Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/13aJz3rNuQQZIr0otmC0s6cm1Qs.roa
File: 13aJz3rNuQQZIr0otmC0s6cm1Qs.roa (raw, json)
Hash identifier: lRSJaxfvlk68kVb4IerlxzkbbmLpBiYaA7Zs6Dna+JI=
Subject key identifier: D7:76:89:CF:7A:CD:B9:04:19:22:BD:28:B6:60:B4:B3:A7:26:D5:0B
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0991
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/13aJz3rNuQQZIr0otmC0s6cm1Qs.roa
Signing time: Wed 29 Sep 2021 02:36:57 +0000
ROA not before: Wed 29 Sep 2021 02:36:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 112.78.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 02:36:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D77689CF7ACDB9041922BD28B660B4B3A726D50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:21:a0:47:2e:11:07:1d:06:ae:f7:03:b5:
37:dd:5f:98:6d:bb:bb:73:c4:30:ee:dd:2d:95:49:
b7:4e:85:e9:49:67:32:de:bb:5d:77:c6:6c:cd:b4:
9c:e5:06:cd:0b:37:f1:c6:c4:4d:6d:7f:c6:c1:d8:
0c:59:20:39:f6:25:d0:3f:7f:d8:e8:ae:6e:76:6e:
7f:ba:3d:99:e8:07:22:e1:e4:94:90:63:8b:6a:ef:
9b:8f:e0:c9:33:91:72:22:d5:19:42:f9:b7:d5:37:
8e:2c:5b:a4:a1:35:5d:a8:64:99:bc:27:b0:eb:55:
46:79:01:90:53:5c:54:54:21:36:fa:06:76:2d:60:
b6:14:54:b9:5a:32:d1:d6:3e:f9:52:ba:ce:45:63:
8f:8b:98:7e:ac:58:01:c2:85:85:6d:00:d2:48:b8:
a4:e4:27:9c:5a:34:62:09:63:80:13:4b:b1:b5:d6:
cc:27:72:f2:ce:36:89:c8:a8:b4:2e:da:bb:3a:ef:
69:82:e9:cc:c2:74:aa:89:60:92:3f:9c:08:56:8a:
3e:fc:e7:e5:76:95:0f:d1:e2:94:1e:b8:3e:c3:71:
90:03:e4:da:0f:05:27:5a:d0:ba:d4:10:5d:35:91:
bd:ca:23:f3:98:e8:08:c1:8c:85:bb:ce:cb:aa:5c:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:76:89:CF:7A:CD:B9:04:19:22:BD:28:B6:60:B4:B3:A7:26:D5:0B
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/13aJz3rNuQQZIr0otmC0s6cm1Qs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
23:95:a1:0d:bd:e1:83:91:7e:53:cd:23:ae:7a:07:3d:84:1b:
6c:3c:01:78:64:ba:bd:aa:b1:ce:39:4c:99:12:e7:7e:1c:d6:
c7:24:42:47:1c:17:ae:6f:c5:73:1d:83:e0:0e:6d:b1:7a:18:
9a:01:2e:10:23:d2:59:42:2f:30:dc:6e:54:ad:9b:bb:66:c4:
46:60:a6:52:6f:93:56:a1:84:9e:6a:9e:64:52:12:eb:c1:4e:
a8:be:ca:3a:18:c5:f9:4f:93:68:b5:22:8e:06:93:ed:a0:ff:
d4:eb:d8:4c:f1:69:16:ff:c2:13:28:4f:75:5f:4e:d9:52:26:
ac:c6:ee:49:6e:51:8e:b6:9c:80:61:97:d3:9f:e0:9f:13:bb:
2b:e8:74:28:89:ae:50:a9:38:f2:b6:25:b2:35:db:2d:a7:f2:
f7:9a:9b:8c:23:42:7e:99:85:24:32:cf:9e:76:b4:74:48:09:
3c:b1:17:14:6c:6a:9f:47:17:73:f1:96:c6:2a:d4:af:5f:dc:
e6:e9:c4:ef:60:d6:c9:f1:35:b9:57:50:89:f7:b7:21:82:c7:
1e:05:f1:f1:37:6a:52:c5:09:44:9e:49:a1:29:2d:c3:2d:43:
46:95:5c:6f:04:63:d3:b8:af:ea:b0:7f:7d:1c:7d:5b:f9:03:
2e:e1:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org