Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3232342e302f31392d3234203d3e203138303436.roa
File:                     3131392e31352e3232342e302f31392d3234203d3e203138303436.roa (raw, json)
Hash identifier:          mhAH0jZSP/0nOKFqekqCR1izRsNsd/ZJTZtUMTCLujo=
Subject key identifier:   78:0D:65:D6:68:DB:95:CB:DC:6E:FB:2B:56:6D:9A:E5:85:8A:EB:E4
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       448F8A72FE6EB2D624595513A93872DF4BE74611
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3232342e302f31392d3234203d3e203138303436.roa
Signing time:             Thu 21 May 2026 15:57:59 +0000
ROA not before:           Thu 21 May 2026 15:52:59 +0000
ROA not after:            Thu 20 May 2027 15:57:59 +0000
asID:                     18046
IP address blocks:        119.15.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8f:8a:72:fe:6e:b2:d6:24:59:55:13:a9:38:72:df:4b:e7:46:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:59 2026 GMT
            Not After : May 20 15:57:59 2027 GMT
        Subject: CN=780D65D668DB95CBDC6EFB2B566D9AE5858AEBE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:5c:b5:98:0d:2e:73:97:18:ed:0c:6d:2f:
                    a0:1b:f0:7e:c5:e4:8b:92:48:79:fb:0a:e0:ee:54:
                    39:df:8a:25:d8:ab:da:7d:5c:b9:f1:c7:08:db:54:
                    f9:b5:f4:41:0f:0f:49:cf:d6:04:1a:fd:0b:f9:54:
                    93:5f:d8:ca:e8:13:1a:d6:47:59:03:09:de:bc:29:
                    c9:6c:07:02:f5:b4:da:7b:25:a1:e8:f6:2e:e8:f0:
                    b7:25:36:07:2e:33:05:49:0f:fc:de:ec:83:d8:86:
                    8c:b9:fa:b0:03:cf:21:8d:58:f1:c3:2e:e3:7f:a8:
                    a4:35:eb:82:6f:9f:e9:3c:d2:8a:5e:24:89:52:06:
                    07:3c:33:af:9f:17:da:87:92:0b:bf:c6:b7:d7:46:
                    63:d8:e6:5d:aa:2e:d9:0e:ff:38:e7:45:a6:29:75:
                    03:01:2a:53:f5:20:4c:0a:ae:84:2b:3c:98:ae:4a:
                    a0:36:3e:45:06:29:16:35:5b:2f:07:70:e3:cc:c1:
                    42:63:f5:3c:b4:23:a1:e7:84:7e:f1:03:16:e3:f6:
                    9c:ac:4f:38:39:0f:9c:2c:79:94:c6:0e:67:22:64:
                    96:99:c5:4d:4b:87:4d:d7:a8:62:16:f2:98:72:3c:
                    b1:94:20:42:a7:2c:79:fc:90:da:fb:64:ca:5b:f1:
                    d3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:65:D6:68:DB:95:CB:DC:6E:FB:2B:56:6D:9A:E5:85:8A:EB:E4
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3131392e31352e3232342e302f31392d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:42:44:b1:35:68:69:f6:e3:df:0a:2e:37:0e:35:c0:bd:68:
         c3:78:0b:18:84:b2:67:14:50:1c:68:bd:f9:f8:53:03:1b:41:
         ae:78:e0:f2:7d:5d:1d:8b:c0:2c:db:6e:3f:f7:4d:74:22:c0:
         21:b7:80:3f:eb:07:4d:be:07:96:30:94:62:21:14:6f:c7:3e:
         5b:95:8f:9f:0a:99:b3:8e:3f:9a:80:9d:52:f1:3e:47:ef:aa:
         a4:6e:30:42:ec:c0:21:e5:a6:18:49:b6:d1:30:87:bb:b9:22:
         2d:ae:f1:0e:3b:26:a4:b9:59:c7:f6:85:d9:f7:fa:3b:03:20:
         83:c1:90:22:c6:73:94:03:72:8a:b5:43:bd:1a:df:b9:cf:cf:
         84:0a:f1:95:e0:5e:1b:5f:8d:93:7d:3d:8f:d6:b4:1f:e7:89:
         ba:f1:49:06:02:4b:f3:6c:dc:13:83:92:dc:52:a1:e3:09:5c:
         7f:51:c2:c3:11:e8:41:c7:4e:85:12:2a:cc:91:8b:b7:73:e3:
         a0:0a:ad:0c:2c:33:37:f7:42:2d:4b:b5:68:85:06:94:69:0e:
         e4:8e:f2:2b:51:aa:27:3c:53:9e:f3:55:ad:2e:37:71:6e:73:
         7a:87:e9:cc:97:e2:cc:96:c0:b7:a1:33:41:f5:4b:aa:7a:90:
         cc:99:be:f4
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIURI+Kcv5ustYkWVUTqThy30vnRhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyNTlaFw0yNzA1MjAxNTU3NTlaMDMxMTAvBgNV
BAMTKDc4MEQ2NUQ2NjhEQjk1Q0JEQzZFRkIyQjU2NkQ5QUU1ODU4QUVCRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrly1mA0uc5cY7QxtL6Ab8H7F
5IuSSHn7CuDuVDnfiiXYq9p9XLnxxwjbVPm19EEPD0nP1gQa/Qv5VJNf2MroExrW
R1kDCd68KclsBwL1tNp7JaHo9i7o8LclNgcuMwVJD/ze7IPYhoy5+rADzyGNWPHD
LuN/qKQ164Jvn+k80opeJIlSBgc8M6+fF9qHkgu/xrfXRmPY5l2qLtkO/zjnRaYp
dQMBKlP1IEwKroQrPJiuSqA2PkUGKRY1Wy8HcOPMwUJj9Ty0I6HnhH7xAxbj9pys
Tzg5D5wseZTGDmciZJaZxU1Lh03XqGIW8phyPLGUIEKnLHn8kNr7ZMpb8dNhAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUeA1l1mjblcvcbvsrVm2a5YWK6+QwHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMTMxMzkyZTMx
MzUyZTMyMzIzNDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAV3D+AwDQYJKoZIhvcNAQELBQADggEBAEZCRLE1aGn2498KLjcONcC9
aMN4CxiEsmcUUBxovfn4UwMbQa544PJ9XR2LwCzbbj/3TXQiwCG3gD/rB02+B5Yw
lGIhFG/HPluVj58KmbOOP5qAnVLxPkfvqqRuMELswCHlphhJttEwh7u5Ii2u8Q47
JqS5Wcf2hdn3+jsDIIPBkCLGc5QDcoq1Q70a37nPz4QK8ZXgXhtfjZN9PY/WtB/n
ibrxSQYCS/Ns3BODktxSoeMJXH9RwsMR6EHHToUSKsyRi7dz46AKrQwsMzf3Qi1L
tWiFBpRpDuSO8itRqic8U57zVa0uN3Fuc3qH6cyX4syWwLehM0H1S6p6kMyZvvQ=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:42 2026 by rpki-client