Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/31O8K4oCkyQyYt8je-uU2o_MbKs.roa
File: 31O8K4oCkyQyYt8je-uU2o_MbKs.roa (raw, json)
Hash identifier: 9Ygb8K8Do1cBnogc/89IxPHwTa6pW4JuJbWGqWk2kTo=
Subject key identifier: DF:53:BC:2B:8A:02:93:24:32:62:DF:23:7B:EB:94:DA:8F:CC:6C:AB
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/31O8K4oCkyQyYt8je-uU2o_MbKs.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF53BC2B8A0293243262DF237BEB94DA8FCC6CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fa:de:39:32:2a:61:3c:b1:9f:cc:1c:d9:0a:
18:1c:97:d9:3a:b9:b5:58:ca:76:25:9e:78:b3:44:
8a:a9:45:4b:d7:62:d6:58:dc:d1:37:bd:2e:ef:40:
74:0d:54:b9:33:f1:6e:a8:97:fe:be:cf:9c:e9:7b:
71:fd:bb:c2:b3:2b:d8:79:4c:90:d2:ea:43:33:e6:
b4:af:79:15:db:b7:7c:6f:66:e5:d0:fc:1f:a8:a4:
f5:75:77:12:31:a9:8a:de:b2:0d:10:e9:29:c1:78:
b1:ec:ce:fb:19:3c:6b:c0:7e:9b:97:6d:0d:fc:a3:
45:c0:ed:91:1f:3a:02:9a:16:31:90:50:48:4b:33:
d1:40:3a:eb:e9:04:30:a1:ba:95:8b:ab:65:d2:1a:
57:49:56:db:5f:b1:66:49:7c:0b:2f:e1:8d:6a:c9:
eb:fa:05:5c:b5:ec:83:22:c9:44:31:6d:6d:20:7e:
eb:38:e6:2d:88:b7:f9:b1:20:dc:ef:06:5b:65:20:
78:1d:87:4d:62:e9:8b:2c:82:30:bb:3a:35:77:23:
71:e6:df:42:fc:0d:6c:91:b1:3e:0e:93:69:5a:46:
3c:e9:df:f1:8e:18:02:be:4c:49:95:71:74:cb:b8:
dc:70:dd:3a:c6:27:97:0b:59:5f:ff:c2:bc:7d:2f:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:BC:2B:8A:02:93:24:32:62:DF:23:7B:EB:94:DA:8F:CC:6C:AB
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/31O8K4oCkyQyYt8je-uU2o_MbKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
43:f3:bd:8d:ad:d7:63:bb:3d:74:e7:55:d6:a2:77:1b:b5:da:
42:a4:e2:53:4d:6c:f1:45:95:b2:d7:77:32:75:40:2c:a8:01:
7c:e9:55:a0:0c:bc:c3:46:a8:43:3c:56:c9:02:fb:cb:80:11:
32:0d:4d:55:d1:88:b2:13:e8:3d:9c:db:aa:1a:ed:08:e1:12:
bb:e8:c3:5c:48:8b:dd:49:c7:70:88:35:6a:7c:8a:f6:f0:82:
02:8e:99:69:7f:9f:8a:19:28:3d:32:ba:57:dc:81:4e:46:7f:
db:a1:86:45:a8:b2:68:5f:d0:cc:66:62:e8:cb:a0:e6:23:b4:
c5:9c:48:cd:e9:75:89:f9:1f:57:6e:b2:0d:72:56:60:9e:cc:
7c:e6:98:4c:49:f2:39:ca:90:fe:fe:c8:b0:a0:99:3b:65:13:
2e:68:34:fc:fa:32:b8:6f:5a:9d:3f:9c:2b:0e:88:85:20:b9:
5b:2f:0e:71:68:ed:f3:de:d5:49:7d:d3:f9:51:df:3e:a6:cd:
9d:bf:55:37:28:54:46:4a:b2:39:90:66:ed:ae:3b:34:c8:c8:
99:23:b7:1c:37:c8:b5:77:17:15:f6:2b:50:e4:b7:37:83:a0:
0f:da:1e:17:04:29:2b:b3:f2:bf:f5:e9:88:ac:9f:8d:85:08:
8d:87:42:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org