Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/0q9dv3Gt-pfmgHw2WD4k2Ay5cUw.roa
File: 0q9dv3Gt-pfmgHw2WD4k2Ay5cUw.roa (raw, json)
Hash identifier: FzR0RJVGyJ4ZZGPfaV8hxK6XpzWvkP2xfVfO8vqgPeU=
Subject key identifier: D2:AF:5D:BF:71:AD:FA:97:E6:80:7C:36:58:3E:24:D8:0C:B9:71:4C
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0788
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/0q9dv3Gt-pfmgHw2WD4k2Ay5cUw.roa
Signing time: Tue 29 Sep 2020 10:09:08 +0000
ROA not before: Tue 29 Sep 2020 10:09:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1928 (0x788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D2AF5DBF71ADFA97E6807C36583E24D80CB9714C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:87:27:2f:da:3b:4d:43:6a:79:5a:4c:ec:
b2:28:69:5b:a2:dc:ff:df:fb:d2:68:06:84:db:8b:
eb:26:0c:fe:75:44:30:5c:bc:bc:3f:75:a7:d6:45:
7d:0e:0d:d0:6e:32:c7:55:77:83:75:a9:5d:85:3b:
05:a5:e4:32:b3:c7:cc:94:7a:b1:0d:60:ef:2c:6e:
32:2e:e3:45:1c:9d:74:c4:da:fe:b4:23:0e:e8:e9:
72:22:6e:89:62:34:40:94:cd:6c:e3:ac:19:87:ca:
42:b2:bd:d8:22:86:a1:f1:d8:75:ce:eb:65:48:fa:
5b:b4:7c:55:41:9d:e4:c1:6a:e4:4b:3b:c8:c5:ab:
1c:53:7c:7c:e9:40:ff:52:88:07:ee:f6:c3:98:87:
bb:2a:52:0f:f2:8a:dd:c5:2e:bd:f1:23:0a:fb:76:
2c:b6:1f:8a:fa:cc:d1:47:c1:37:a2:e3:d4:48:28:
5d:f7:74:13:8e:6f:0c:45:47:91:90:1b:8e:ef:c7:
8b:a8:39:bb:4c:53:07:eb:42:0e:06:d6:c4:2e:4c:
1a:6e:96:55:69:5c:55:ee:37:27:d5:e8:ff:f9:07:
87:2d:1a:3f:6d:49:cd:58:d1:dd:8d:56:bd:6e:52:
a5:73:c2:a1:d0:54:8b:3c:61:24:5f:ca:80:2e:32:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:5D:BF:71:AD:FA:97:E6:80:7C:36:58:3E:24:D8:0C:B9:71:4C
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/0q9dv3Gt-pfmgHw2WD4k2Ay5cUw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:75:61:76:be:56:01:8d:43:74:28:a3:ca:1b:62:db:e1:54:
72:7e:d0:37:a3:5a:8a:4b:40:06:5c:08:fc:5a:73:74:47:c3:
ad:ac:bf:e6:2b:d2:e8:e3:27:af:34:23:b0:d3:10:a1:d3:95:
b9:9d:16:46:0e:35:ea:4e:77:ed:bf:ab:b3:f8:a8:ed:2d:67:
3e:99:15:42:dd:d5:83:a1:ce:12:2d:b7:29:5c:03:48:ec:d0:
6b:ff:82:cc:9b:dc:60:b1:9c:c5:5a:a8:fe:97:5c:66:94:fe:
b1:20:00:60:76:8e:d5:08:08:12:e1:a0:d3:71:91:29:81:b1:
d2:f3:e6:5f:e0:cb:2b:c6:7f:67:f1:74:67:0b:5e:22:ee:e9:
4b:0e:0f:72:4e:52:7c:ca:90:b3:cc:55:74:95:4a:71:b8:78:
33:98:1e:93:ad:55:2b:d5:89:e3:f0:98:51:79:bb:36:8f:78:
63:e6:e4:58:13:d4:c3:94:db:e4:6f:03:5e:f6:b1:0c:bd:b2:
ed:27:cf:6a:e3:3b:08:66:98:23:84:88:1b:c8:77:86:67:da:
43:57:55:d7:4b:5f:ca:8f:51:30:8d:58:b8:60:a8:3a:69:75:
00:2d:f3:86:d5:a6:88:b4:d5:81:48:ee:74:da:95:48:60:9d:
d0:90:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org