Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/-p8WEGMYsL-nNvQ0U7_uRP0gQCI.roa
File: -p8WEGMYsL-nNvQ0U7_uRP0gQCI.roa (raw, json)
Hash identifier: /KgUwfV61HcPkY2CSbRcyJuoU12ScNYWR4GZ2WZA/SU=
Subject key identifier: FA:9F:16:10:63:18:B0:BF:A7:36:F4:34:53:BF:EE:44:FD:20:40:22
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B7D
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/-p8WEGMYsL-nNvQ0U7_uRP0gQCI.roa
Signing time: Fri 01 Sep 2023 10:19:13 +0000
ROA not before: Fri 01 Sep 2023 10:19:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 2401:7080::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2941 (0xb7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FA9F16106318B0BFA736F43453BFEE44FD204022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:28:85:69:a7:fd:13:e5:12:65:0b:78:73:
ae:f3:c1:40:5c:35:d9:46:f2:cd:51:29:79:74:e0:
d8:5d:fa:99:85:be:51:e0:49:3e:b4:e2:07:a9:65:
2e:39:a9:9f:b7:2a:e0:bf:f1:31:93:01:45:2f:1a:
f4:61:88:a6:1e:06:6d:12:3a:5b:d5:12:77:4e:55:
ba:84:97:4f:ae:67:e8:d2:49:f5:38:bb:24:c8:c0:
17:8a:aa:fe:9f:1d:f6:31:d2:d4:52:f6:17:df:6d:
d4:47:6c:a2:59:15:f1:b9:91:63:48:52:5a:eb:bd:
04:b4:a5:de:02:1d:af:8e:ef:83:b1:07:04:c9:75:
14:af:c3:8c:5c:fc:f4:e9:74:4a:64:56:82:7c:64:
61:a1:bb:f3:36:86:c6:ea:ee:ed:47:c7:11:dd:78:
25:b5:1f:44:55:22:34:90:bd:9a:26:22:5d:fb:b1:
e3:5d:cb:33:ad:71:d5:b3:92:76:5c:5c:1d:1b:51:
3d:f9:ac:c0:b8:90:c7:f2:6d:1f:b0:7a:87:71:77:
8e:f4:11:28:8e:ad:17:0a:cc:ba:b6:d6:94:01:2c:
62:07:5a:d3:17:36:1d:af:83:a8:b5:7a:2a:5a:3a:
70:1a:3c:b6:62:86:5e:3e:42:93:21:da:51:b0:09:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9F:16:10:63:18:B0:BF:A7:36:F4:34:53:BF:EE:44:FD:20:40:22
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/-p8WEGMYsL-nNvQ0U7_uRP0gQCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7080::/32
Signature Algorithm: sha256WithRSAEncryption
a2:ee:95:62:20:0f:48:10:2f:c1:e5:8d:1d:25:c4:b4:89:95:
11:37:c6:7c:45:af:7b:a9:d3:53:eb:22:96:23:46:20:4d:37:
1d:c3:03:7b:5e:22:ae:cc:02:04:9d:67:be:3d:57:0a:0f:b8:
3b:cf:25:04:54:8c:0b:61:1e:8b:39:42:cc:b4:39:9a:81:dd:
5a:ea:af:c4:44:38:9f:d5:a4:d1:c7:5e:a7:e5:2c:1f:fa:19:
44:dd:54:cb:60:51:41:69:69:ee:26:3c:8a:14:e1:01:89:93:
56:81:36:f9:b8:1a:27:7c:fb:66:a1:66:c1:93:46:d4:3f:10:
ac:4f:10:03:fa:2c:d2:37:da:35:e1:f6:cb:4f:39:1b:0b:8e:
08:62:56:3c:72:7e:8d:9c:d3:6d:23:f0:b6:a0:5a:7e:b4:7d:
50:14:fb:62:06:e1:d5:ac:c0:35:49:c1:7f:1e:f5:d6:1d:bd:
ae:cb:0e:03:34:fb:86:17:4d:0c:e3:1b:d7:0b:da:d4:ee:14:
f4:a4:ad:5d:f7:0f:e5:17:1c:bb:9b:86:b7:d4:07:59:b0:17:
bc:b1:07:d7:03:a3:98:3b:6f:70:df:bf:84:1d:33:7a:15:b2:
29:f4:9c:5c:62:d7:af:73:47:43:b3:42:e3:90:b3:a5:32:9e:
f2:f3:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org