Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/IKVFIOhrkNIpi3qJU3pSEroiWLU.roa
File: IKVFIOhrkNIpi3qJU3pSEroiWLU.roa (raw, json)
Hash identifier: fw5c/Q59rdD0+K2gf4gsWGEPfp2uHpTq5Vmh65kjADg=
Subject key identifier: 20:A5:45:20:E8:6B:90:D2:29:8B:7A:89:53:7A:52:12:BA:22:58:B5
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17C0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IKVFIOhrkNIpi3qJU3pSEroiWLU.roa
Signing time: Wed 12 Feb 2025 01:37:02 +0000
ROA not before: Wed 12 Feb 2025 01:37:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 23675
IP address blocks: 220.128.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:37:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=20A54520E86B90D2298B7A89537A5212BA2258B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:29:11:32:90:52:38:f1:99:b2:94:5b:9f:
40:b8:15:59:3e:2b:db:ef:1d:3f:af:34:ea:dd:4f:
21:13:b6:56:e4:c8:1d:90:08:51:8b:cf:9a:67:e5:
b4:c8:90:87:dc:42:82:21:2c:6a:5e:05:30:1e:cf:
67:6b:05:6e:26:5d:e6:69:b6:3d:5b:e2:81:54:5a:
85:e0:14:77:d3:a1:34:86:ec:fc:46:1e:4b:2a:83:
1b:ee:7b:d8:49:9f:5f:5a:eb:1a:3e:fb:1f:a1:18:
be:6d:d8:c3:f9:fb:ec:31:2f:14:15:2e:30:3b:f8:
7e:e4:9b:2c:86:a3:01:31:d4:1b:c1:10:29:14:65:
44:9c:d0:1b:59:05:3f:3c:b8:a6:ba:5e:f0:1b:4b:
53:04:33:60:62:63:10:02:3e:48:e7:15:d4:41:4c:
ed:8d:70:4f:43:9c:a2:0d:02:3d:93:ce:0f:fe:f6:
31:90:c6:ae:f4:70:a0:b5:de:dc:f9:ea:ca:ea:97:
8f:8d:2c:8d:c9:6f:e3:98:ec:2c:f1:43:75:2d:da:
c4:fa:ab:e0:7a:c0:a7:58:8f:bc:c8:bd:5b:d9:eb:
2c:6b:95:07:93:76:5d:02:e9:de:0c:c1:ca:83:48:
41:01:01:92:a5:2a:7c:83:82:ab:7b:1b:87:13:b8:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A5:45:20:E8:6B:90:D2:29:8B:7A:89:53:7A:52:12:BA:22:58:B5
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/IKVFIOhrkNIpi3qJU3pSEroiWLU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:70:7b:40:22:42:7c:7f:66:a8:cd:85:d5:6c:1d:5f:ec:fb:
aa:a3:d1:09:1f:08:95:47:99:de:ce:4a:07:c6:78:e6:05:8e:
f6:84:b8:82:39:14:cb:ff:a6:e2:1d:70:ec:98:fc:b2:e3:45:
1e:67:0f:03:55:57:bd:b9:62:7d:21:22:31:09:6b:9f:32:55:
8d:c8:04:2c:34:dd:e9:cb:bb:0d:df:4e:ab:05:ee:b7:86:9d:
85:a0:29:82:14:a2:56:78:d3:3d:ab:dd:a1:32:86:fc:02:37:
39:98:b3:d9:a7:28:ff:c7:f8:f1:21:2d:35:1c:b2:ee:95:80:
c7:7c:ec:d2:d8:df:d7:4d:26:6f:8b:f4:f0:11:12:b1:7d:d6:
80:e0:be:8d:b1:3a:92:e6:b8:49:46:98:44:71:9a:bd:83:9e:
3f:b8:9e:38:49:f8:f8:78:b4:88:ad:25:b2:c4:34:fa:8e:48:
63:d3:54:6c:b0:58:03:6d:2a:3d:87:21:17:e7:84:ae:d2:30:
30:bd:9a:2c:5b:7a:92:48:03:7f:3c:2b:c7:d3:88:55:dd:b5:
39:33:07:7d:eb:b2:df:30:66:76:a3:80:dc:2d:83:f0:e1:54:
b5:f3:5d:5d:d7:96:00:f1:a7:64:1c:74:0d:79:43:5c:b3:d0:
ff:07:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:01:17 2025 by rpki-client