Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa
File: Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa (raw, json)
Hash identifier: Y3EIJH2GE/RyONsSkFt2oYbJmVKdVhXo2Lgil3yI+a0=
Subject key identifier: 4E:2F:53:C5:98:F6:1A:BD:F1:79:28:EB:79:4A:04:2D:8D:01:DE:14
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 598B
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa
Signing time: Mon 10 Feb 2025 14:10:37 +0000
ROA not before: Mon 10 Feb 2025 14:10:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.46.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22923 (0x598b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 10 14:10:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4E2F53C598F61ABDF17928EB794A042D8D01DE14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:df:44:9a:d6:26:81:f6:bd:b3:84:70:52:
fb:81:15:4b:cf:13:f5:a3:c3:9e:b7:9c:33:35:fc:
69:0f:3b:94:47:60:7f:dd:39:44:5f:9e:c7:3a:75:
c8:b4:ec:e8:ca:e0:56:0b:77:2f:a3:d2:f7:a8:de:
d7:bc:46:37:c9:02:28:de:1c:4d:4f:d6:bc:07:1e:
67:35:a6:bc:c6:a8:6e:e7:5e:1f:8c:8b:b7:77:8b:
9f:4f:a5:5f:58:ce:67:73:96:16:b9:93:08:c4:9f:
bc:13:e7:3d:88:6b:82:e9:ae:59:f8:b8:54:a0:73:
08:ab:11:33:0d:c6:34:d6:90:e1:ce:80:3e:d9:bc:
30:51:a3:4c:a0:92:34:65:ec:68:82:d5:c9:c5:57:
2a:25:ef:ea:3d:e5:23:e8:25:b7:b6:81:14:1d:f3:
98:c2:86:e2:02:d5:47:e3:95:ad:dc:59:e2:71:22:
e8:58:c8:ec:57:8a:6b:b9:4b:f9:4e:e3:a2:7c:80:
98:d6:6a:81:b7:93:e8:bc:cb:75:1a:a5:2a:51:0e:
d5:23:89:8a:ef:fc:33:6e:2d:e7:77:6c:c0:6c:7e:
8a:3f:81:8d:86:55:11:68:59:d3:fc:92:3d:54:27:
bb:5b:e3:ea:19:10:ed:f8:01:22:ac:dd:ca:c1:f7:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2F:53:C5:98:F6:1A:BD:F1:79:28:EB:79:4A:04:2D:8D:01:DE:14
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/Ti9TxZj2Gr3xeSjreUoELY0B3hQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.190.0/23
Signature Algorithm: sha256WithRSAEncryption
74:d0:73:38:c7:32:05:95:88:2e:1e:4b:ff:74:ff:4f:95:21:
fa:d2:ec:02:30:ec:ef:81:68:f0:2c:0d:e1:bc:59:3f:8a:78:
3b:f9:43:b5:43:af:e5:51:0a:ee:65:66:57:4d:bf:a2:52:f0:
e1:e1:96:d5:fd:6d:d6:79:c2:0f:79:1f:e3:b5:82:b2:07:1f:
32:a7:d8:d1:28:1a:06:ff:38:0c:14:9f:74:5a:36:4c:92:87:
3b:c0:d0:81:8c:3e:53:07:a1:9c:a1:35:84:2c:ae:23:70:75:
6a:94:32:64:12:79:57:c9:b9:dd:c0:b1:f5:80:46:ee:88:f0:
01:f4:a7:12:3d:77:d8:f1:6c:30:80:98:41:03:59:ca:fb:20:
89:aa:30:f0:7d:3a:6c:6b:a8:76:3f:51:33:72:db:03:fb:7a:
ff:33:78:b3:5f:76:a2:eb:56:06:9d:91:70:48:de:3f:c8:3c:
3b:c6:da:16:45:ef:97:66:0a:3e:ee:02:dc:83:1f:bb:3c:6f:
28:b8:25:77:f2:43:10:80:33:a8:8d:48:50:ca:75:39:61:34:
66:22:a6:03:1b:b5:4c:94:89:96:78:5c:a2:b5:54:e5:61:02:
0d:8c:43:9a:03:c6:67:cf:a8:ea:96:de:a1:a5:66:d9:30:36:
57:fb:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:23:20 2025 by rpki-client