Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa
File: WjqfgXZft42R4CRgc-z_ouDP-SQ.roa (raw, json)
Hash identifier: X5YMSETl/OSBqM+aaZfKEwHFMfE53FRnQKMZ9chEkkQ=
Subject key identifier: 5A:3A:9F:81:76:5F:B7:8D:91:E0:24:60:73:EC:FF:A2:E0:CF:F9:24
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10ED
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa
Signing time: Mon 10 Feb 2025 13:56:36 +0000
ROA not before: Mon 10 Feb 2025 13:56:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 27.96.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 16:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5A3A9F81765FB78D91E0246073ECFFA2E0CFF924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:1a:e5:5f:76:94:fa:c8:7f:11:1d:2a:eb:
90:bf:c1:70:d6:24:85:7d:95:88:08:54:73:52:27:
81:0e:f7:cc:ff:6c:9e:74:45:9a:95:63:62:41:a7:
2e:18:8c:25:d4:a8:bb:de:56:f0:1e:29:fe:f7:68:
35:d3:c7:8d:42:d9:be:bc:b0:7c:46:1e:1d:93:22:
b6:1e:02:c7:be:ee:e2:82:2e:ee:c9:8f:a9:73:be:
ac:ad:99:99:28:2c:5d:d5:c0:c1:ab:92:00:af:63:
cf:56:6e:34:6c:16:7f:1d:b2:6b:46:13:6a:0f:db:
b1:63:1a:75:5a:67:a4:38:5c:22:54:2e:2a:e7:49:
51:ba:7a:ac:85:a8:57:7f:21:80:b3:46:ab:bb:bc:
59:34:1d:b4:f0:c3:47:70:34:99:55:9e:55:25:b1:
2e:2a:69:18:0b:a2:b7:4d:42:ed:f5:90:74:c1:ab:
a3:5f:b3:5c:07:39:77:27:41:4e:96:4c:c6:b0:2a:
5a:39:00:95:ab:67:3c:f3:8d:eb:7a:36:c4:86:69:
60:2b:03:b1:4a:5c:68:fa:e0:e0:12:d6:eb:a2:2e:
52:42:f9:a0:45:bc:2e:82:20:8e:47:5d:2e:e9:a3:
02:b5:65:1e:e6:f6:73:8e:16:81:a0:df:60:5a:38:
08:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:9F:81:76:5F:B7:8D:91:E0:24:60:73:EC:FF:A2:E0:CF:F9:24
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WjqfgXZft42R4CRgc-z_ouDP-SQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:5f:ba:91:e1:6b:4f:96:52:5c:f3:9f:1c:1c:09:e9:6d:68:
60:01:d8:3c:4b:40:94:ea:a5:1f:45:4b:38:9a:47:ee:75:c3:
db:92:4d:31:ad:c6:6a:2f:26:e2:77:f1:68:5f:48:56:78:f8:
a7:39:f2:b6:5f:db:6f:e5:17:59:73:d9:00:16:42:92:86:5b:
94:e7:7a:ba:8b:20:37:73:08:d1:aa:43:5b:ed:7c:74:14:9c:
f8:85:b1:93:08:6a:64:10:e0:d9:ca:5e:90:30:33:62:8e:15:
70:e8:4a:91:52:9f:a0:cc:55:be:47:ac:4c:56:03:8f:56:a6:
ca:cf:22:aa:6d:a1:96:66:a5:37:1a:59:10:52:b9:77:7c:57:
54:86:bc:bc:f5:cd:55:7c:3f:58:40:dc:19:e0:45:8f:50:e1:
0c:0a:8c:53:d0:66:61:54:06:b2:c8:c5:7c:b7:72:6a:40:42:
37:27:d0:c9:c9:92:c8:64:fe:be:60:8f:3d:3a:7c:d9:5c:5f:
55:7f:df:a7:0f:cf:67:33:82:fc:ec:26:9a:46:9b:75:9c:35:
22:61:0c:b7:03:e9:4a:06:9d:ec:74:33:4d:31:e3:c6:60:df:
af:19:0b:47:6e:eb:2a:dd:a3:ad:38:ac:e4:3b:ea:5b:80:ff:
94:a4:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:52:50 2025 by rpki-client