Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/82i-B1K7NPnGTPmr5rbLqvjy8tU.roa
File: 82i-B1K7NPnGTPmr5rbLqvjy8tU.roa (raw, json)
Hash identifier: OaceZ+RvOzUHss/RZUoC1gaZaIQe8ZO82+XOWsPcuMY=
Subject key identifier: F3:68:BE:07:52:BB:34:F9:C6:4C:F9:AB:E6:B6:CB:AA:F8:F2:F2:D5
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 129D
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/82i-B1K7NPnGTPmr5rbLqvjy8tU.roa
Signing time: Mon 10 Feb 2025 14:15:03 +0000
ROA not before: Mon 10 Feb 2025 14:15:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18419
IP address blocks: 118.150.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4765 (0x129d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Feb 10 14:15:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F368BE0752BB34F9C64CF9ABE6B6CBAAF8F2F2D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:18:10:b4:c8:7c:c8:d2:ad:34:8b:d7:53:
3c:9f:00:a0:b0:34:b8:8b:44:da:d6:7b:1d:91:0f:
01:66:fc:49:6f:e0:a0:e9:e5:20:b1:73:36:90:f4:
72:66:64:2f:56:df:74:29:a0:6a:a3:41:9a:b4:a7:
55:bb:55:dc:82:d6:74:d2:34:26:33:c1:33:97:f3:
fd:a1:b8:0c:44:69:ea:1c:6e:31:7c:11:e6:83:0f:
f7:c0:65:1b:05:00:c7:63:e8:98:ba:39:09:ac:52:
d4:d8:e3:96:ad:2f:2a:77:47:3a:08:07:a3:fa:56:
d7:5c:79:c6:1e:e4:e7:ae:32:42:2d:74:ae:21:fa:
93:90:f1:f7:87:26:df:5a:95:0f:f2:50:66:e0:19:
8e:63:24:44:53:4f:6b:e4:be:2b:25:92:92:d7:ee:
7a:de:8e:71:aa:54:81:ca:07:4f:e6:79:31:5a:11:
17:0c:51:1e:d9:21:4f:bf:09:24:ac:ec:ec:cc:a3:
f1:68:83:b6:6f:81:68:b9:34:f1:09:b0:75:c1:f6:
25:19:3f:e0:ea:ab:08:b6:ab:4b:5b:8f:f6:af:e8:
db:4d:79:71:d4:87:15:23:98:b5:da:27:4d:81:78:
f1:f1:0b:54:56:60:3d:36:fd:ad:61:c8:14:2b:0b:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:68:BE:07:52:BB:34:F9:C6:4C:F9:AB:E6:B6:CB:AA:F8:F2:F2:D5
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/82i-B1K7NPnGTPmr5rbLqvjy8tU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:dd:72:c8:3c:cc:0b:db:12:72:ca:94:ad:a3:87:f6:1f:25:
18:3c:db:7d:c7:a6:9e:6b:8c:55:1b:59:98:45:47:46:07:49:
7a:0e:3c:9a:da:af:0c:be:3e:09:a5:c0:fa:9d:eb:6e:82:f2:
35:3d:b6:22:94:fa:38:e4:09:49:d5:e5:1e:1e:cb:5d:7e:d6:
31:48:7b:87:a5:41:f2:44:ce:e2:a5:df:7a:a4:ad:9d:7b:1b:
34:f3:22:eb:35:24:26:57:76:88:7c:e7:85:60:11:c0:6b:c6:
17:0d:34:ec:e3:6b:f9:8c:c1:b2:7e:57:8f:47:4c:da:96:ca:
6b:98:97:16:fe:65:df:f0:82:a3:8f:e9:fa:6f:1c:53:28:f0:
f5:a3:4b:04:90:59:51:35:98:c8:2a:93:8f:81:11:0d:61:eb:
e6:94:20:40:ea:d5:b3:ac:6c:ca:e0:c3:2c:a9:71:b0:d1:91:
7f:dc:af:23:a4:0a:dc:b7:59:38:fe:0a:42:79:03:05:dc:6d:
f4:22:46:ee:20:80:c7:5f:0a:b8:63:97:0d:f6:e8:e9:e1:3d:
4a:4a:f7:0e:47:ed:c4:1b:41:73:b0:4c:7a:3b:97:30:ea:2b:
2f:60:57:04:81:5e:d0:3b:f2:39:29:25:2a:5d:e9:e0:77:c1:
9b:98:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:00:47 2025 by rpki-client