Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa
File: G6qUEgGsnCdNyGnhiyraFakEYmo.roa (raw, json)
Hash identifier: fQ4Kx1BrVnKMTLBUnIsw4+UnUcluscz5831vze1Tyxs=
Subject key identifier: 1B:AA:94:12:01:AC:9C:27:4D:C8:69:E1:8B:2A:DA:15:A9:04:62:6A
Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Certificate serial: 0C41
Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa
Signing time: Mon 10 Feb 2025 14:03:55 +0000
ROA not before: Mon 10 Feb 2025 14:03:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 395793
IP address blocks: 103.129.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Validity
Not Before: Feb 10 14:03:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1BAA941201AC9C274DC869E18B2ADA15A904626A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:db:a4:35:ba:d5:42:12:0d:24:8e:13:c1:
46:f2:b6:ad:5f:80:b8:f4:9f:74:74:d6:bf:fc:43:
c6:12:da:de:de:48:65:4d:0a:cf:5b:c9:78:56:ab:
02:18:48:52:24:ec:66:1c:36:60:30:12:35:c7:07:
85:f6:0e:6c:ce:bf:b0:6f:0e:01:4a:fa:ea:2c:6d:
83:bd:e2:aa:44:b8:f1:9a:6f:fa:33:3d:a7:ed:91:
b9:ab:51:e7:a5:89:c7:85:af:9b:2f:d4:92:f4:01:
0d:05:97:6f:4e:d3:36:63:57:68:e9:d9:5c:78:37:
87:c6:95:61:ca:a2:af:b4:2f:df:3c:af:5c:0a:10:
be:e5:05:b7:75:59:b7:f3:80:bd:24:81:76:64:ad:
67:f7:db:42:86:bb:1e:6e:2e:e7:11:39:ff:36:ae:
f8:07:68:82:6f:32:a0:92:b7:ce:1a:2f:14:de:0b:
23:0b:f2:f1:d7:8b:6e:82:01:40:26:a0:b8:29:b9:
00:a7:49:c5:2a:9e:61:be:ff:79:37:d3:e7:57:2a:
39:8f:8d:d5:5a:6f:e4:2f:0e:81:61:9c:75:ff:ee:
42:cf:d0:04:b4:00:f5:8d:34:34:ac:18:17:dd:25:
a7:66:4c:b8:03:e9:25:49:e7:4f:d6:7e:26:b4:9e:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:94:12:01:AC:9C:27:4D:C8:69:E1:8B:2A:DA:15:A9:04:62:6A
X509v3 Authority Key Identifier:
keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:15:3a:32:cf:8f:d2:09:bf:35:d1:5b:a9:0f:38:90:ff:70:
eb:4b:f2:0a:e6:76:e2:2e:4d:44:67:71:16:68:86:2b:84:f4:
43:bf:3a:f4:c5:9a:3d:49:58:34:2b:ad:a6:e2:1f:a0:a0:a6:
01:ac:e9:6b:63:32:cc:20:e3:ae:1e:11:49:af:e0:e9:53:45:
6c:33:82:d4:09:31:3b:28:34:0f:e2:92:48:f7:6c:31:90:9d:
c6:23:bb:38:9f:bb:7c:f8:a6:00:df:29:58:11:42:5b:de:77:
88:be:48:41:43:8a:00:7f:e5:0d:80:23:49:af:0b:e7:bd:c6:
bc:9f:43:db:7d:3e:8b:aa:79:d9:94:97:4a:77:89:a5:12:35:
53:9a:b9:27:b4:fd:e0:f2:a9:16:9a:6e:4a:54:fd:84:e3:9b:
6a:46:12:b9:62:09:a9:63:52:15:22:be:98:56:f9:10:cf:52:
2b:fa:c7:7e:20:38:a8:78:b6:1f:77:e0:56:20:4e:bc:a8:4f:
81:68:0a:c0:cd:41:06:92:50:c8:09:e0:89:39:76:13:97:e7:
87:08:6e:7f:9a:d4:89:05:25:a7:33:ae:57:bd:0d:f7:ca:e1:
6e:53:06:a7:42:d7:d9:64:2b:30:39:4f:bb:3c:a2:e0:b6:07:
ad:f7:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:29 2025 by rpki-client