Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e2034373830.roa
File:                     3230332e3232322e302e302f31392d3234203d3e2034373830.roa (raw, json)
Hash identifier:          Y8rGJQDQGhq25m3jXkgdmu1dy3xVypKDMLLoLLsqQFQ=
Subject key identifier:   4E:FE:AC:7B:22:D1:0D:E1:6A:0B:25:3C:E6:41:D5:EC:56:BE:91:6A
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       5A7C10E735B270F34C2748D68A6ABD3684E010BF
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e2034373830.roa
Signing time:             Thu 21 May 2026 15:57:54 +0000
ROA not before:           Thu 21 May 2026 15:52:54 +0000
ROA not after:            Thu 20 May 2027 15:57:54 +0000
asID:                     4780
IP address blocks:        203.222.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 21:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7c:10:e7:35:b2:70:f3:4c:27:48:d6:8a:6a:bd:36:84:e0:10:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:54 2026 GMT
            Not After : May 20 15:57:54 2027 GMT
        Subject: CN=4EFEAC7B22D10DE16A0B253CE641D5EC56BE916A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b1:66:ca:88:3f:17:ee:fa:9d:bc:d2:10:e8:
                    0a:ac:b3:48:d5:72:64:32:fe:78:cf:51:ce:3a:6c:
                    8a:85:53:ad:f0:98:fe:c5:45:7b:21:9b:ce:a9:82:
                    2e:1f:e9:c4:79:cf:2e:3f:bb:f3:76:b8:ef:53:15:
                    52:b4:e6:7c:cb:3c:34:77:e8:73:be:c8:58:76:8e:
                    a6:65:f1:dd:e4:42:43:ed:f9:6c:51:49:e9:bf:84:
                    b4:c2:09:dc:99:a1:a5:79:a1:19:bf:bc:87:ea:69:
                    81:1b:58:f9:d9:18:ff:8c:23:c4:3a:b0:b3:59:b3:
                    c7:5e:13:ea:77:1f:f7:2a:22:1b:09:9c:b7:a5:be:
                    98:f1:dd:b8:0f:6d:f2:85:3e:fc:a9:19:2e:41:fa:
                    31:05:21:3f:49:c8:15:25:19:5b:1e:12:11:2f:d0:
                    f1:1c:2b:16:a1:a6:ea:7f:4f:59:ec:83:1a:8f:02:
                    32:d7:f7:7b:c3:07:30:56:1d:46:5f:3c:00:3b:c4:
                    2b:b5:ef:85:fa:f0:46:e5:9f:ff:63:55:f2:0a:79:
                    c0:32:f3:e7:8c:23:97:1f:ef:3d:b6:b1:a8:c4:bd:
                    6d:af:c5:13:2a:42:da:46:4a:74:12:ee:e5:ac:cd:
                    0e:ea:1a:4c:af:82:95:b4:a4:e6:6b:2e:eb:13:12:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:AC:7B:22:D1:0D:E1:6A:0B:25:3C:E6:41:D5:EC:56:BE:91:6A
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.222.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:f3:e5:d8:74:e9:a8:b6:bb:34:fa:0c:2e:23:1d:74:ae:
         65:dd:b7:81:ec:41:86:36:12:6d:68:09:4a:60:69:69:56:db:
         41:3c:72:17:fd:3f:f8:0f:4a:7c:44:61:12:2a:3a:73:c5:f5:
         0d:55:c7:75:81:ec:c3:94:b2:24:44:d5:19:a7:9e:04:21:29:
         7a:9a:68:16:77:8e:83:e0:0a:c7:c3:41:31:a7:f7:2d:a1:e8:
         53:1c:1a:89:4e:a0:af:78:98:06:7d:89:45:b3:99:20:f1:79:
         bb:14:a5:41:7b:6a:6b:15:97:da:67:17:dd:45:7c:f9:6f:c1:
         0f:8a:e7:a6:a5:27:3b:bc:88:4c:f2:f0:d9:a1:8e:a6:e4:f4:
         b9:95:04:0d:a2:cc:b3:8f:60:df:82:96:32:71:5a:27:cc:19:
         86:f4:43:7c:11:c2:2c:d4:bc:ad:5e:e9:85:c1:8a:eb:63:d4:
         94:b1:20:e1:74:e4:5f:33:44:de:b5:d1:2f:8c:af:8b:c0:bc:
         05:0c:eb:d7:50:8b:92:27:65:8c:f5:5d:84:bd:c8:88:a1:f1:
         ed:55:26:d7:49:35:f5:28:3b:f6:c9:62:0d:81:3b:26:b9:6d:
         7f:61:d0:5f:3f:3f:c5:01:14:71:cd:aa:aa:c4:ef:55:6e:b0:
         87:d8:09:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:16 2026 by rpki-client