Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e36342e302f31382d3234203d3e2034373830.roa
File:                     3132312e3235342e36342e302f31382d3234203d3e2034373830.roa (raw, json)
Hash identifier:          bTIS05yqni+klNwylA5PtsysbK6d2bXcCqtUGuWP5m8=
Subject key identifier:   18:6F:95:CC:6F:AA:C5:D5:FB:C6:5F:B5:DE:91:A2:D5:6E:F4:2D:BE
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       4A78AB12A3E26BA4830E70A2CC4E3AD00CAEB55D
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e36342e302f31382d3234203d3e2034373830.roa
Signing time:             Thu 21 May 2026 15:57:39 +0000
ROA not before:           Thu 21 May 2026 15:52:39 +0000
ROA not after:            Thu 20 May 2027 15:57:39 +0000
asID:                     4780
IP address blocks:        121.254.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 21:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:78:ab:12:a3:e2:6b:a4:83:0e:70:a2:cc:4e:3a:d0:0c:ae:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:39 2026 GMT
            Not After : May 20 15:57:39 2027 GMT
        Subject: CN=186F95CC6FAAC5D5FBC65FB5DE91A2D56EF42DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:d1:ae:e8:ef:46:1a:f9:d6:a9:9d:4f:f7:
                    62:a7:47:a0:53:d0:ae:b3:dc:8d:83:f1:5c:8b:ea:
                    fa:63:e1:aa:92:bb:ad:da:a9:f0:c8:97:c1:0c:60:
                    14:99:eb:c8:9f:f7:5a:95:d0:cb:ac:3b:47:6d:09:
                    6f:e2:bd:da:f0:eb:12:15:c5:82:29:b5:61:ae:06:
                    1c:f3:6f:02:47:61:fa:0a:6f:bd:77:dd:48:29:1e:
                    fc:42:42:fe:a6:c2:45:11:9a:07:ed:7a:f9:af:10:
                    fb:c3:fd:26:e8:41:a0:67:91:d7:06:f7:78:c7:a2:
                    f0:a7:41:57:82:e3:a2:ad:37:e5:0b:8a:9b:38:ee:
                    56:cb:dd:38:58:46:f3:70:db:df:28:0d:90:25:92:
                    c4:5d:47:57:2a:f9:1b:5f:61:50:8b:96:37:19:eb:
                    84:05:9c:da:99:86:47:cb:b6:1b:74:7d:db:15:5a:
                    6f:53:c3:f7:fd:8b:94:fb:25:6f:bf:80:46:e5:d7:
                    d9:bf:5c:e4:1a:40:8d:c7:95:59:69:b2:e4:bb:d2:
                    9e:a7:85:64:13:a7:0f:93:0a:02:0a:b6:e6:b4:f5:
                    fe:81:39:b4:23:5c:1e:17:1d:80:bc:d2:f9:53:ef:
                    85:56:54:73:c8:2d:54:12:6e:a8:05:17:d1:0b:06:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:95:CC:6F:AA:C5:D5:FB:C6:5F:B5:DE:91:A2:D5:6E:F4:2D:BE
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3132312e3235342e36342e302f31382d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:ec:48:8b:ea:70:9a:c2:a3:a7:38:a0:d2:aa:39:6b:87:
         93:4a:5e:8e:8b:98:83:ff:a9:75:46:62:78:a7:c2:3a:a5:ad:
         3f:10:6f:d1:fa:f7:d0:af:c4:c6:82:d4:8f:6f:0d:49:a6:8b:
         7f:83:89:ba:c5:9d:4f:6d:e6:42:b5:f6:c7:4c:6b:0f:fa:ad:
         d5:de:a6:59:18:4c:68:4a:2b:9e:21:a3:c6:2d:13:82:79:6c:
         70:e1:dd:03:c5:d8:ce:21:b8:d5:44:14:c7:31:64:af:ce:c1:
         87:8c:74:a5:62:dd:5d:9b:3e:be:20:43:1b:40:b4:e2:bd:e5:
         19:53:ac:10:6c:7a:ac:93:43:5e:3e:af:c6:63:cd:e3:a3:8b:
         d0:99:5d:3c:c2:83:c0:0c:63:1c:ab:86:d1:f4:46:4e:bf:4f:
         80:64:65:ae:77:38:ad:a4:35:b8:bd:06:52:b7:0d:92:10:13:
         7b:61:e6:a6:35:d7:57:26:c6:d2:52:4c:1f:a7:0f:32:7f:c8:
         d7:a6:00:7b:41:c0:8e:39:ac:94:c1:09:42:41:fe:cd:ed:79:
         65:1b:35:10:d4:c4:cd:2c:30:c0:50:98:4e:e2:a5:fc:aa:41:
         f3:5a:59:7d:50:31:46:a4:c0:88:ed:ae:78:83:28:03:c6:ff:
         6e:45:38:c7
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUSnirEqPia6SDDnCizE460AyutV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4
RTY0QTY3MTAeFw0yNjA1MjExNTUyMzlaFw0yNzA1MjAxNTU3MzlaMDMxMTAvBgNV
BAMTKDE4NkY5NUNDNkZBQUM1RDVGQkM2NUZCNURFOTFBMkQ1NkVGNDJEQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZdGu6O9GGvnWqZ1P92KnR6BT
0K6z3I2D8VyL6vpj4aqSu63aqfDIl8EMYBSZ68if91qV0MusO0dtCW/ivdrw6xIV
xYIptWGuBhzzbwJHYfoKb7133UgpHvxCQv6mwkURmgftevmvEPvD/SboQaBnkdcG
93jHovCnQVeC46KtN+ULips47lbL3ThYRvNw298oDZAlksRdR1cq+RtfYVCLljcZ
64QFnNqZhkfLtht0fdsVWm9Tw/f9i5T7JW+/gEbl19m/XOQaQI3HlVlpsuS70p6n
hWQTpw+TCgIKtua09f6BObQjXB4XHYC80vlT74VWVHPILVQSbqgFF9ELBoH3AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUGG+VzG+qxdX7xl+13pGi1W70Lb4wHwYDVR0j
BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN
RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD
MERBMjg4RTY0QTY3MS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMTMyMzEyZTMy
MzUzNDJlMzYzNDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM0MzczODMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQGef5AMA0GCSqGSIb3DQEBCwUAA4IBAQBcJexIi+pwmsKjpzig0qo5a4eT
Sl6Oi5iD/6l1RmJ4p8I6pa0/EG/R+vfQr8TGgtSPbw1Jpot/g4m6xZ1PbeZCtfbH
TGsP+q3V3qZZGExoSiueIaPGLROCeWxw4d0DxdjOIbjVRBTHMWSvzsGHjHSlYt1d
mz6+IEMbQLTiveUZU6wQbHqsk0NePq/GY83jo4vQmV08woPADGMcq4bR9EZOv0+A
ZGWudzitpDW4vQZStw2SEBN7YeamNddXJsbSUkwfpw8yf8jXpgB7QcCOOayUwQlC
Qf7N7XllGzUQ1MTNLDDAUJhO4qX8qkHzWll9UDFGpMCI7a54gygDxv9uRTjH
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:15 2026 by rpki-client