Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa
File: Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa (raw, json)
Hash identifier: N6+d+mCmP7VJqupLQ1bzymbE4WIHWxTDBc4DhMIyKlM=
Subject key identifier: 42:6E:DB:95:70:67:ED:1B:54:D8:27:9D:FF:9B:C9:CE:BB:60:A1:F4
Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial: 0C71
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa
Signing time: Mon 10 Feb 2025 14:20:11 +0000
ROA not before: Mon 10 Feb 2025 14:20:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.129.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Validity
Not Before: Feb 10 14:20:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=426EDB957067ED1B54D8279DFF9BC9CEBB60A1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:9f:c7:3b:63:7a:fe:6d:48:42:a7:e9:06:
8a:ff:b4:e1:c5:7f:47:17:86:21:9c:c2:ea:6b:64:
e4:e4:9c:8e:cd:58:ce:c0:11:6e:27:db:43:64:16:
8b:41:b7:ec:c0:17:0f:ef:1b:f3:1e:95:ba:dc:75:
4d:a6:3d:d0:45:cc:1c:38:a7:21:50:39:ca:aa:7d:
0d:20:fa:59:ea:ca:56:95:65:98:0e:21:a4:05:39:
99:56:66:7b:83:00:f5:58:a7:97:a6:fc:46:29:e8:
22:a9:a1:a8:d1:31:57:56:6f:9a:a4:03:2d:df:f5:
82:84:88:24:27:0d:15:b6:d2:92:3c:82:29:a6:27:
9e:9d:6f:28:e8:30:e9:13:fb:a3:20:be:b9:a4:a2:
99:e6:a5:ab:d8:4e:36:46:22:16:9a:06:8a:d0:ec:
3d:45:07:e0:b0:6d:eb:28:4f:46:37:a7:87:d1:a2:
6d:7c:c5:2d:e3:34:a0:15:11:7c:cf:cc:a8:87:ec:
b9:eb:f5:14:34:1e:5b:5a:00:3d:02:7d:ac:93:3b:
00:c3:6a:b8:b2:1d:29:68:2b:84:96:44:e7:a2:f6:
45:5b:cd:46:32:cf:fc:39:92:22:fa:66:09:a0:ac:
82:29:2e:81:fb:a0:7b:67:95:25:fe:76:05:50:63:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6E:DB:95:70:67:ED:1B:54:D8:27:9D:FF:9B:C9:CE:BB:60:A1:F4
X509v3 Authority Key Identifier:
keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/Qm7blXBn7RtU2Ced_5vJzrtgofQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:97:90:be:86:b0:c0:82:63:62:2f:13:7c:f2:9f:69:92:a4:
20:bb:20:fa:5d:ed:ed:b5:88:c0:a7:63:9f:61:51:3f:94:48:
ee:61:e6:2e:ec:0e:a0:6a:01:69:5b:f4:f8:08:45:38:9d:db:
b7:0e:35:ad:e0:be:62:5b:3f:ac:76:08:40:0c:c5:fb:e2:70:
f0:80:00:d1:2d:52:98:86:12:1a:f0:18:20:93:fe:e5:88:c3:
d6:8f:00:57:43:8e:dc:d3:dd:fb:24:a6:2e:8c:e1:bb:a7:91:
1b:7f:92:2f:d4:18:00:e4:53:b3:25:25:b1:a2:d9:57:61:47:
f6:21:58:9e:24:5c:03:70:ae:50:28:19:62:2d:b5:b1:8b:3c:
81:ea:c4:9e:cb:af:a7:f7:44:d5:57:79:a6:94:3a:d2:51:55:
17:c1:40:05:e3:d7:53:a5:ea:fc:0e:73:9d:d5:10:4c:0f:18:
58:d4:0d:51:c1:ba:ca:d2:a1:13:11:fa:ca:60:24:7c:69:d0:
9d:04:19:8c:81:ea:05:cf:06:a1:34:81:33:2f:dc:e9:3a:c9:
04:6e:8c:6c:76:9b:2f:de:e7:92:d4:2b:b1:bd:b1:04:d6:aa:
20:c7:44:77:bf:17:06:71:c5:ea:f5:8a:79:2b:41:2c:f0:6e:
91:b8:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:22:05 2025 by rpki-client