Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/j5CYmoIJuDF2-E7BoWg8pJFp9Lk.roa
File: j5CYmoIJuDF2-E7BoWg8pJFp9Lk.roa (raw, json)
Hash identifier: NDjzPCeWOjxyDydEjOTBv4L0tnlcWfJMyMc9Hp+nPtI=
Subject key identifier: 8F:90:98:9A:82:09:B8:31:76:F8:4E:C1:A1:68:3C:A4:91:69:F4:B9
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 1209
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/j5CYmoIJuDF2-E7BoWg8pJFp9Lk.roa
Signing time: Mon 10 Feb 2025 14:27:59 +0000
ROA not before: Mon 10 Feb 2025 14:27:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18049
IP address blocks: 218.34.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 16:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:27:59 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8F90989A8209B83176F84EC1A1683CA49169F4B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:e7:72:e6:d0:64:b4:c8:fe:78:8b:d6:cd:
5e:8d:2c:e0:55:bc:f0:d4:4b:54:dd:fa:a9:a0:fa:
86:ec:47:40:10:dc:9d:08:53:2b:be:33:d5:e2:f3:
71:93:71:c0:b5:76:74:cd:b2:62:28:6f:19:5a:c3:
4b:bf:ac:a8:8b:20:9d:d3:46:ec:fc:4c:60:2b:ac:
88:ec:dd:c3:27:f1:2f:1a:8c:73:6e:f0:34:2d:4a:
0b:22:29:45:7f:ce:cd:8d:4f:ee:7c:58:df:19:46:
0f:87:95:c4:7d:58:fe:fc:06:78:27:df:bc:f3:fc:
a1:da:f7:51:78:9e:9d:22:a2:1d:0a:83:e7:d6:6f:
7a:8e:c3:dc:2d:32:a7:82:99:ac:0b:48:3a:4c:aa:
93:ff:cf:b8:33:69:b7:5c:55:11:02:1b:bc:c6:68:
47:1b:42:1e:c3:e4:96:ba:34:82:cb:d7:3e:6c:19:
33:cc:1e:9c:49:9b:b3:92:51:fe:8a:d5:c1:b3:1e:
b3:b8:30:43:62:b1:27:06:33:0c:ab:7f:eb:f9:66:
bc:f4:9e:5a:15:68:f0:a7:4f:3a:7e:91:78:fc:0b:
98:ef:79:04:0b:3f:5b:bd:4e:72:cf:3a:55:b3:18:
ea:27:ca:49:02:ab:ea:69:bf:ea:55:ed:dc:ff:02:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:90:98:9A:82:09:B8:31:76:F8:4E:C1:A1:68:3C:A4:91:69:F4:B9
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/j5CYmoIJuDF2-E7BoWg8pJFp9Lk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.34.106.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:df:24:30:80:9e:6a:59:f8:a9:f4:ef:57:b5:96:e9:db:79:
e2:5f:6d:ef:46:c3:b7:e5:92:fc:7b:29:92:5d:31:d0:aa:12:
79:12:34:74:f9:99:80:60:d2:86:f3:64:35:8a:c1:a3:cc:26:
4a:ba:27:37:02:11:84:19:c3:90:c7:4c:8c:96:4b:cd:c9:5c:
37:9f:4a:fb:a0:2d:bb:cd:33:8f:7b:ea:0d:7c:fb:70:df:fa:
ba:29:e3:40:99:46:d7:a5:3b:2d:e1:a0:04:bd:ce:4a:97:eb:
f5:6e:8f:f7:03:d8:d2:7f:75:7e:2b:08:ba:a9:d6:d8:51:b8:
b2:12:c0:a3:01:30:39:c9:d6:8d:bb:5a:fa:2e:7e:fd:fa:83:
42:df:51:1c:6b:4b:e1:6d:28:85:6f:6a:e4:da:56:9f:43:fa:
db:3d:66:31:ec:aa:0f:58:00:71:c8:82:7d:65:27:f0:c8:55:
45:00:c9:1f:3c:c2:63:18:eb:6c:0f:4d:f7:25:83:ab:67:df:
ad:fa:62:90:67:26:fb:d2:bb:53:97:cb:29:4e:4c:c7:75:27:
cb:0f:f6:d5:fe:6d:b2:d3:75:06:62:cf:db:0a:21:97:b8:20:
b5:cd:d5:7c:e7:67:0d:7b:e8:33:cf:b4:6c:cd:e0:08:ac:1e:
3b:f9:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 15:19:46 2025 by rpki-client