Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa
File: AtYV2TsNrWPEkeCu7wi4br3UPQs.roa (raw, json)
Hash identifier: 8jLEgR86ZlyZcf/UiQOx04kgpd4HcGegRqvUhYusyeM=
Subject key identifier: 02:D6:15:D9:3B:0D:AD:63:C4:91:E0:AE:EF:08:B8:6E:BD:D4:3D:0B
Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial: 0D61
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa
Signing time: Fri 22 Aug 2025 08:57:00 +0000
ROA not before: Fri 22 Aug 2025 08:57:00 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7483
IP address blocks: 103.42.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Validity
Not Before: Aug 22 08:57:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=02D615D93B0DAD63C491E0AEEF08B86EBDD43D0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:50:eb:d4:d9:a9:c6:4c:a9:ab:df:fd:fe:
69:1c:c1:ae:a5:d8:ca:ba:7a:e5:4e:71:c5:1c:ed:
69:49:68:ac:26:de:c5:8a:1a:62:34:c2:fc:06:79:
88:f2:99:26:2e:d1:82:9d:95:3f:9c:ea:81:6c:26:
82:ce:bd:2d:d3:f0:09:df:87:77:06:08:5d:17:0a:
52:0e:40:4b:38:e4:f3:a4:d7:3f:66:88:a8:cb:a8:
39:9a:2a:8c:cd:9e:f3:48:98:75:a0:5d:0d:58:d2:
5d:3a:91:2f:30:38:c1:58:64:74:a1:62:07:8a:c0:
9b:34:ce:3a:ee:5a:0d:1a:1c:91:55:4c:a8:98:cd:
1b:c3:24:9a:5e:a9:a8:ac:68:b9:c0:68:40:7e:b2:
e8:e5:2f:25:52:d1:cb:39:84:e8:3b:fa:52:dd:ab:
46:6b:b2:11:3a:50:f3:62:90:3e:d9:e8:51:57:11:
8d:a2:95:b6:ee:0c:72:a0:cd:69:4b:11:29:34:55:
8d:ee:34:61:d6:c2:72:1e:1a:8d:cf:cf:66:f4:65:
84:4c:4a:9d:33:0b:02:c9:85:80:78:4c:98:19:54:
5d:9f:bf:3e:ba:05:32:4d:fe:65:33:6d:22:f1:50:
34:c6:59:cf:3f:31:e3:55:58:82:be:20:16:21:a2:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:15:D9:3B:0D:AD:63:C4:91:E0:AE:EF:08:B8:6E:BD:D4:3D:0B
X509v3 Authority Key Identifier:
keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/AtYV2TsNrWPEkeCu7wi4br3UPQs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.144.0/22
Signature Algorithm: sha256WithRSAEncryption
29:cd:4a:a6:db:9e:ac:a2:e8:cf:f8:ef:69:d3:7d:0d:cd:95:
e9:f4:87:19:f4:c7:7e:ca:d6:e7:86:50:7c:39:78:ce:e2:0f:
72:c9:a6:03:ff:77:58:fd:21:fc:a2:99:1e:bb:ec:90:2d:05:
63:bb:bf:63:51:47:66:92:1a:1c:91:6a:b5:43:9f:96:d2:36:
31:db:da:cf:f4:bc:ef:eb:f3:e3:19:98:8f:79:73:e7:16:0a:
d5:9b:60:24:e1:60:5e:d3:56:8b:de:1e:a1:e9:1b:97:2d:f5:
d6:19:51:6e:90:4a:f4:d0:7c:ce:1c:b1:2d:ab:b2:94:c5:3b:
aa:7a:c3:b9:f5:e7:10:50:cf:cb:23:38:c3:c7:b9:94:72:88:
e1:5e:51:55:23:38:a0:1d:0d:ba:ee:94:a2:36:6a:16:a6:b3:
2e:95:85:a2:40:ba:b3:8a:15:08:e3:89:8c:c5:23:60:5c:19:
2c:0f:bc:eb:19:04:d7:e0:99:79:da:ed:36:15:c0:ea:0e:5b:
bb:e1:7a:70:bb:bc:6a:b2:b1:c0:f7:c8:60:fc:13:80:5b:09:
ca:e8:fe:85:6a:6f:63:da:c5:79:d6:92:cc:cc:f8:4d:bf:54:
ca:df:33:e6:b6:14:7c:8c:11:8d:29:88:51:14:ae:d2:9f:b6:
6b:3d:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:17 2025 by rpki-client