Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa
File: LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa (raw, json)
Hash identifier: EpQzTqDgbvimXfBBbo1WZlcj2y014mNm8ypcOh2QOo4=
Subject key identifier: 2D:25:F8:7E:C0:19:83:40:4C:1E:B6:05:E8:E7:7C:9A:DB:D3:0E:D9
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0EC6
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa
Signing time: Mon 10 Feb 2025 14:02:46 +0000
ROA not before: Mon 10 Feb 2025 14:02:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.135.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 10 14:02:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2D25F87EC01983404C1EB605E8E77C9ADBD30ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:43:bd:95:ef:55:a2:5d:cb:93:cd:46:5d:
b9:1b:86:bb:df:5a:2b:b3:b0:61:28:0c:44:33:df:
14:69:69:bc:ae:6e:2d:67:86:20:fc:89:4a:ee:50:
c1:8e:0f:95:ac:35:e7:7c:01:12:92:70:e7:b4:2f:
8e:6b:0e:41:a8:0c:35:49:9b:4c:2c:14:b5:f6:1e:
83:48:18:ef:21:10:67:c9:c9:2f:53:f3:c4:8c:52:
d5:37:29:b5:10:1a:ed:07:29:8b:39:19:89:8b:18:
21:c3:d8:d6:b6:15:9f:7f:95:71:0d:de:7f:3b:57:
61:8e:ee:6b:91:c0:32:b8:5f:1b:c0:26:4e:36:8d:
49:26:cd:b9:6b:cf:2e:5f:08:df:f5:b9:1f:b7:6e:
7f:62:91:0d:4b:bd:2f:b0:47:77:ed:7d:75:40:b9:
63:bf:c2:71:a2:6e:47:91:55:2d:b2:95:b4:82:e9:
65:98:c1:af:dc:55:80:8e:9d:7a:a5:92:27:25:03:
df:b5:21:88:69:49:ae:d6:8c:91:d3:62:d8:ce:d5:
e4:b8:1c:25:03:a9:2f:10:a7:c7:d9:5f:3a:4b:2e:
59:c5:0c:b1:4a:8f:e3:58:c2:13:8f:bc:2a:e6:29:
68:f5:a6:66:e4:63:a3:48:3e:de:26:54:f9:95:72:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:F8:7E:C0:19:83:40:4C:1E:B6:05:E8:E7:7C:9A:DB:D3:0E:D9
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c2:02:45:69:ad:cb:fb:71:3c:a6:96:b7:1c:d3:88:70:d0:
66:64:17:81:3b:8d:37:04:d5:8c:b7:d6:bb:14:1e:9f:e4:e0:
3e:99:c7:79:40:43:d3:ef:cd:c4:0e:78:79:0f:90:60:7c:72:
aa:0b:5a:2b:92:7f:e5:08:a8:69:23:35:53:da:00:a1:4b:9e:
24:59:f2:29:cb:82:b8:77:6e:71:13:36:d5:93:64:d0:f2:ed:
9c:c4:b1:41:fa:f8:0d:21:ab:19:dc:ad:38:30:9b:1a:e0:96:
f2:b7:69:e0:38:aa:1e:18:3a:f9:fd:33:cd:00:0c:65:68:ae:
a5:b3:92:bb:93:05:8c:62:07:4e:0f:d2:c6:c9:c6:b4:da:77:
29:cf:ea:10:11:cf:d3:82:10:d6:36:ce:e9:08:58:75:b4:ef:
39:37:c7:09:c4:c8:a3:8d:b2:d8:78:0c:28:ed:07:76:f5:5b:
e7:7f:fb:aa:1a:cf:85:64:23:05:4d:48:71:76:6b:20:7e:45:
95:f0:42:99:ef:95:c1:72:87:e1:3a:14:5f:8b:d5:e0:0d:0b:
9f:4b:4c:64:27:54:d9:76:a7:8c:57:4d:97:75:a4:aa:f0:51:
f0:46:30:a7:c4:fd:8b:68:16:92:fd:fc:77:aa:e6:08:b5:e0:
02:30:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:39 2025 by rpki-client