Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3232203d3e203137383039.roa
File:                     3230332e3231372e39362e302f31392d3232203d3e203137383039.roa (raw, json)
Hash identifier:          8y8aqGksZ6fGksHDPjdgVuLnncqtFTXng+Sfl23eTdw=
Subject key identifier:   F9:2C:CB:65:12:B7:AD:23:02:67:5C:5A:A4:65:73:F6:44:AC:23:2A
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       7827F1CE3BCAFF27317B63EB4F3C17E6697652
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3232203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:35 +0000
ROA not before:           Thu 21 May 2026 15:52:35 +0000
ROA not after:            Thu 20 May 2027 15:57:35 +0000
asID:                     17809
IP address blocks:        203.217.96.0/19 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 01:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:27:f1:ce:3b:ca:ff:27:31:7b:63:eb:4f:3c:17:e6:69:76:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:35 2026 GMT
            Not After : May 20 15:57:35 2027 GMT
        Subject: CN=F92CCB6512B7AD2302675C5AA46573F644AC232A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:43:63:8e:4e:2b:e5:a0:bd:f7:b8:af:bc:
                    e8:52:9d:f1:b4:2a:a1:dd:34:61:64:d8:37:ed:62:
                    a1:5f:38:32:ff:9a:0d:36:a6:8d:bf:c7:83:e4:51:
                    45:ea:c1:6e:87:1c:1a:ab:81:7e:24:e0:29:f3:de:
                    5e:20:fe:8e:8f:56:4f:28:93:2f:a7:64:c9:3d:3a:
                    bb:cc:0f:5c:b0:e4:63:b6:89:85:28:91:a6:99:63:
                    a7:0a:5b:c5:89:d9:da:8f:6e:2c:30:42:96:21:9e:
                    58:7a:1d:94:dc:c3:19:11:9e:26:64:66:4b:16:0a:
                    fe:2c:10:65:bd:39:83:79:53:41:68:1d:ab:f1:70:
                    5d:26:2a:cc:9a:06:9e:6c:2a:54:63:62:9b:21:12:
                    1b:31:6e:68:5b:73:23:5d:6c:aa:71:96:84:69:c9:
                    0a:2e:9c:1c:fc:99:60:b0:02:5c:33:b3:f8:34:7a:
                    58:86:a6:ae:4b:2d:65:ba:13:31:88:0d:ca:d3:c5:
                    b0:b1:ce:a6:c6:64:6d:98:8e:2a:7d:ac:f3:ac:59:
                    52:00:70:a4:87:5a:fe:b7:3f:9b:ee:c6:c8:e3:d4:
                    b7:ee:81:79:bb:f6:aa:f2:ad:bb:38:86:6f:36:5f:
                    3b:39:f9:d9:17:3e:64:22:c0:45:aa:73:a8:d8:3a:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2C:CB:65:12:B7:AD:23:02:67:5C:5A:A4:65:73:F6:44:AC:23:2A
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3232203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:8b:c5:42:5d:d5:61:c7:cd:79:69:bc:c1:1c:d5:01:b7:
         ba:68:84:eb:bf:d2:ad:51:20:37:70:8b:05:86:83:ff:cc:c2:
         29:98:89:89:b7:16:e3:3f:48:33:98:b1:c4:36:d7:7a:eb:00:
         5f:b4:93:c6:25:72:6c:70:f9:b1:b3:e5:4f:38:94:ad:a2:a7:
         39:58:dc:e4:f6:2c:6f:67:02:af:f2:0a:81:fb:5a:f4:90:fa:
         6e:e0:a9:2e:1b:98:5c:52:b4:56:76:1f:70:13:ea:f3:1d:e4:
         12:e7:8b:eb:ca:a8:31:1c:c1:e7:f7:91:49:31:e7:72:fb:5e:
         69:91:e6:70:c5:1c:d6:b5:41:06:0c:c3:ac:06:be:0f:c5:c1:
         b8:88:79:33:e6:e1:de:fd:94:f5:83:68:89:7e:d5:5f:e9:01:
         a2:f3:b4:97:44:3c:39:77:12:33:60:5a:21:37:0b:3d:16:81:
         63:01:bc:3d:2b:71:0e:cb:44:79:80:1d:96:b1:2f:f9:9e:63:
         bf:44:ec:8e:89:5b:f2:b5:fa:15:39:5b:6c:5f:50:8b:ea:22:
         06:0d:4c:e7:33:f5:8d:99:e3:60:0f:e5:0e:05:25:fa:a9:e3:
         5d:da:c6:ed:3c:ea:ab:f9:82:fb:44:b3:f0:c1:a4:7b:0d:9c:
         3b:c5:a0:0a
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgITeCfxzjvK/ycxe2PrTzwX5ml2UjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFQ0EzQkI0MjU2RkM4Q0FDQkY0MzYyMjlBQkMwREEyODhF
NjRBNjcxMB4XDTI2MDUyMTE1NTIzNVoXDTI3MDUyMDE1NTczNVowMzExMC8GA1UE
AxMoRjkyQ0NCNjUxMkI3QUQyMzAyNjc1QzVBQTQ2NTczRjY0NEFDMjMyQTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALBrQ2OOTivloL33uK+86FKd8bQq
od00YWTYN+1ioV84Mv+aDTamjb/Hg+RRRerBboccGquBfiTgKfPeXiD+jo9WTyiT
L6dkyT06u8wPXLDkY7aJhSiRppljpwpbxYnZ2o9uLDBCliGeWHodlNzDGRGeJmRm
SxYK/iwQZb05g3lTQWgdq/FwXSYqzJoGnmwqVGNimyESGzFuaFtzI11sqnGWhGnJ
Ci6cHPyZYLACXDOz+DR6WIamrkstZboTMYgNytPFsLHOpsZkbZiOKn2s86xZUgBw
pIda/rc/m+7GyOPUt+6Bebv2qvKtuziGbzZfOzn52Rc+ZCLARapzqNg6v28CAwEA
AaOCAeUwggHhMB0GA1UdDgQWBBT5LMtlEretIwJnXFqkZXP2RKwjKjAfBgNVHSME
GDAWgBTso7tCVvyMrL9DYimrwNoojmSmcTAOBgNVHQ8BAf8EBAMCB4AwZAYDVR0f
BF0wWzBZoFegVYZTcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRUVUSU1F
LzAvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4RTY0QTY3MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FQ0EzQkI0MjU2RkM4Q0FDQkY0MzYyMjlBQkMw
REEyODhFNjRBNjcxLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElNRS8wLzMyMzAzMzJlMzIz
MTM3MmUzOTM2MmUzMDJmMzEzOTJkMzIzMjIwM2QzZTIwMzEzNzM4MzAzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBcvZYDANBgkqhkiG9w0BAQsFAAOCAQEAaC2LxUJd1WHHzXlpvMEc1QG3
umiE67/SrVEgN3CLBYaD/8zCKZiJibcW4z9IM5ixxDbXeusAX7STxiVybHD5sbPl
TziUraKnOVjc5PYsb2cCr/IKgfta9JD6buCpLhuYXFK0VnYfcBPq8x3kEueL68qo
MRzB5/eRSTHncvteaZHmcMUc1rVBBgzDrAa+D8XBuIh5M+bh3v2U9YNoiX7VX+kB
ovO0l0Q8OXcSM2BaITcLPRaBYwG8PStxDstEeYAdlrEv+Z5jv0Tsjolb8rX6FTlb
bF9Qi+oiBg1M5zP1jZnjYA/lDgUl+qnjXdrG7Tzqq/mC+0Sz8MGkew2cO8WgCg==
-----END CERTIFICATE-----
Generated at Tue Jun 16 17:30:57 2026 by rpki-client