Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/2m3Hp8uEyZl_stsC9JAcGLWdd34.roa
File: 2m3Hp8uEyZl_stsC9JAcGLWdd34.roa (raw, json)
Hash identifier: Lihym19vAjiynY5VWk8qc5ODM/a1VdF3MHr3mraWVYc=
Subject key identifier: DA:6D:C7:A7:CB:84:C9:99:7F:B2:DB:02:F4:90:1C:18:B5:9D:77:7E
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/2m3Hp8uEyZl_stsC9JAcGLWdd34.roa
Signing time: Thu 15 Sep 2022 02:37:55 +0000
ROA not before: Thu 15 Sep 2022 02:37:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 202.144.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DA6DC7A7CB84C9997FB2DB02F4901C18B59D777E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:62:73:70:bf:4c:23:64:cf:51:33:9b:de:
a4:6f:c1:71:14:12:d2:c4:d5:85:84:a6:fb:35:7e:
25:10:81:03:36:e6:50:9f:e5:12:dc:9a:58:ae:1b:
77:98:f2:8d:3a:9d:a0:23:90:a0:98:8c:12:45:5f:
49:a6:30:f6:15:90:1c:5a:4b:4c:60:6a:6f:94:be:
94:1a:2c:e9:6a:76:48:66:5a:20:cb:8e:03:10:fb:
8d:e6:32:56:31:dd:5e:f4:0b:6c:74:51:38:6c:a6:
f4:8c:b4:ca:de:f3:aa:2a:fa:8f:10:88:af:01:c6:
31:67:6e:1e:56:59:b6:02:1f:a6:a4:8a:c7:39:a6:
db:39:cd:85:e2:dc:da:a1:00:28:d6:3c:de:78:d2:
86:4c:96:9e:89:37:5c:bc:86:87:e4:cc:9b:4d:76:
3b:1b:f4:3e:9e:0a:f4:fe:c9:41:af:56:1b:9e:b0:
b7:e8:7c:ca:d1:d9:17:3d:0c:81:71:de:5a:8e:6e:
15:4d:f3:96:87:e1:22:92:ab:4e:6d:6a:d5:e1:57:
ec:13:2d:73:8b:58:15:10:ce:34:96:ac:f0:24:5b:
08:d5:c4:d0:9a:32:dc:ad:2e:5a:47:6d:44:64:ad:
a3:9e:aa:44:5b:bf:33:6b:b0:e9:0e:7a:d7:0d:08:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6D:C7:A7:CB:84:C9:99:7F:B2:DB:02:F4:90:1C:18:B5:9D:77:7E
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/2m3Hp8uEyZl_stsC9JAcGLWdd34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:f6:29:35:87:9b:6d:29:e6:c5:3f:e7:c8:a7:fc:56:32:da:
da:47:a1:ef:b9:73:54:ad:1e:25:2b:c8:5d:05:4c:8a:7d:b0:
c7:6f:b3:56:06:dc:e5:12:39:77:fc:53:e3:06:4a:05:92:e4:
e6:c1:5e:b8:6e:1a:2c:e8:aa:5a:af:a8:f2:e3:03:d2:b4:5a:
1e:3c:13:f0:59:02:f8:3f:2f:00:6d:2f:cf:42:42:ef:f5:49:
ce:51:88:29:f6:6e:0a:50:f1:2e:68:ed:4c:eb:db:ac:9d:37:
8b:99:36:b1:01:d6:98:01:19:52:b6:1c:07:88:18:5b:97:74:
c6:9e:39:61:bc:0a:cf:42:22:0e:b7:aa:8a:d9:58:11:b8:e9:
67:25:a0:09:94:ac:ae:92:4d:f6:ca:1a:f5:f4:c9:fa:02:d5:
4a:6b:64:d3:79:af:6f:93:54:06:86:58:82:e3:31:bb:41:06:
6b:c4:72:02:4d:cc:e6:92:5c:2d:e9:b1:7a:a7:b4:ad:8f:fd:
cd:a5:ec:cd:3c:e9:81:9d:b8:b8:1e:70:cc:b2:d8:e3:19:d9:
b6:67:b8:5f:39:70:04:47:f1:e6:60:9e:ff:ca:bb:ea:89:58:
38:e3:d3:be:95:02:d1:76:c8:e5:d8:fb:75:24:ad:78:3b:eb:
e6:36:4f:97
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMjA5MTUw
MjM3NTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERBNkRDN0E3Q0I4NEM5
OTk3RkIyREIwMkY0OTAxQzE4QjU5RDc3N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrwGJzcL9MI2TPUTOb3qRvwXEUEtLE1YWEpvs1fiUQgQM25lCf
5RLcmliuG3eY8o06naAjkKCYjBJFX0mmMPYVkBxaS0xgam+UvpQaLOlqdkhmWiDL
jgMQ+43mMlYx3V70C2x0UThspvSMtMre86oq+o8QiK8BxjFnbh5WWbYCH6akisc5
pts5zYXi3NqhACjWPN540oZMlp6JN1y8hofkzJtNdjsb9D6eCvT+yUGvVhuesLfo
fMrR2Rc9DIFx3lqObhVN85aH4SKSq05tatXhV+wTLXOLWBUQzjSWrPAkWwjVxNCa
MtytLlpHbURkraOeqkRbvzNrsOkOetcNCGS/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU2m3Hp8uEyZl/stsC9JAcGLWdd34wHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vMm0zSHA4dUV5Wmxfc3RzQzlKQWNH
TFdkZDM0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqQ0DAN
BgkqhkiG9w0BAQsFAAOCAQEAtvYpNYebbSnmxT/nyKf8VjLa2keh77lzVK0eJSvI
XQVMin2wx2+zVgbc5RI5d/xT4wZKBZLk5sFeuG4aLOiqWq+o8uMD0rRaHjwT8FkC
+D8vAG0vz0JC7/VJzlGIKfZuClDxLmjtTOvbrJ03i5k2sQHWmAEZUrYcB4gYW5d0
xp45YbwKz0IiDreqitlYEbjpZyWgCZSsrpJN9soa9fTJ+gLVSmtk03mvb5NUBoZY
guMxu0EGa8RyAk3M5pJcLemxeqe0rY/9zaXszTzpgZ24uB5wzLLY4xnZtme4Xzlw
BEfx5mCe/8q76olYOOPTvpUC0XbI5dj7dSSteDvr5jZPlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org