Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
File: BmXQhd3cgIoA7jFfRfG--miiP9w.roa (raw, json)
Hash identifier: TFD1hU4dp4YtYoQQnDACmoDchakgqDLckcxBiFtXVVc=
Subject key identifier: 06:65:D0:85:DD:DC:80:8A:00:EE:31:5F:45:F1:BE:FA:68:A2:3F:DC
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0E4D
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
Signing time: Mon 26 Aug 2024 05:09:38 +0000
ROA not before: Mon 26 Aug 2024 05:09:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.135.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3661 (0xe4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Aug 26 05:09:38 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0665D085DDDC808A00EE315F45F1BEFA68A23FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:b7:d6:41:8d:e1:fb:20:57:0a:8b:62:79:
e7:bc:ab:c0:49:34:93:19:4f:03:7d:2b:91:e8:e8:
de:17:8e:71:42:51:20:98:a9:34:2e:15:4c:7c:cd:
49:be:ec:54:f9:52:b4:b3:e9:63:fa:ea:f2:f7:bc:
56:b4:79:db:c4:70:d7:f1:0e:d4:f3:98:8d:f5:3b:
5a:32:a1:8d:49:e9:54:67:8b:2e:13:d0:f1:da:3c:
37:27:2e:e4:7e:70:87:6c:ab:a5:a0:2f:95:3a:e0:
e2:18:09:05:ee:6a:11:ac:98:67:e9:c0:50:2a:1b:
91:a3:db:f8:69:d2:3b:fb:2d:f0:06:99:f2:fe:85:
e4:a6:58:3d:af:94:5b:ba:ee:19:0f:2c:ef:83:fb:
79:95:ed:cf:17:57:de:20:18:3b:01:cc:a8:02:5d:
d3:cd:97:c4:89:52:85:d5:96:e6:24:67:96:d3:56:
11:36:50:aa:9b:b0:24:27:46:f1:1b:ca:d8:96:ca:
29:0d:c2:71:a7:a3:6e:6e:3b:42:07:0b:8c:ff:93:
cc:93:c0:6e:c7:47:c0:a6:30:87:22:dc:60:df:3d:
ae:6e:e9:0c:28:a2:c9:59:88:e1:91:df:c8:22:de:
10:7b:d2:e2:43:25:e2:5d:63:86:23:87:bb:a6:ce:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:D0:85:DD:DC:80:8A:00:EE:31:5F:45:F1:BE:FA:68:A2:3F:DC
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/BmXQhd3cgIoA7jFfRfG--miiP9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
79:da:8e:3a:48:b1:f3:a8:90:5c:7a:0b:e2:af:ae:13:30:e4:
78:77:d1:d0:1c:54:3c:23:38:e2:e5:dc:7f:8e:71:d5:1b:88:
d2:0d:f5:d0:ea:f9:78:32:11:1c:21:a6:5e:69:2d:d1:54:f9:
74:9b:78:0a:9f:35:f4:95:20:0d:02:0c:a2:37:ef:32:65:73:
e1:c7:c5:fc:97:9c:e7:02:72:29:76:3d:25:73:f8:e7:ad:63:
ce:d2:d2:5b:a5:8f:89:76:e1:a3:05:a4:7d:c9:99:e8:e8:6f:
fc:1b:b3:32:ec:c3:79:23:91:b0:7d:f5:de:ae:92:7e:0d:64:
5e:4d:4e:99:ab:68:b8:3a:d8:99:16:fa:77:ee:b4:9c:15:fb:
bb:1d:e4:b8:28:a9:ba:04:8f:99:76:39:04:69:f0:a2:8e:be:
6e:56:a8:6c:d8:32:9f:48:70:62:ac:c0:25:d5:77:74:da:88:
9c:45:12:d7:38:29:71:59:86:ab:d6:13:94:89:15:97:05:1b:
5e:da:62:e1:cc:a0:ab:88:b3:74:e4:3c:66:5b:9c:08:15:2d:
9c:32:54:cc:b0:5d:9d:68:78:0d:55:2e:77:c6:68:e8:95:56:
57:0e:7e:e9:07:cd:ad:25:07:fc:20:4a:1d:b3:37:dd:5f:d7:
fa:ff:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:09:59 2025 by rpki-client