:
         54:ec:1e:ee:66:bb:f5:86:7a:28:9f:99:d0:a0:68:ad:ca:ea:
         88:cf:7c:30:84:e8:16:12:7b:6d:90:07:6e:49:bd:c9:86:2b:
         b8:98:2c:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 16:45:58 2026 by rpki-client