Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa
File: o9lR9WL7dw4xkkjNzg_PFShdSok.roa (raw, json)
Hash identifier: 3Ls5m26s2rLTev4yIFeYGFfLwiQCeg/SsRm6b6fXufo=
Subject key identifier: A3:D9:51:F5:62:FB:77:0E:31:92:48:CD:CE:0F:CF:15:28:5D:4A:89
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0CF2
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa
Signing time: Mon 10 Feb 2025 13:50:57 +0000
ROA not before: Mon 10 Feb 2025 13:50:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 132819
IP address blocks: 61.58.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Feb 10 13:50:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A3D951F562FB770E319248CDCE0FCF15285D4A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:71:06:8e:da:83:be:ba:b4:ce:0b:1b:fa:
98:a2:65:87:ff:cd:ed:72:62:1d:e7:89:46:88:fc:
f7:7e:0a:2c:37:7d:31:e8:85:30:6f:ef:40:56:18:
b5:f7:cf:a9:b4:74:29:8d:ea:3c:f4:2d:66:c9:f9:
a5:4a:4f:de:f1:69:48:32:17:a8:3d:8a:ca:27:9f:
ba:5d:a3:80:1c:e7:a7:0b:f7:f5:7e:0f:af:f5:27:
a2:bf:1e:58:48:cd:9b:ab:20:87:68:72:a9:32:24:
7e:c8:92:d8:8b:1b:bf:bd:5c:46:27:f8:f1:90:be:
bb:fe:0d:d2:70:99:33:22:b3:e3:e6:5e:fc:d3:36:
07:c6:16:70:02:eb:a7:87:ca:60:91:2f:ce:55:00:
d0:d3:87:3b:dd:d8:f3:be:71:ad:1d:dc:dd:91:fc:
31:58:2b:f4:11:83:6b:f8:67:5c:4f:ba:b4:f0:47:
dc:6b:eb:a5:cd:7d:b3:f4:07:15:08:94:1d:c1:b6:
54:6f:3c:03:e9:af:33:92:57:ac:7c:6a:c2:6a:53:
d6:a2:49:7d:d5:7b:a9:63:30:72:bd:39:79:d9:8d:
f1:c9:05:b9:1e:6d:5d:27:55:af:84:58:6a:6f:e8:
2f:d3:be:5c:d9:8d:ae:9f:fb:23:b3:f6:da:47:37:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:51:F5:62:FB:77:0E:31:92:48:CD:CE:0F:CF:15:28:5D:4A:89
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/o9lR9WL7dw4xkkjNzg_PFShdSok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b8:ba:39:51:82:18:c2:a0:1e:86:db:41:7c:7e:bb:49:aa:
cc:2d:64:da:55:fe:c3:94:ab:93:86:0d:ca:ec:38:fc:fb:90:
6c:08:39:75:25:65:82:83:d0:e8:c4:c8:fe:89:1e:12:bc:25:
ae:a6:0f:f6:c5:aa:12:20:c2:b4:3a:d6:0c:d5:23:18:bb:16:
d0:14:27:cf:5e:fa:b6:26:62:9c:e4:49:3c:36:bb:6f:ca:fd:
03:97:c8:f4:32:66:6a:a5:24:31:fa:c2:1f:7d:47:07:3d:42:
36:9d:89:2e:d8:0f:e9:a1:dc:0f:6e:9f:85:60:87:8a:ae:38:
2a:8d:00:5b:ce:45:a3:a4:33:97:b1:02:87:2d:87:2a:86:10:
a4:dd:03:26:1e:c2:1b:d9:62:db:45:f3:ff:07:c9:ff:21:35:
5e:0e:cf:62:f9:cf:d3:d3:7f:6c:3c:6f:29:d5:36:05:7b:a7:
08:f0:db:15:61:49:ed:ce:8c:84:73:0f:e7:e9:45:bb:9a:dd:
5a:1f:c8:34:0c:fb:07:bf:60:67:77:17:15:c2:47:e8:90:a2:
b3:6d:71:5d:d1:ba:8e:10:fc:70:8a:64:66:79:6f:03:c9:c0:
e8:24:3e:98:9e:24:95:8b:0e:ac:53:0a:67:1f:62:c3:3a:1f:
62:d1:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:47:11 2025 by rpki-client