Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa
File: _DlYsiK0eGK1bpMRqIH4JDDz3OU.roa (raw, json)
Hash identifier: h4mN6FThFqTbYo8/TceB2wUmAfyFmyikxkLqWY7TLgU=
Subject key identifier: FC:39:58:B2:22:B4:78:62:B5:6E:93:11:A8:81:F8:24:30:F3:DC:E5
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1214
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa
Signing time: Mon 10 Feb 2025 14:28:02 +0000
ROA not before: Mon 10 Feb 2025 14:28:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131591
IP address blocks: 222.250.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 20:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4628 (0x1214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FC3958B222B47862B56E9311A881F82430F3DCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:c3:ac:68:fe:4e:72:69:9a:00:62:fd:79:
b3:9c:8d:c7:78:b4:a8:f7:19:51:4e:5a:6f:85:ef:
71:85:6d:6d:79:cd:8e:1a:28:3e:3b:00:7f:11:9a:
a6:3a:1b:14:08:0d:ac:22:88:97:3e:ac:0b:6d:c8:
fa:11:d5:65:69:44:62:25:2c:9a:58:7e:9f:a3:9f:
cc:0d:eb:2e:06:09:99:58:bd:90:b8:91:0e:a5:0d:
02:01:83:c3:31:cc:7e:17:43:da:41:9a:7d:f0:26:
de:d5:92:6c:60:e4:c6:c9:06:dc:1f:31:f8:1d:5c:
99:ad:77:ac:bb:17:de:a8:bc:b8:dd:76:ed:21:74:
49:79:6b:79:b0:a6:25:84:e8:8e:a1:b4:f3:91:3f:
62:17:04:e2:fa:0a:cc:2d:c2:f8:e0:1a:a3:05:ea:
31:64:07:96:99:c7:6b:90:8e:0c:e8:69:fc:4a:09:
d6:cd:de:1f:b8:fe:8e:b9:09:6e:35:bd:09:6c:8e:
c8:38:ae:54:52:f0:b6:b8:e7:d8:3c:72:dc:49:e1:
2e:23:87:50:bc:cf:ab:1d:6e:63:2d:1c:1a:ad:f6:
43:82:50:4c:fc:87:f4:26:e8:1c:98:55:05:2e:1f:
af:4d:34:a9:66:69:9e:cc:ba:11:63:4e:57:b2:be:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:58:B2:22:B4:78:62:B5:6E:93:11:A8:81:F8:24:30:F3:DC:E5
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/_DlYsiK0eGK1bpMRqIH4JDDz3OU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
222.250.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:34:a6:90:81:51:90:e2:95:ca:35:fd:e8:c5:ca:00:db:c8:
e0:ee:6a:84:6f:1f:32:e5:58:53:1e:17:07:a1:97:17:82:83:
37:a8:42:70:6f:9a:4e:c2:5a:af:c0:9d:0f:1c:75:b9:60:e8:
c1:19:6b:2d:fe:d6:3a:83:47:88:bf:22:5d:66:69:2d:4f:9e:
58:41:8e:a1:b4:bc:88:97:b3:1c:37:05:aa:71:b8:78:71:f2:
e9:65:d5:4b:bb:50:45:f0:43:26:27:23:d0:0a:bd:3a:f2:53:
55:1e:81:e6:a4:69:2f:21:dd:17:cb:fd:76:60:e7:0f:47:90:
5d:7b:1d:78:fc:4e:bb:02:2a:56:ab:61:1a:fc:8a:0d:1f:e8:
94:0a:a2:65:c2:b2:b2:2f:21:b3:6f:bb:2b:68:dd:cf:92:6e:
c4:68:a6:8e:b0:3a:a4:4a:9c:6b:18:66:9a:b7:2a:c6:48:64:
04:ef:14:9c:ad:fc:57:cd:e5:5b:20:16:01:ce:a8:18:04:1a:
55:1b:b8:57:56:25:23:78:fd:4f:d3:d5:df:2f:15:10:26:1b:
28:49:df:01:73:98:a8:d1:38:d8:44:81:61:12:65:67:4d:9a:
f5:d1:ac:be:78:93:75:8d:b2:3f:1a:cf:72:3e:5e:db:d3:82:
34:49:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:59:03 2025 by rpki-client