Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/t6FdCLNBeBeMPNL922GfqT2ZG_Q.roa
File: t6FdCLNBeBeMPNL922GfqT2ZG_Q.roa (raw, json)
Hash identifier: ATSMsrd0ObeBdDGkNk9Y6E3sk+hi06NEWF2kpTCtqeM=
Subject key identifier: B7:A1:5D:08:B3:41:78:17:8C:3C:D2:FD:DB:61:9F:A9:3D:99:1B:F4
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 120B
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/t6FdCLNBeBeMPNL922GfqT2ZG_Q.roa
Signing time: Mon 10 Feb 2025 14:28:00 +0000
ROA not before: Mon 10 Feb 2025 14:28:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131142
IP address blocks: 210.200.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 07:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4619 (0x120b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 10 14:28:00 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B7A15D08B34178178C3CD2FDDB619FA93D991BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:65:81:c8:05:52:c0:12:db:c3:d3:ae:87:35:
81:f3:9a:f9:22:91:43:be:0b:37:42:38:3c:e9:ed:
aa:31:1f:95:9a:7d:5d:ad:42:90:e7:7e:ee:b4:e5:
e9:63:3d:65:cf:b8:83:cd:4a:74:19:54:be:ab:f2:
4f:57:08:fe:73:0d:42:6e:11:a0:3a:34:d2:1d:73:
f2:da:7e:03:ba:55:3e:c5:b5:55:e0:db:2a:8a:3c:
8b:62:a6:97:3c:82:a5:1c:96:55:44:55:c4:87:3a:
08:78:ca:2b:db:7d:6e:36:bc:78:a6:bd:df:0d:51:
fe:94:5d:4c:10:d7:ff:37:60:06:e9:af:25:41:d6:
69:a6:45:23:f4:df:da:64:2f:1f:10:6e:73:15:17:
f2:22:89:ce:76:d0:00:b9:b4:e8:28:bf:da:46:13:
7d:b7:4e:24:79:10:17:84:10:70:9b:dc:33:4a:70:
e4:cd:87:6f:ff:6e:96:d1:c5:f4:d9:3c:a2:32:ff:
a5:72:5f:0d:39:9a:5d:39:14:13:6b:25:ee:fc:b5:
cd:91:c7:ab:91:56:fc:c9:66:79:a4:c0:ab:71:94:
a1:f8:4d:11:d0:09:80:5f:67:6a:df:df:e2:e5:6b:
9c:43:0c:7f:54:88:be:13:2a:fd:0a:49:d7:91:02:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:5D:08:B3:41:78:17:8C:3C:D2:FD:DB:61:9F:A9:3D:99:1B:F4
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/t6FdCLNBeBeMPNL922GfqT2ZG_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:3d:81:f4:f0:33:66:aa:33:56:1c:76:89:de:54:ea:cf:a9:
bd:03:41:05:72:f5:4b:7f:1d:35:8b:8c:45:63:1d:7a:ed:5b:
c4:ee:da:b7:dd:f6:1f:25:51:51:a2:c4:22:bd:7e:c7:69:1f:
81:1a:3e:c7:45:56:ce:ef:e4:d9:ab:ce:f1:f7:19:0f:09:35:
fa:bb:9a:b5:39:b1:cf:1a:c8:11:86:09:4c:b9:42:e1:7e:fa:
38:25:9a:18:66:d1:16:90:28:e5:9b:3a:7a:f6:d8:f0:56:0c:
d7:e8:c7:79:69:d7:75:2b:44:2c:ab:bb:70:c2:24:42:df:0e:
89:f6:57:c7:cf:e5:82:f0:04:21:de:38:46:db:af:aa:79:b4:
be:1d:d5:5f:fb:db:cf:c8:a0:97:42:07:bb:24:0e:49:90:b0:
4f:59:fb:03:db:05:8c:90:58:29:e6:36:f8:29:71:d0:a4:f6:
ce:13:72:92:b6:21:78:85:cc:1f:f4:ae:7f:da:fa:4b:00:fc:
b9:ec:c4:65:5d:62:49:9d:2c:93:48:0c:ba:ea:fc:b6:83:41:
23:76:d2:5d:86:e0:e2:2a:0c:ce:6c:ea:8f:fc:85:64:53:14:
b9:64:ea:49:4d:e5:76:7c:93:3d:f2:0f:ae:a2:d7:9a:a0:63:
33:70:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:52:53 2025 by rpki-client