Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3E1CMxiLVHDLjehJm7DmjjwTELw.roa
File: 3E1CMxiLVHDLjehJm7DmjjwTELw.roa (raw, json)
Hash identifier: M0BDR7BOP2+1OTgsvAEj6J60Qx6FPSiHdkDRUncAH68=
Subject key identifier: DC:4D:42:33:18:8B:54:70:CB:8D:E8:49:9B:B0:E6:8E:3C:13:10:BC
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0EC3
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3E1CMxiLVHDLjehJm7DmjjwTELw.roa
Signing time: Mon 10 Feb 2025 14:02:45 +0000
ROA not before: Mon 10 Feb 2025 14:02:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.135.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 10 14:02:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DC4D4233188B5470CB8DE8499BB0E68E3C1310BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:a1:d3:e3:1d:5b:1f:ea:e3:7e:51:5f:8a:
b1:7e:ce:72:47:32:2f:67:0e:05:ba:84:3d:50:c2:
c8:06:59:97:27:d3:13:ba:0a:0f:91:f5:8e:50:08:
66:56:20:a9:89:ca:e3:e5:a5:fd:64:fc:c2:b9:88:
ce:ec:e3:5d:e0:6a:aa:66:82:03:65:a5:7d:dc:5a:
6f:f8:2c:b1:2b:13:6a:89:19:30:d2:c8:64:1f:2b:
b4:c3:a3:7f:5a:94:af:93:c7:78:30:72:56:30:15:
f2:64:15:1e:38:4f:3b:40:f8:e6:47:c1:4f:72:57:
b2:32:57:74:41:6e:00:d6:13:df:b5:9a:36:50:4d:
fd:0a:ac:de:55:6a:c6:98:66:5d:db:82:5d:22:de:
83:d0:88:e7:42:21:3e:09:34:da:cc:06:f7:fe:35:
cf:4b:dd:33:e7:fa:f4:38:ae:e2:ee:37:b5:dc:2d:
95:7d:0f:14:e3:f5:70:0c:47:85:99:13:6f:a8:84:
b4:54:54:5d:79:43:f8:9d:6b:50:5c:84:4a:df:47:
8f:17:30:67:8d:78:80:e7:f7:1e:19:10:0d:f9:6e:
9e:b0:ee:2a:98:3a:9a:ae:74:53:ca:3f:6a:5d:47:
eb:81:d7:f0:50:ba:dd:53:f6:44:19:cc:aa:09:01:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4D:42:33:18:8B:54:70:CB:8D:E8:49:9B:B0:E6:8E:3C:13:10:BC
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/3E1CMxiLVHDLjehJm7DmjjwTELw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.118.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b2:44:e3:57:6d:c5:18:50:78:06:98:31:62:1e:bd:09:26:
f3:11:57:c7:96:a6:4e:da:e6:05:67:8d:c5:12:26:f2:b1:70:
e9:73:02:eb:9a:89:03:56:23:3b:43:64:d0:31:23:97:27:45:
ce:1a:22:06:58:ac:38:7f:d6:b2:3a:b2:cd:d2:75:29:2f:88:
98:a9:f6:45:94:20:12:c4:90:71:62:ca:d2:46:37:6e:53:a2:
97:6f:1d:71:5b:a9:8c:c9:c6:96:db:41:2e:f7:33:07:82:96:
c5:13:0d:58:00:35:fe:0b:7f:86:22:45:22:5e:bf:a5:a8:2a:
47:41:9d:2b:b7:32:f1:dc:98:24:12:de:82:72:7f:2b:59:b4:
f0:64:87:51:f7:9a:b6:e6:2a:2a:0d:ee:a7:64:15:72:a4:95:
c1:6f:bc:69:0a:d0:0c:e4:d7:94:fb:e9:06:47:e4:07:0b:79:
ac:2b:11:a0:e4:85:ee:e8:34:18:fb:df:83:c3:c5:61:1c:68:
ce:ef:20:02:9a:cc:c4:0f:45:0e:e7:47:2e:a4:10:26:7e:5c:
62:55:67:68:20:ba:fd:ad:d8:ff:73:ae:31:90:9c:39:94:6a:
bd:7d:d1:f6:5e:f1:f3:94:41:2e:0b:97:ed:db:ff:b6:21:7a:
c9:9d:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:23 2025 by rpki-client