Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/k4VYlSkPwC-JJmk34SlNYqFYmp0.roa
File: k4VYlSkPwC-JJmk34SlNYqFYmp0.roa (raw, json)
Hash identifier: +1NMRZag2qmbeTOKxqDvxT+mAmyZrytHY1cdklDfcXg=
Subject key identifier: 93:85:58:95:29:0F:C0:2F:89:26:69:37:E1:29:4D:62:A1:58:9A:9D
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0CD0
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/k4VYlSkPwC-JJmk34SlNYqFYmp0.roa
Signing time: Mon 10 Feb 2025 14:05:58 +0000
ROA not before: Mon 10 Feb 2025 14:05:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17416
IP address blocks: 112.213.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 16:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Feb 10 14:05:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=93855895290FC02F89266937E1294D62A1589A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fb:0b:89:c6:e9:14:bc:ec:57:5d:9f:f6:7c:
89:fa:b6:dd:0b:da:96:9d:d8:40:7c:ed:45:51:ef:
92:a1:d8:c9:0a:2a:bf:e8:9c:f0:19:d4:37:67:89:
3b:1a:95:e5:c5:e5:bc:d2:21:bb:0c:f2:00:66:de:
3f:7e:55:5a:84:8a:51:e2:4e:c0:75:86:ad:42:46:
d7:5f:19:0e:ac:55:76:f9:46:56:f8:45:c8:4e:90:
75:5d:d8:a5:88:89:3d:95:7b:b8:53:56:9a:21:e5:
07:80:28:2e:7c:85:0f:8e:05:f4:88:ba:08:b2:24:
24:84:23:47:fe:8a:49:f9:d7:49:9a:2c:e2:74:d7:
9d:11:ca:15:d3:80:23:ca:bb:24:55:98:92:31:38:
1e:d6:12:4a:7a:78:ad:c6:3c:ca:a0:da:91:c9:08:
cb:08:f5:68:60:95:d3:30:72:e5:cf:73:92:70:02:
b7:f0:9d:d4:97:7f:f6:02:bb:dc:f0:ee:e9:7d:4d:
13:78:00:ed:25:ea:d5:03:f7:1f:a4:24:b0:01:5b:
19:82:a1:34:e7:fa:48:47:01:3f:45:53:cb:9a:3f:
b1:7a:5c:7b:7e:ef:fc:f8:82:2f:8a:20:37:79:45:
2b:38:ed:6b:9b:dd:97:65:8e:68:1c:bc:2d:e2:bc:
55:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:58:95:29:0F:C0:2F:89:26:69:37:E1:29:4D:62:A1:58:9A:9D
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/k4VYlSkPwC-JJmk34SlNYqFYmp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.213.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:07:09:bd:cc:e6:f1:95:48:68:bb:76:ed:fb:53:e8:13:c7:
54:cc:51:55:68:dc:03:df:04:1e:5e:e5:23:e1:fe:c9:0e:99:
7b:14:3b:89:03:34:03:a0:2e:99:b9:5c:78:7f:bb:43:c1:3e:
7e:05:1e:f1:57:4e:e0:21:2b:e1:4f:1e:b8:86:be:80:25:37:
54:80:67:f2:4f:2c:8f:ad:c1:63:47:0b:4c:35:a7:d0:da:55:
d5:6f:39:65:53:b9:b3:43:b4:1e:2a:79:44:58:3a:dd:9c:18:
bc:ac:a7:e9:18:ad:1b:ac:a4:f5:de:8b:28:d7:ec:a2:47:82:
3c:71:b1:0d:72:7c:e3:0a:75:62:60:6b:b7:aa:14:80:05:cb:
5e:41:e6:53:f9:6f:0e:e3:ee:f5:e3:37:9d:1c:c8:a6:8d:1f:
7d:5f:70:ae:fa:ce:4a:a5:c5:1a:8d:54:27:53:5e:24:db:96:
ae:b7:c8:7a:cb:a4:5e:46:80:d2:31:67:b9:6a:b0:e6:07:bd:
74:69:29:f7:f8:69:4e:50:f4:6a:3b:66:68:f9:de:40:b6:7b:
db:19:6b:8f:61:3a:37:0b:a9:dc:4f:78:d8:a5:f7:d0:64:1f:
0f:0f:ee:9c:db:15:5b:ac:7b:6d:42:9e:aa:b0:94:a1:ca:67:
a2:ed:33:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:52:45 2025 by rpki-client