Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3232342e302f31392d3139203d3e203137383039.roa
File:                     3231302e3230392e3232342e302f31392d3139203d3e203137383039.roa (raw, json)
Hash identifier:          ji02NDikATXPurA1vuZ1PzF46rcYqiBliphNfUUpwsE=
Subject key identifier:   24:89:68:91:63:2F:A0:0A:F0:E5:D6:DE:7C:DE:C3:E0:6F:F6:39:DA
Certificate issuer:       /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
Certificate serial:       05CCF7C178B31FA8C593B48ACD21D77CA22971D2
Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3232342e302f31392d3139203d3e203137383039.roa
Signing time:             Thu 21 May 2026 15:57:32 +0000
ROA not before:           Thu 21 May 2026 15:52:32 +0000
ROA not after:            Thu 20 May 2027 15:57:32 +0000
asID:                     17809
IP address blocks:        210.209.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl
                          rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 01:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cc:f7:c1:78:b3:1f:a8:c5:93:b4:8a:cd:21:d7:7c:a2:29:71:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671
        Validity
            Not Before: May 21 15:52:32 2026 GMT
            Not After : May 20 15:57:32 2027 GMT
        Subject: CN=24896891632FA00AF0E5D6DE7CDEC3E06FF639DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:c7:e7:aa:78:85:64:99:f5:aa:41:50:df:
                    e6:68:7e:b8:8a:b2:0a:3d:8d:d7:8c:86:89:17:e2:
                    fb:7d:76:54:18:6a:4e:ee:a7:9e:9d:40:ec:1b:a9:
                    32:e9:76:3c:b0:ae:5c:14:75:18:03:5b:a8:a8:c2:
                    6a:15:c8:5b:49:8a:7c:0e:0a:39:fa:8e:81:c1:e5:
                    21:af:f0:e2:ae:5e:d9:6c:65:51:5f:cf:06:d7:f2:
                    a0:2f:88:a3:37:30:d8:ab:bd:3d:47:8f:89:72:3f:
                    c9:34:90:51:b9:05:b8:49:1a:3d:13:75:82:f9:26:
                    0c:f3:b4:ce:6a:01:42:c3:2c:f5:c5:cd:c5:a5:da:
                    cf:d7:4c:62:60:2e:61:e1:54:59:ce:0d:b3:0d:ac:
                    a9:77:6b:a8:6e:7c:a8:94:69:8e:74:72:13:da:62:
                    a7:83:42:5a:0a:51:55:fe:49:19:77:ca:ee:1c:70:
                    56:fe:97:d5:bb:67:32:0d:75:e1:d2:3e:99:99:09:
                    e5:2e:c1:07:07:c0:6d:da:1e:49:ec:d5:c0:24:61:
                    5d:cc:57:6c:b9:2d:56:fc:fd:00:35:5c:14:ed:b2:
                    97:13:9a:07:ec:1f:cd:d4:0f:12:dc:d8:6b:7e:b9:
                    52:92:17:8d:7a:fd:e9:3b:4a:94:44:f5:51:dc:15:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:68:91:63:2F:A0:0A:F0:E5:D6:DE:7C:DE:C3:E0:6F:F6:39:DA
            X509v3 Authority Key Identifier:
                keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3232342e302f31392d3139203d3e203137383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.209.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:b1:6a:bd:ab:e1:01:e6:82:79:a2:e8:5a:be:53:a3:80:
         67:94:69:bb:3b:57:13:aa:0e:e3:23:5b:40:84:92:dc:5e:ad:
         fa:bb:f9:5e:82:35:e6:1f:ca:e7:ca:ee:a8:d9:4f:66:c6:90:
         46:cd:13:49:43:a4:10:07:ba:73:c8:0d:ed:d6:1e:c5:36:09:
         27:e2:56:f0:f3:1a:e2:c9:72:bc:cf:75:42:85:a9:98:80:6b:
         8e:39:2d:17:d5:72:bc:6f:00:02:3f:62:26:88:35:e5:0d:64:
         be:e6:68:10:ba:1a:ef:06:53:b1:a5:6c:68:c1:71:f1:6f:08:
         e1:75:77:5e:22:c8:0c:42:ba:16:a7:8f:bc:f1:3d:7b:35:20:
         e1:c2:39:cb:e6:c3:fc:11:39:b4:30:61:8e:28:91:e8:5f:b8:
         9e:19:34:a3:a6:f2:6a:b7:dc:ca:17:51:9b:7d:7b:a2:35:84:
         73:0f:0a:6b:e8:a7:0a:cd:27:b1:95:89:27:ad:dc:1f:9b:fb:
         70:71:f2:b1:eb:48:d8:57:0f:43:45:d3:57:e1:5b:b8:cf:22:
         47:c2:91:27:60:96:7b:76:02:dd:bf:36:e8:c4:a8:f1:a9:9e:
         45:0d:90:1d:b0:2e:1a:09:43:05:14:34:0e:68:ac:b0:18:9c:
         f6:96:75:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 17:30:05 2026 by rpki-client