Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1jNBaQ-Yalk0YCmaICQTp7L3iFU.roa
File: 1jNBaQ-Yalk0YCmaICQTp7L3iFU.roa (raw, json)
Hash identifier: kSa/4Tehs5cJHbGraC0reK7Nm4s+bmeMcWbCRA9gU3I=
Subject key identifier: D6:33:41:69:0F:98:6A:59:34:60:29:9A:20:24:13:A7:B2:F7:88:55
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17FE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1jNBaQ-Yalk0YCmaICQTp7L3iFU.roa
Signing time: Mon 10 Feb 2025 14:07:29 +0000
ROA not before: Mon 10 Feb 2025 14:07:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 175.180.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 01:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6142 (0x17fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D63341690F986A593460299A202413A7B2F78855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:ce:b9:28:9b:ae:31:d0:14:95:db:a5:8b:
c1:f4:60:f6:7b:23:45:93:0c:30:78:ab:61:6b:62:
b7:6c:df:53:09:69:eb:65:e5:5e:d9:33:55:74:46:
c4:ea:6a:0e:7b:b5:a8:8c:df:72:d8:3a:88:38:c1:
ed:4d:21:1e:c4:e8:49:dd:d7:1f:82:d3:87:ff:7d:
b6:2b:e5:b9:ae:61:48:68:4f:72:a3:bb:77:fc:af:
2d:6a:8e:02:df:7b:06:07:d3:7f:15:dc:b3:2f:a7:
2d:c0:b6:9b:df:d2:bf:9e:bc:8e:66:ac:6b:f2:fa:
86:d0:fd:0e:94:f9:61:83:94:9b:d6:94:27:cb:8c:
11:01:3e:b0:e4:d0:95:8b:4e:61:0d:46:3d:b0:38:
d3:d5:e2:36:8b:00:2d:91:95:e0:3b:7b:ce:ae:9d:
19:43:f9:c9:f6:c3:50:1c:b9:84:99:e0:59:74:e5:
a9:ae:b5:e2:c6:55:ab:4a:6b:6b:d4:f3:95:10:be:
36:27:c8:44:23:f1:34:06:1b:7e:aa:6e:1f:f4:d6:
e2:92:4c:13:c9:95:3c:b6:59:97:3c:9a:ca:bb:71:
7c:00:5e:18:fb:45:d9:0c:45:79:e3:67:6c:d6:37:
7d:80:fe:08:26:c5:b2:43:24:72:70:eb:7b:6c:7e:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:41:69:0F:98:6A:59:34:60:29:9A:20:24:13:A7:B2:F7:88:55
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1jNBaQ-Yalk0YCmaICQTp7L3iFU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
94:c0:3a:90:6b:d1:0a:cb:ef:51:fe:07:af:cf:ec:e7:fc:9d:
9b:9b:89:da:fb:7a:20:62:d3:8d:76:8d:53:9a:9e:86:43:2a:
d0:d5:55:10:46:d5:ba:d5:7e:fb:a5:8e:d3:fe:20:44:d7:b6:
f1:01:22:1c:75:82:ab:25:4e:b2:d7:de:b1:de:2f:b6:9b:dd:
32:92:19:7f:0e:4e:d0:29:28:69:83:b5:50:09:28:f4:58:aa:
ac:0b:81:d7:94:28:a3:33:37:ba:59:82:78:39:24:99:64:18:
96:a1:fc:f1:75:24:ab:05:81:94:12:2d:20:ec:0e:5a:8c:6c:
72:1e:94:cb:a3:1f:7d:a2:1c:28:84:7e:ed:8f:a5:7e:e3:62:
ed:60:17:35:2e:02:e4:1c:31:af:d6:d4:73:22:40:24:08:68:
ea:51:d8:52:32:72:dc:82:7d:35:cb:51:37:7f:eb:8d:e9:da:
ac:88:68:66:b6:8a:a5:7b:3e:f0:5c:d5:fe:e3:9d:25:b7:52:
25:7a:58:a7:51:35:e1:d0:e9:37:d0:d3:f7:44:31:5d:24:09:
01:00:a5:ca:e9:78:d2:e6:b6:16:12:43:77:c2:99:bf:c2:fd:
7f:a6:6d:4c:a7:b8:5e:7e:14:ab:99:bf:ef:ab:42:e4:e3:56:
cc:16:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:01:20 2025 by rpki-client