Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
File: akbrX6qS0BL9HYycYwZhnIizpiM.roa (raw, json)
Hash identifier: HYFokAiimov8oJu8nEqq2ghPBHtOKiezbcC0x5KaHuM=
Subject key identifier: 6A:46:EB:5F:AA:92:D0:12:FD:1D:8C:9C:63:06:61:9C:88:B3:A6:23
Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial: 0EC5
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
Signing time: Mon 10 Feb 2025 14:02:45 +0000
ROA not before: Mon 10 Feb 2025 14:02:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131618
IP address blocks: 103.135.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3781 (0xec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Validity
Not Before: Feb 10 14:02:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6A46EB5FAA92D012FD1D8C9C6306619C88B3A623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:95:94:9a:79:72:5c:7c:8f:b0:f7:d7:5e:
01:94:45:67:16:17:e4:68:d1:21:1b:82:a5:ec:39:
06:e3:af:6a:46:54:80:4b:56:75:76:5a:4d:49:30:
ff:07:bb:08:31:62:bd:6b:61:7a:50:e8:75:34:0c:
03:a8:98:c7:85:0f:b3:6d:aa:f8:4f:ea:ce:08:87:
7a:7a:02:a8:1b:d5:49:47:8c:6a:38:c6:99:93:06:
a5:57:8d:17:73:db:d7:7e:bf:4f:9f:ec:04:96:b1:
da:1b:90:49:f6:6f:83:47:58:9c:95:d9:2d:14:6a:
73:c8:b2:5a:cc:b4:ed:cc:80:8c:7d:43:51:cc:f5:
34:69:b1:b8:c7:28:00:ef:50:f9:20:ba:8a:74:81:
3e:64:4b:f1:ea:18:e9:5e:68:87:58:7b:62:9e:c8:
b7:07:45:de:b2:44:e0:b0:fa:f0:e2:62:d2:52:70:
0c:8f:60:a2:63:28:6d:7a:a1:97:7e:9d:df:2a:e9:
49:5f:30:af:ed:f3:77:15:43:93:46:e4:b0:dd:67:
83:ec:6c:d8:ee:8a:9d:66:26:cf:0f:75:ba:60:c6:
ee:ef:c3:ab:1f:49:3a:06:ca:65:c1:d9:87:b9:f1:
4a:2d:f1:0c:d6:c2:e3:96:54:19:6e:45:c3:cd:6a:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:EB:5F:AA:92:D0:12:FD:1D:8C:9C:63:06:61:9C:88:B3:A6:23
X509v3 Authority Key Identifier:
keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/akbrX6qS0BL9HYycYwZhnIizpiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3a:4c:5b:1e:22:48:3a:14:f3:3f:e0:d6:09:b0:d2:bc:58:
65:f7:cc:77:f8:2d:ff:0a:9a:e9:9e:b7:0d:3d:58:fd:6f:89:
9a:0b:05:b5:36:a0:1a:d0:ed:6d:3a:56:43:f1:ca:08:b3:07:
2d:88:1c:bb:d5:0c:e1:20:b3:cb:90:e7:34:d1:6a:2a:9e:d4:
b9:47:e0:da:e3:77:4f:81:ae:9c:b7:99:2b:10:12:d6:ae:41:
09:0e:15:a4:99:83:4a:dc:ed:39:d6:b0:5e:e7:55:db:df:52:
95:7d:de:b2:23:e2:08:91:7d:fd:9d:fb:0e:7c:8c:18:57:56:
d8:07:f6:99:f3:de:70:dc:53:66:7f:31:87:bc:61:05:16:0f:
3c:44:a7:29:96:2e:43:7d:07:d2:99:bd:c3:5e:66:29:15:b7:
d1:3d:5d:57:4d:22:33:ff:58:83:d6:f2:7b:8e:a6:b6:c3:63:
fa:1e:81:b4:c9:6e:6c:c3:f4:0f:43:e4:43:72:ea:27:d2:68:
3d:fe:12:1e:fe:10:83:df:04:5f:cf:e3:95:22:6d:71:db:af:
51:02:c0:5e:e3:3c:a5:59:eb:d7:24:1a:e4:57:f7:0e:95:02:
f1:34:81:f0:e9:9f:0e:10:7d:a0:16:ed:fc:77:6b:94:92:69:
70:11:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:23:03 2025 by rpki-client