Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa
File: b17sTrvu7TFo_gu6dF7NeKkKgzo.roa (raw, json)
Hash identifier: dTNwnNXHOdlnqlBQhLJDAqrsFeQTb+KepeWSqYln5s4=
Subject key identifier: 6F:5E:EC:4E:BB:EE:ED:31:68:FE:0B:BA:74:5E:CD:78:A9:0A:83:3A
Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Certificate serial: 0C44
Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa
Signing time: Mon 10 Feb 2025 14:03:56 +0000
ROA not before: Mon 10 Feb 2025 14:03:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 214766
IP address blocks: 103.129.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7
Validity
Not Before: Feb 10 14:03:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6F5EEC4EBBEEED3168FE0BBA745ECD78A90A833A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:b0:9e:60:6f:b5:27:09:89:1f:b8:ab:9e:
33:0d:c9:a0:b6:a1:fc:44:dd:65:47:05:d5:6a:89:
02:7f:72:75:cf:90:22:db:64:e4:56:c7:c5:89:d1:
7f:4a:1a:b2:c4:6f:0b:83:73:02:32:9c:8e:f9:67:
4c:f7:3c:ca:a0:d1:90:b8:5c:38:24:43:0a:2d:8e:
cc:45:73:ef:a7:53:24:43:9e:ab:bc:ed:da:96:0a:
8f:40:a2:4f:f7:3d:96:9b:18:73:5c:68:61:2c:3c:
9a:b3:9c:6a:e9:da:15:29:d2:a6:e9:8d:5f:7c:03:
6b:ed:b1:12:4c:80:ed:ba:f9:ed:43:bf:77:7e:59:
17:65:41:58:dd:35:72:95:08:98:09:75:20:df:65:
33:ff:39:b6:ff:a8:7a:5b:c0:0d:29:68:3c:1f:83:
f8:ae:93:74:df:f6:b0:b7:eb:4c:18:92:ab:cc:42:
1f:56:d3:28:64:da:25:c0:6d:20:b9:37:83:cf:43:
90:2c:27:d1:24:48:83:32:61:61:48:40:33:69:a7:
59:ef:84:af:61:30:28:ac:8e:cc:fb:1d:6a:48:a9:
56:bb:34:3e:eb:57:c3:96:75:1e:0a:04:2f:65:cb:
42:ea:53:25:02:f1:79:93:63:8a:36:f6:39:b3:57:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:EC:4E:BB:EE:ED:31:68:FE:0B:BA:74:5E:CD:78:A9:0A:83:3A
X509v3 Authority Key Identifier:
keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/b17sTrvu7TFo_gu6dF7NeKkKgzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.160.0/22
Signature Algorithm: sha256WithRSAEncryption
11:37:ab:b2:b8:b3:b6:a1:f5:28:76:cb:96:4b:67:db:b1:4b:
16:74:65:dc:1a:51:12:61:89:b0:5f:80:6e:87:25:35:bb:a7:
71:00:45:a0:62:bd:8e:cc:03:5b:31:00:85:3b:d6:35:eb:0a:
a0:39:12:0d:8a:cf:a7:a0:8b:23:f6:73:4e:18:01:a7:84:ad:
21:dc:4e:45:ac:68:77:aa:2d:39:c6:88:31:a3:3f:ce:28:dd:
9a:37:3e:ea:93:ad:5f:3c:04:87:a9:ce:ff:85:3e:92:20:a2:
5f:01:d3:ff:9b:bc:61:fe:fa:c2:64:7e:da:15:56:da:ad:3b:
67:1b:5e:bd:05:00:12:94:10:b0:f4:bc:0b:a8:a5:4b:b1:a2:
33:bb:7d:77:22:00:5a:b9:24:30:97:31:e3:21:08:20:f9:2e:
e3:d5:94:93:32:5d:3c:68:1b:e4:18:15:8d:3e:26:b3:53:8c:
30:93:ac:3b:da:30:30:0b:4c:a5:d0:21:65:3b:f0:e1:5e:b1:
89:6f:b1:81:55:69:43:6c:3d:cf:47:25:92:e0:02:a7:26:f8:
53:0a:cd:4b:30:58:fa:78:b2:3d:b3:29:3e:a5:bd:f6:49:0c:
70:23:35:ca:96:d9:09:e6:74:d9:ce:b1:1a:ad:83:c4:62:b3:
58:02:0b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:14 2025 by rpki-client