Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/YttEgsOx9z69Dl47idj0HqsRzC4.roa
File: YttEgsOx9z69Dl47idj0HqsRzC4.roa (raw, json)
Hash identifier: 0Ujm/GXNR2LrX7tJPokfiS3F5D2YbBkdJBdHlM3pbD0=
Subject key identifier: 62:DB:44:82:C3:B1:F7:3E:BD:0E:5E:3B:89:D8:F4:1E:AB:11:CC:2E
Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803
Certificate serial: 010E
Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/YttEgsOx9z69Dl47idj0HqsRzC4.roa
Signing time: Mon 10 Feb 2025 13:45:21 +0000
ROA not before: Mon 10 Feb 2025 13:45:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 152609
IP address blocks: 157.20.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Apr 2025 16:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803
Validity
Not Before: Feb 10 13:45:21 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=62DB4482C3B1F73EBD0E5E3B89D8F41EAB11CC2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:b6:5f:04:ec:f8:c8:4a:e2:67:99:6d:7e:
e4:c7:57:df:34:de:11:b5:13:18:00:1c:e6:52:29:
34:55:26:ba:ed:c1:7c:b2:88:31:77:82:a2:f0:69:
d2:8f:df:df:fa:b2:6a:c0:cd:10:9a:0a:d0:a7:48:
e4:e7:d6:47:d9:6b:b3:fa:9a:9b:6b:71:7a:28:96:
53:4f:d9:d5:af:69:c0:1c:0d:9a:1c:0e:13:b1:b5:
0b:ba:c5:14:cd:fc:01:dc:9a:27:6e:ec:90:4a:ba:
94:a3:6e:db:6a:69:6b:29:b5:ee:dd:12:9a:af:16:
c7:47:48:6e:1a:5b:7c:45:93:84:e3:a9:f9:df:23:
7e:55:42:f5:78:8e:05:9f:7e:63:f4:1c:ae:05:c6:
b6:e8:b1:ce:f6:82:b8:2a:aa:7f:00:0f:e3:7e:12:
df:8d:4e:e3:fd:aa:1e:77:43:f0:36:b8:9a:c3:4c:
18:36:4e:21:31:68:f3:8c:e9:cc:d7:0f:5d:8d:3c:
bd:44:53:78:3f:c8:15:bf:fb:34:f2:25:4b:34:94:
ea:04:23:e1:f3:e2:f4:d2:eb:57:1b:5c:d2:1a:c6:
3d:8a:55:a9:c8:c0:9d:06:57:9a:52:ce:23:ae:ed:
94:74:73:67:51:4b:c3:35:42:fb:80:a5:dc:5f:f8:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:44:82:C3:B1:F7:3E:BD:0E:5E:3B:89:D8:F4:1E:AB:11:CC:2E
X509v3 Authority Key Identifier:
keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/YttEgsOx9z69Dl47idj0HqsRzC4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
157.20.249.0/24
Signature Algorithm: sha256WithRSAEncryption
17:cb:47:c3:62:45:89:0f:08:57:61:53:22:49:2f:f0:e1:da:
9b:42:b9:db:97:5a:0c:18:25:6a:ca:cf:65:3a:81:b4:15:64:
a4:10:12:43:95:e1:f3:d9:d8:4d:fd:0e:bb:2d:46:6d:90:bc:
2a:3b:7c:80:4a:7e:df:01:bb:47:8d:0b:8c:fd:91:99:bf:7f:
7c:8b:6e:01:31:d7:1a:a4:af:be:08:44:24:06:4c:7a:9c:64:
7c:9b:15:5a:1d:c8:99:a2:84:a1:2a:7f:90:40:43:dc:55:dd:
13:09:cc:1d:51:16:05:35:4b:b3:20:00:0d:68:14:69:c5:89:
e8:46:91:6a:17:17:34:20:6b:e4:aa:a4:5f:66:ef:6d:be:dd:
50:71:e2:f6:03:26:7b:aa:2d:92:82:aa:2a:69:5d:0f:ff:5d:
25:79:5c:dc:ab:cc:2e:bb:72:c7:0e:0f:0d:cc:b4:c1:58:6e:
67:d8:37:af:52:b5:c3:51:37:91:87:63:66:e2:8a:67:2a:af:
73:6c:70:93:3b:2c:71:e4:b1:95:08:b8:99:98:fe:4d:b9:36:
d3:aa:2e:da:77:f3:69:f7:7a:13:30:1f:93:89:0e:09:a5:58:
37:22:89:bc:3f:b6:85:3d:2f:f4:c9:44:82:fb:7a:3e:be:5a:
cf:2b:1f:32
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz
QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTAyMTAx
MzQ1MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyREI0NDgyQzNCMUY3
M0VCRDBFNUUzQjg5RDhGNDFFQUIxMUNDMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRD7ZfBOz4yEriZ5ltfuTHV9803hG1ExgAHOZSKTRVJrrtwXyy
iDF3gqLwadKP39/6smrAzRCaCtCnSOTn1kfZa7P6mptrcXoollNP2dWvacAcDZoc
DhOxtQu6xRTN/AHcmidu7JBKupSjbttqaWspte7dEpqvFsdHSG4aW3xFk4Tjqfnf
I35VQvV4jgWffmP0HK4Fxrbosc72grgqqn8AD+N+Et+NTuP9qh53Q/A2uJrDTBg2
TiExaPOM6czXD12NPL1EU3g/yBW/+zTyJUs0lOoEI+Hz4vTS61cbXNIaxj2KVanI
wJ0GV5pSziOu7ZR0c2dRS8M1QvuApdxf+GEfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUYttEgsOx9z69Dl47idj0HqsRzC4wHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU
RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84
enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvWXR0RWdzT3g5ejY5RGw0N2lkajBI
cXNSekM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0U+TAN
BgkqhkiG9w0BAQsFAAOCAQEAF8tHw2JFiQ8IV2FTIkkv8OHam0K525daDBglasrP
ZTqBtBVkpBASQ5Xh89nYTf0Ouy1GbZC8Kjt8gEp+3wG7R40LjP2Rmb9/fItuATHX
GqSvvghEJAZMepxkfJsVWh3ImaKEoSp/kEBD3FXdEwnMHVEWBTVLsyAADWgUacWJ
6EaRahcXNCBr5KqkX2bvbb7dUHHi9gMme6otkoKqKmldD/9dJXlc3KvMLrtyxw4P
Dcy0wVhuZ9g3r1K1w1E3kYdjZuKKZyqvc2xwkzssceSxlQi4mZj+Tbk206ou2nfz
afd6EzAfk4kOCaVYNyKJvD+2hT0v9MlEgvt6Pr5azysfMg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:16:14 2025 by rpki-client