Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oEutKZtR9SL4iUE0_krEO2W_trA.roa
File: oEutKZtR9SL4iUE0_krEO2W_trA.roa (raw, json)
Hash identifier: +RlmNsfIRsGmWDxtZSfZe05MJspk5i1jFQoGlYErXRY=
Subject key identifier: A0:4B:AD:29:9B:51:F5:22:F8:89:41:34:FE:4A:C4:3B:65:BF:B6:B0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10FC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oEutKZtR9SL4iUE0_krEO2W_trA.roa
Signing time: Mon 10 Feb 2025 13:56:41 +0000
ROA not before: Mon 10 Feb 2025 13:56:41 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 27.96.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4348 (0x10fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:41 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A04BAD299B51F522F8894134FE4AC43B65BFB6B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:e6:d5:c0:a4:cf:1c:31:0e:e2:9b:07:de:
77:49:d5:c8:03:e0:00:85:b0:e1:28:87:7f:49:b1:
a5:ee:e7:05:b5:76:4a:70:b3:ea:70:ff:43:5f:e7:
fa:f4:d5:4f:45:f3:9a:ab:bd:b4:cc:15:83:ae:57:
91:c9:12:88:c4:1f:e4:4b:5e:ad:62:94:6c:1a:97:
03:ee:e1:3b:a7:31:b0:72:96:87:85:9d:3d:85:9e:
4c:66:4c:de:e7:66:d3:bc:32:9d:6b:32:01:2a:fa:
ea:c9:56:d2:93:cc:b2:5b:73:dc:bd:2e:5e:83:f5:
43:6b:34:a1:a0:8e:2d:a3:e7:9f:c2:89:7f:02:2f:
2f:c2:86:62:8d:bc:88:80:45:9b:ee:74:3f:3f:4b:
d2:ae:e1:4e:3d:4b:c9:ff:1a:88:01:46:5b:18:3c:
41:47:ba:4d:a6:23:6d:b2:f2:a2:5d:14:7d:a5:ec:
36:e2:1e:db:8c:41:13:28:80:fd:5e:e9:2b:88:f6:
a7:3c:da:b9:ee:91:5b:9b:7a:ad:34:9a:33:24:de:
7f:47:12:ca:0c:74:51:d6:e2:0e:6b:83:18:15:eb:
c7:a7:9e:44:26:2c:d7:03:05:07:73:4b:88:4e:3a:
b1:62:86:e2:15:92:51:fd:48:88:0b:3d:01:58:13:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:AD:29:9B:51:F5:22:F8:89:41:34:FE:4A:C4:3B:65:BF:B6:B0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oEutKZtR9SL4iUE0_krEO2W_trA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:79:ff:b0:e8:4f:26:05:3e:0e:3d:46:ee:07:bb:a9:d7:e1:
dd:5b:dd:c4:f3:22:1e:6b:3a:0d:8a:07:0d:0a:c2:01:85:a7:
af:54:91:72:6e:89:d5:e7:57:87:64:03:25:6d:0e:d2:e4:08:
71:da:7e:0c:ca:1f:27:a4:49:3e:6c:e0:4f:bb:8d:49:72:54:
72:ec:86:38:46:f7:fe:8d:52:2d:93:3d:a6:df:7d:82:cd:58:
b5:a4:ff:dd:ff:41:3d:d7:9f:1e:48:e8:46:4c:06:50:23:eb:
54:f8:5b:7a:22:f7:5d:71:ce:7d:4b:7f:c5:11:d4:ba:ea:a9:
a1:09:c6:0a:58:89:f6:2e:e0:8a:0d:14:08:8d:94:5f:6d:ec:
81:fb:b9:ea:4d:ba:d5:31:ee:68:3a:f3:4d:e4:86:1a:5c:fc:
76:25:63:8d:d8:b8:61:5a:4c:a4:d7:3a:73:a0:4f:1b:57:1f:
d0:6b:5f:8d:9e:b9:1d:c0:42:42:61:76:d1:cb:41:0c:f5:df:
e3:6b:de:dd:6b:f6:7b:7c:52:e6:47:e7:72:be:27:0d:e2:cb:
8f:fc:9c:7a:ca:79:27:43:4a:5c:0d:1b:e5:9e:aa:74:02:fc:
9c:a5:12:f8:d5:56:51:d8:f2:6d:3c:08:bd:1d:9c:c9:48:43:
42:2f:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:05 2025 by rpki-client