Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa
File: f-AEje1mBuOhXLtWrQ4EvHOSy28.roa (raw, json)
Hash identifier: QUd7BOCYVX7r8zIfyCLi2IGbWg4FuDJ4XJCKgSlm59g=
Subject key identifier: 7F:E0:04:8D:ED:66:06:E3:A1:5C:BB:56:AD:0E:04:BC:73:92:CB:6F
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0D54
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa
Signing time: Fri 01 Sep 2023 08:06:09 +0000
ROA not before: Fri 01 Sep 2023 08:06:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131618
IP address blocks: 103.135.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3412 (0xd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Sep 1 08:06:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7FE0048DED6606E3A15CBB56AD0E04BC7392CB6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:28:05:df:37:bb:a3:2e:4f:3e:a0:80:94:
b8:b7:96:df:5d:eb:8e:d2:de:ab:56:af:d9:5a:90:
60:33:84:04:a9:ec:da:af:73:c2:2a:94:b5:53:b3:
f6:b4:7c:0c:ef:a7:f9:1b:e9:f3:7a:8f:37:d3:a0:
0e:9d:31:03:a2:55:fe:9a:75:0d:7c:66:56:7f:13:
b3:0d:9c:46:36:64:5a:fa:40:a0:5a:1e:dc:0b:cb:
6c:f0:79:45:b5:b0:bc:d8:db:5c:60:15:ff:12:c1:
78:af:35:10:0d:15:6f:e7:14:d4:27:65:94:e3:90:
7d:7f:7e:19:74:37:7c:f0:5e:72:44:66:ea:d3:92:
fa:66:fc:ad:ca:f3:ea:71:61:da:2b:a6:69:ab:e8:
54:eb:c0:01:d6:bf:fc:ec:a0:ed:9b:27:11:ee:8f:
89:c8:91:60:d3:a1:16:ee:53:0d:5e:45:59:4f:ef:
28:18:d1:21:2e:42:1e:1b:67:30:6a:e3:30:a4:61:
b2:38:f2:eb:b7:19:5c:49:24:5f:9b:fe:ad:19:2a:
3a:f3:5b:8d:54:41:ed:04:be:39:2d:df:87:2f:40:
79:86:6f:67:e6:f1:b0:9a:fc:f4:47:9f:84:74:8a:
11:64:fe:bb:ec:12:af:31:97:3d:72:93:5a:24:5b:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:04:8D:ED:66:06:E3:A1:5C:BB:56:AD:0E:04:BC:73:92:CB:6F
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c4:35:6e:ab:ab:98:7e:1c:ba:38:46:a9:66:0c:38:17:1b:
78:1d:9b:62:74:02:73:15:4f:53:1c:95:95:73:4b:53:58:99:
db:cf:20:ee:87:48:b6:46:10:9a:ac:2e:80:b1:eb:a8:fa:7b:
bb:2e:5c:77:c0:0a:28:64:35:49:8d:45:88:df:c4:25:90:4f:
68:8e:e1:c8:2a:1d:72:32:8b:06:e3:50:37:4f:5a:a2:f4:b3:
ad:cd:d1:41:1c:1d:a5:d1:65:92:f5:59:f6:18:b3:bc:00:17:
f6:89:05:c4:70:d6:26:79:c1:ed:3a:a0:13:bf:f0:4c:84:9d:
76:d1:f7:d7:72:08:c6:c7:28:b4:06:c1:1b:7d:36:3e:58:1d:
02:0b:07:72:9a:dc:e5:99:8e:22:41:ec:ae:43:13:df:e6:2b:
e9:62:54:89:f8:b1:24:50:e9:57:36:1c:6b:c8:c0:b5:b3:d5:
1a:85:af:b6:8a:f8:bb:65:0c:77:bf:ae:9f:eb:e5:bd:74:ce:
a6:2b:ad:13:aa:c7:38:39:62:c8:99:51:0f:8a:7d:68:ae:2d:
21:4a:69:3f:f9:81:95:89:e6:93:3d:a6:bd:9c:96:b4:1e:f1:
4b:25:5a:da:9e:ff:7c:3f:3e:5d:29:da:6a:a1:81:5f:a7:7b:
fb:3c:18:1a
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG
QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yMzA5MDEw
ODA2MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGRTAwNDhERUQ2NjA2
RTNBMTVDQkI1NkFEMEUwNEJDNzM5MkNCNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/TCgF3ze7oy5PPqCAlLi3lt9d647S3qtWr9lakGAzhASp7Nqv
c8IqlLVTs/a0fAzvp/kb6fN6jzfToA6dMQOiVf6adQ18ZlZ/E7MNnEY2ZFr6QKBa
HtwLy2zweUW1sLzY21xgFf8SwXivNRANFW/nFNQnZZTjkH1/fhl0N3zwXnJEZurT
kvpm/K3K8+pxYdorpmmr6FTrwAHWv/zsoO2bJxHuj4nIkWDToRbuUw1eRVlP7ygY
0SEuQh4bZzBq4zCkYbI48uu3GVxJJF+b/q0ZKjrzW41UQe0Evjkt34cvQHmGb2fm
8bCa/PRHn4R0ihFk/rvsEq8xlz1yk1okW4CDAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUf+AEje1mBuOhXLtWrQ4EvHOSy28wHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV
xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM
T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL2YtQUVqZTFtQnVP
aFhMdFdyUTRFdkhPU3kyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABnh3UwDQYJKoZIhvcNAQELBQADggEBABvENW6rq5h+HLo4RqlmDDgXG3gd
m2J0AnMVT1MclZVzS1NYmdvPIO6HSLZGEJqsLoCx66j6e7suXHfACihkNUmNRYjf
xCWQT2iO4cgqHXIyiwbjUDdPWqL0s63N0UEcHaXRZZL1WfYYs7wAF/aJBcRw1iZ5
we06oBO/8EyEnXbR99dyCMbHKLQGwRt9Nj5YHQILB3Ka3OWZjiJB7K5DE9/mK+li
VIn4sSRQ6Vc2HGvIwLWz1RqFr7aK+LtlDHe/rp/r5b10zqYrrROqxzg5YsiZUQ+K
fWiuLSFKaT/5gZWJ5pM9pr2clrQe8UslWtqe/3w/Pl0p2mqhgV+ne/s8GBo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:10 2024 by rpki-client on console-ams.rpki-client.org