Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/-t61XiF3Y6NDoT63kmCvRoLVj2g.roa
File: -t61XiF3Y6NDoT63kmCvRoLVj2g.roa (raw, json)
Hash identifier: tP51ToWsBFaI0z4X7Ugvec7z6CCRbT7MhIc1QJVkReE=
Subject key identifier: FA:DE:B5:5E:21:77:63:A3:43:A1:3E:B7:92:60:AF:46:82:D5:8F:68
Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Certificate serial: 0C43
Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/-t61XiF3Y6NDoT63kmCvRoLVj2g.roa
Signing time: Mon 10 Feb 2025 14:03:55 +0000
ROA not before: Mon 10 Feb 2025 14:03:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 395793
IP address blocks: 103.129.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3139 (0xc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Validity
Not Before: Feb 10 14:03:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FADEB55E217763A343A13EB79260AF4682D58F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:7e:1f:e8:dd:d5:45:68:7c:f2:78:06:00:
bf:ab:f2:6a:4f:f8:8b:35:c8:e0:8d:d7:6e:22:65:
84:24:17:2a:d1:f2:85:42:3d:44:bc:c0:80:48:9e:
92:61:66:f5:89:58:ae:62:cd:c9:d1:28:c9:56:9c:
fc:9c:dd:72:0c:19:9d:6e:3d:e9:62:44:6b:16:9e:
dc:56:16:d0:97:63:61:c4:37:1b:e8:17:48:7e:8c:
dc:56:27:21:7f:c0:ce:dd:07:c1:a1:f9:9f:26:10:
be:62:30:c1:b1:f0:ad:1a:15:e6:b3:4c:23:3d:2f:
1a:c9:09:8b:23:96:4f:c6:18:6a:d5:6c:1e:b4:05:
90:55:a0:20:10:4e:a1:c5:8f:76:15:63:a3:fe:ec:
73:f4:91:ef:6c:c1:02:e7:1e:65:82:0c:98:71:10:
f1:87:fc:2e:4d:84:20:82:31:32:93:0d:ca:dd:a2:
ed:47:91:ab:0f:90:15:55:7c:96:ee:a6:e4:71:2e:
ff:e3:d9:d2:0a:e8:9e:0f:80:93:ff:e1:4e:e2:b3:
5f:6c:65:85:90:54:b4:42:99:f0:91:8d:ab:20:5d:
18:eb:24:31:26:28:00:93:ea:4c:bd:40:e2:71:80:
18:12:99:b9:7c:94:1e:6d:f3:bf:c5:89:81:32:1a:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:B5:5E:21:77:63:A3:43:A1:3E:B7:92:60:AF:46:82:D5:8F:68
X509v3 Authority Key Identifier:
keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/-t61XiF3Y6NDoT63kmCvRoLVj2g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:24:7f:d1:54:b4:e9:01:22:2f:ec:47:90:dc:e0:d6:bf:4c:
55:96:3a:47:2d:56:da:32:17:d4:3e:f0:5b:b8:57:61:cf:42:
d7:58:cd:b5:7c:72:92:48:49:30:78:ea:b6:76:54:8b:94:f3:
5e:f2:fb:99:5b:7f:91:0d:e1:be:66:71:6a:eb:b5:4c:0b:38:
6f:1a:44:64:ec:13:7a:df:25:9e:09:22:ad:16:64:4e:67:6a:
ad:89:f5:e8:9c:f6:c7:cd:fc:a7:cc:d9:d3:22:cf:15:de:79:
6b:36:b1:cd:cb:48:f8:5c:45:94:fc:2d:cc:ce:dc:d3:7d:c2:
c8:ef:41:b6:bd:e7:25:32:f4:6a:f5:6e:fa:3a:b7:2a:e6:64:
05:db:08:b7:32:f4:c4:2a:bd:58:e4:f0:91:46:db:be:86:a5:
1f:37:0d:be:de:01:8d:c0:fc:79:f9:8f:e5:22:5c:bc:37:37:
b5:92:d9:1e:d7:b9:ee:e6:d6:5e:c0:64:4f:14:14:11:58:4e:
7a:f8:c2:95:0b:e6:fe:6f:59:df:29:74:94:3c:28:28:d5:92:
37:d1:be:e3:9d:ca:58:cd:56:b5:d2:6e:4f:b2:4b:90:08:53:
7b:33:13:10:95:a8:0e:70:a5:a7:99:15:3a:43:df:97:64:86:
68:14:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:31 2025 by rpki-client