Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2034373830.roa
File:                     3230332e3231372e39362e302f31392d3234203d3e2034373830.roa (raw, json)
Hash identifier:          6IyThUGa2ycO4y3OXUt/wskU1Bxg0Jhey7x1RLswBDA=
Subject key identifier:   B0:37:AB:BA:1F:B3:27:02:CE:3A:95:A0:14:8F:7F:D3:5B:B9:C2:68
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       3A0231D6710A26846FE69D5FD976B3E8830986DD
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2034373830.roa
Signing time:             Thu 21 May 2026 15:57:15 +0000
ROA not before:           Thu 21 May 2026 15:52:15 +0000
ROA not after:            Thu 20 May 2027 15:57:15 +0000
asID:                     4780
IP address blocks:        203.217.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 21:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:02:31:d6:71:0a:26:84:6f:e6:9d:5f:d9:76:b3:e8:83:09:86:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:15 2026 GMT
            Not After : May 20 15:57:15 2027 GMT
        Subject: CN=B037ABBA1FB32702CE3A95A0148F7FD35BB9C268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:ab:46:a0:d7:f7:17:1b:1e:23:da:86:8f:
                    69:00:79:67:9a:78:3e:5f:c9:b2:a1:88:c0:6d:83:
                    1c:03:d6:1f:c5:18:5b:d6:17:77:81:2f:a0:c5:80:
                    e4:9c:68:c9:75:1e:a6:ee:7e:d7:d0:e7:1c:8d:1c:
                    4c:e4:a6:dd:90:bf:6b:c6:cc:94:92:1f:4c:45:73:
                    f3:23:16:4b:a4:bb:47:3c:ea:b9:3e:0c:cc:3a:ac:
                    89:99:ef:0a:b2:ac:e1:e3:a7:d8:73:b3:cd:0b:18:
                    1c:63:6e:df:eb:0b:aa:3c:b4:d9:20:a4:ee:c0:5b:
                    1f:bf:b4:bf:a3:83:96:8f:c1:d0:95:8a:19:14:91:
                    5a:b9:e0:e7:b4:a9:ee:d3:a7:7e:0c:e3:63:12:99:
                    b4:9c:fd:61:ec:6c:db:ce:45:5a:fa:28:5f:84:04:
                    0a:48:46:60:aa:85:6f:30:ce:5c:b7:c2:7b:76:ef:
                    f8:22:ce:62:f1:20:5f:46:0e:ed:03:fb:3d:c5:65:
                    fd:08:c8:55:9b:20:89:8c:57:c3:7c:e5:5f:fa:2a:
                    3f:33:c9:0f:46:3f:6f:12:8b:40:f1:14:1c:06:50:
                    a8:65:4c:a4:d7:a7:81:b7:93:5e:d3:01:b5:58:ab:
                    47:0b:2e:3e:81:d6:de:02:ab:04:11:6a:58:1c:33:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:AB:BA:1F:B3:27:02:CE:3A:95:A0:14:8F:7F:D3:5B:B9:C2:68
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3231372e39362e302f31392d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:78:ff:1d:0c:9c:7f:cc:50:d7:d8:7f:8f:fe:10:d5:0b:22:
         94:27:55:a8:40:7f:c8:a8:64:39:78:8b:50:5d:46:57:98:d6:
         58:ce:c3:44:08:68:a7:22:c4:1a:93:e2:f2:a5:a9:10:1f:a4:
         45:e3:ca:98:78:f0:df:ee:50:e1:90:d2:de:e8:53:c2:50:64:
         6d:48:79:3f:8f:f2:f4:ac:f4:cd:43:27:7a:7b:84:86:43:24:
         ed:83:58:a8:2b:38:71:7b:41:06:9e:2c:4b:a6:79:dc:a4:84:
         57:bc:b8:e7:e9:e5:e0:2c:b8:42:98:5d:5b:1e:e7:f5:a4:bc:
         3e:62:ba:b0:3f:bf:e3:8b:4c:67:35:b1:89:29:be:98:6d:32:
         9f:b6:04:66:92:b6:6c:e2:ef:b3:e6:12:a2:fc:10:43:b2:29:
         74:cf:79:26:b9:4b:e1:ed:be:d6:a3:83:81:44:36:04:71:40:
         8d:6a:51:62:af:e8:d5:68:8a:2e:5f:b2:e1:be:27:94:b1:10:
         4b:a6:66:36:b4:57:39:96:5f:a8:36:cb:f8:1a:87:37:74:7e:
         d8:cf:66:76:82:1b:8e:f2:a9:b2:65:d7:ac:03:84:2c:27:fb:
         1c:97:fc:cf:09:d5:e0:48:61:47:89:25:b0:e4:15:1b:97:6e:
         cf:cf:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:16 2026 by rpki-client