Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/dctSrNusNS-weUS5hqcaUmiFcus.roa
File: dctSrNusNS-weUS5hqcaUmiFcus.roa (raw, json)
Hash identifier: tgMpEa76S7ej/QYDPnoB+ZchkJV2u4N3WG2SLhRmZ4s=
Subject key identifier: 75:CB:52:AC:DB:AC:35:2F:B0:79:44:B9:86:A7:1A:52:68:85:72:EB
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 17B4
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dctSrNusNS-weUS5hqcaUmiFcus.roa
Signing time: Wed 12 Feb 2025 01:36:58 +0000
ROA not before: Wed 12 Feb 2025 01:36:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 7500
IP address blocks: 2001:b000:19e::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 02:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6068 (0x17b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Feb 12 01:36:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=75CB52ACDBAC352FB07944B986A71A52688572EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:ed:37:3a:fe:97:05:90:9f:7f:0a:f1:0a:
0b:f1:61:08:af:9e:fd:fd:d5:4a:33:a6:a9:98:aa:
4f:f4:05:f2:b8:85:13:d8:20:ee:a4:81:54:d0:da:
18:0c:53:58:11:63:ec:13:ca:ec:e4:19:5b:20:54:
c8:75:14:d6:c8:d0:41:d9:b5:f8:80:22:13:d4:df:
70:fa:9c:0f:f1:de:2c:f3:54:df:bb:f2:75:9b:4c:
09:01:ba:7a:f4:df:ee:67:86:06:d7:a1:d7:d1:00:
d0:16:aa:22:4d:c6:60:ee:ce:98:7e:de:1c:47:70:
78:7a:51:0e:9b:68:ac:ae:8c:ec:b1:e4:83:c5:8c:
82:11:eb:79:8a:32:79:00:c5:ca:63:6b:2f:aa:22:
d1:4a:53:a2:3e:69:5e:b5:ce:d6:44:47:db:cf:99:
d8:c2:f7:ab:b7:e8:80:ef:46:a9:28:16:9e:82:0b:
40:57:6f:a0:e3:17:48:c0:c1:f5:da:61:3c:2d:e6:
31:69:d7:bf:60:e9:68:7a:8e:7f:b1:89:2d:e1:d5:
d7:cf:2a:66:95:0f:cd:2c:03:3b:bc:90:6a:25:37:
4d:5c:0b:b5:d8:38:fe:7d:41:cc:c9:f8:52:5c:13:
b9:6f:bc:82:c3:b4:1e:2b:85:92:74:25:f7:a7:37:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CB:52:AC:DB:AC:35:2F:B0:79:44:B9:86:A7:1A:52:68:85:72:EB
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/dctSrNusNS-weUS5hqcaUmiFcus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:19e::/64
Signature Algorithm: sha256WithRSAEncryption
d0:e5:19:e3:df:9c:26:3e:5b:b7:35:09:87:ec:17:d0:96:36:
0d:13:0f:6b:e1:0a:2d:21:d1:ae:36:26:04:30:75:7d:3b:f2:
56:e9:7a:21:99:6e:55:b4:3f:2e:7e:9a:cf:e4:1c:54:e9:04:
1f:8d:36:4b:44:40:07:b2:07:0c:c1:f3:db:fc:d7:71:82:03:
2d:68:a7:a6:6e:c0:48:46:ae:54:24:f3:7b:d8:d3:35:e5:9f:
76:3d:f0:ad:41:ec:59:b1:65:6a:b2:e6:2a:66:89:96:64:61:
9e:c3:4a:77:e5:27:72:70:00:05:3d:85:a8:12:ca:b3:44:4c:
58:1c:11:34:e7:72:9c:be:ba:f1:51:da:83:4c:25:cf:61:05:
87:b1:e6:a5:73:11:e3:a5:e9:83:a8:2d:43:4f:eb:36:f5:7d:
3e:77:58:10:45:e4:96:f8:87:27:5f:4f:9a:2c:5b:6b:64:d3:
ad:a0:3a:17:7c:77:58:11:ec:93:0d:0d:65:c1:8d:64:e0:2b:
e7:f9:4c:e0:b3:5e:5c:af:a3:87:51:2b:0e:89:55:61:da:4c:
aa:0d:b4:e5:25:fa:cb:e3:1a:8d:72:9a:25:68:aa:41:3f:a0:
c6:e1:eb:0f:76:10:b6:49:74:d3:60:aa:1a:38:59:be:39:2b:
d0:d4:6e:26
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICF7QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc1Q0I1MkFDREJBQzM1
MkZCMDc5NDRCOTg2QTcxQTUyNjg4NTcyRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAR+03Ov6XBZCffwrxCgvxYQivnv391UozpqmYqk/0BfK4hRPY
IO6kgVTQ2hgMU1gRY+wTyuzkGVsgVMh1FNbI0EHZtfiAIhPU33D6nA/x3izzVN+7
8nWbTAkBunr03+5nhgbXodfRANAWqiJNxmDuzph+3hxHcHh6UQ6baKyujOyx5IPF
jIIR63mKMnkAxcpjay+qItFKU6I+aV61ztZER9vPmdjC96u36IDvRqkoFp6CC0BX
b6DjF0jAwfXaYTwt5jFp179g6Wh6jn+xiS3h1dfPKmaVD80sAzu8kGolN01cC7XY
OP59QczJ+FJcE7lvvILDtB4rhZJ0JfenN2sVAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUdctSrNusNS+weUS5hqcaUmiFcuswHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9kY3RTck51c05TLXdlVVM1aHFj
YVVtaUZjdXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw
AAGeAAAwDQYJKoZIhvcNAQELBQADggEBANDlGePfnCY+W7c1CYfsF9CWNg0TD2vh
Ci0h0a42JgQwdX078lbpeiGZblW0Py5+ms/kHFTpBB+NNktEQAeyBwzB89v813GC
Ay1op6ZuwEhGrlQk83vY0zXln3Y98K1B7FmxZWqy5ipmiZZkYZ7DSnflJ3JwAAU9
hagSyrNETFgcETTncpy+uvFR2oNMJc9hBYex5qVzEeOl6YOoLUNP6zb1fT53WBBF
5Jb4hydfT5osW2tk062gOhd8d1gR7JMNDWXBjWTgK+f5TOCzXlyvo4dRKw6JVWHa
TKoNtOUl+svjGo1ymiVoqkE/oMbh6w92ELZJdNNgqho4Wb45K9DUbiY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 23:33:39 2025 by rpki-client