Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa
File: XKLpCUWSbOk2UzRGGWRiBdssaSA.roa (raw, json)
Hash identifier: cQU9oZ8GdRdxh39Xhm9RbfqY1aU6Xp1JSX9xyQRWOrc=
Subject key identifier: 5C:A2:E9:09:45:92:6C:E9:36:53:34:46:19:64:62:05:DB:2C:69:20
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 125D
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa
Signing time: Mon 10 Feb 2025 14:28:20 +0000
ROA not before: Mon 10 Feb 2025 14:28:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9922
IP address blocks: 124.218.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Apr 2025 17:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4701 (0x125d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5CA2E90945926CE93653344619646205DB2C6920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:e8:8f:95:1b:40:0c:ff:9b:ba:f9:75:fb:
f8:83:2f:e9:0e:58:21:99:f7:d2:ac:0a:ed:bc:90:
66:82:ee:4e:2a:36:de:95:cc:b6:69:2b:c7:8b:d2:
4d:25:5f:c6:d8:b9:0b:58:94:38:60:91:ee:18:6a:
09:70:3e:06:7b:cf:55:55:74:b1:91:71:83:72:dd:
07:76:43:7b:12:c3:37:96:76:5b:86:5f:e5:d9:71:
e8:b0:44:41:d1:44:fe:0f:c2:a4:69:b7:e3:ef:cd:
6b:6c:39:9c:44:e0:71:38:af:ce:07:08:3d:f0:14:
62:2e:c1:46:01:6e:33:84:de:40:64:90:83:a6:44:
ce:b6:d4:55:89:70:cb:57:65:42:f1:24:4b:8e:c7:
30:f3:7d:02:f0:96:98:6e:58:23:42:73:40:c0:86:
d0:55:2f:92:6a:07:e3:a7:ab:6b:94:b4:56:84:1a:
1d:de:ad:23:8c:89:28:5b:23:5e:4a:ea:06:56:6c:
28:64:d3:a5:85:17:7d:78:f9:9b:12:d5:cc:a6:33:
c1:2c:62:32:65:c8:48:07:ae:98:f1:64:4d:7f:b6:
73:a1:ec:8a:db:b4:22:ce:f2:f0:3c:9b:d2:d2:7a:
72:e8:45:08:76:ce:a3:f0:72:34:fb:7e:fa:58:74:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A2:E9:09:45:92:6C:E9:36:53:34:46:19:64:62:05:DB:2C:69:20
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/XKLpCUWSbOk2UzRGGWRiBdssaSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.172.0/24
Signature Algorithm: sha256WithRSAEncryption
43:70:82:e5:8d:67:e3:97:1e:98:01:15:71:b1:3c:30:a3:59:
96:5b:b5:fa:da:4f:21:c9:5d:05:e3:d8:30:e6:d4:ec:9f:92:
3d:60:54:3d:9d:92:68:07:5f:10:70:89:c5:37:f0:43:0f:f0:
b8:28:05:7a:f4:40:85:80:fd:9f:ed:c3:2d:ed:bc:30:41:60:
23:c9:29:da:24:64:ca:1a:fe:74:44:84:64:c9:06:e6:65:4d:
f0:69:e3:db:17:b1:87:43:19:4f:6b:1e:aa:60:e1:5d:ca:5d:
70:f1:1d:51:43:d4:c7:5d:ce:24:46:58:18:7f:9a:c2:d8:b9:
a9:27:06:f5:ea:bc:17:a4:59:a8:58:aa:d3:e8:8b:ce:a6:75:
cb:1c:7f:c8:13:0f:b3:8c:f1:59:b3:77:38:5f:a7:84:53:df:
54:c1:bf:9f:71:e5:2a:9e:f4:87:d6:92:13:ee:c9:d7:03:40:
84:41:a8:db:52:cb:4c:37:7b:ed:75:bc:59:da:0f:aa:27:1c:
60:b4:9d:7b:fd:67:33:07:1c:22:33:1b:bd:de:f0:82:d1:b0:
97:f4:01:9e:af:d0:6e:c3:fe:5e:fc:e7:cf:17:ff:49:1a:ff:
2b:b3:9d:c5:ee:ac:3c:4a:c0:e0:d7:eb:45:e5:d0:64:9b:1c:
25:a6:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 13:22:01 2025 by rpki-client