Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/4rBNDBD7suT8SzohRwgtae6MzQE.roa
File: 4rBNDBD7suT8SzohRwgtae6MzQE.roa (raw, json)
Hash identifier: A/b9y3ZCtco19G4cE7Cb/53kiEt1vKD0EHYS6ORNTh4=
Subject key identifier: E2:B0:4D:0C:10:FB:B2:E4:FC:4B:3A:21:47:08:2D:69:EE:8C:CD:01
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/4rBNDBD7suT8SzohRwgtae6MzQE.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 43.255.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E2B04D0C10FBB2E4FC4B3A2147082D69EE8CCD01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:50:ef:84:3d:f3:f5:7c:a7:05:fe:f1:2d:
bc:07:ab:70:52:a2:89:5f:f5:31:3b:fa:ae:08:c6:
5f:ae:14:f5:37:cc:3d:cb:52:64:b3:9f:ee:b5:07:
d5:84:dd:63:06:0d:40:12:0c:cb:7f:2a:84:78:34:
58:2f:4d:8f:d4:1b:f5:90:22:a3:44:b4:c9:ac:7f:
c4:17:32:b7:43:2b:50:ed:6b:7f:92:6e:54:28:4f:
dc:bb:ea:08:b8:70:86:68:be:54:97:8f:52:44:66:
d3:af:24:f0:45:05:dd:f8:13:d0:a1:72:d3:c9:c4:
79:fb:02:27:d1:fd:13:7c:56:ec:d4:5d:4c:fd:19:
2c:7d:97:03:f3:f3:24:dd:77:d1:d5:31:8f:9a:23:
b8:3e:71:a4:c5:ad:8e:7c:b7:31:7f:a4:58:69:74:
df:f8:a3:7d:a2:42:62:ef:2b:14:44:88:e1:a8:7b:
fe:3d:f1:7e:b1:4c:0a:da:37:32:b1:50:9a:ee:ee:
bc:d8:30:82:d8:67:97:5c:64:f6:81:01:d1:69:0b:
d6:d5:ba:69:45:96:f3:d8:ce:4b:bb:b9:18:db:70:
87:a3:ec:37:83:1b:db:2f:f9:f4:43:df:05:b5:00:
97:74:e4:86:6f:56:e8:96:c7:14:66:66:fb:2b:d1:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:4D:0C:10:FB:B2:E4:FC:4B:3A:21:47:08:2D:69:EE:8C:CD:01
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/4rBNDBD7suT8SzohRwgtae6MzQE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:c8:9d:ac:6a:89:0c:7c:aa:bd:a1:73:38:73:60:9b:dc:8f:
f3:24:bf:a8:c8:97:1f:c6:ae:0e:47:bf:60:4e:3a:99:73:8c:
61:0b:c1:10:0d:47:5b:7c:1e:55:44:f9:2b:3f:2d:30:d6:a6:
31:21:59:38:18:c8:4d:ef:a6:9d:f2:3b:05:f8:01:ac:5a:90:
b8:3c:e9:d8:0e:e7:9d:0a:89:d0:20:c3:ec:8a:87:61:8e:c0:
af:e3:e1:86:f3:8a:ea:ff:b3:77:90:69:da:f5:8a:8a:dc:57:
bf:75:bd:0f:72:ae:dd:da:08:6f:f3:cb:a4:3c:9c:96:a0:22:
f0:26:82:19:97:26:a1:ca:ed:f9:3a:d3:92:b0:31:d7:14:e2:
8c:09:ed:98:58:0a:ec:c9:bb:a4:f6:a4:8c:d4:cc:c0:ca:8f:
92:c6:c8:ed:19:66:a9:be:b4:3b:41:17:ea:16:e9:db:3b:86:
df:c6:87:6f:c8:2c:6a:04:13:b2:02:bc:e1:2a:0e:7d:64:62:
40:27:3f:00:97:35:87:f8:0e:c0:bc:87:c5:15:c5:fd:8a:0b:
54:a5:13:48:b3:cd:0b:24:68:f3:12:04:48:49:ae:d6:50:7e:
41:25:f5:ec:e0:d6:d5:02:24:9c:0b:df:7f:f9:40:0d:2d:a7:
56:ff:59:bd
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMjA5MTUw
MjM3NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUyQjA0RDBDMTBGQkIy
RTRGQzRCM0EyMTQ3MDgyRDY5RUU4Q0NEMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuoVDvhD3z9XynBf7xLbwHq3BSoolf9TE7+q4Ixl+uFPU3zD3L
UmSzn+61B9WE3WMGDUASDMt/KoR4NFgvTY/UG/WQIqNEtMmsf8QXMrdDK1Dta3+S
blQoT9y76gi4cIZovlSXj1JEZtOvJPBFBd34E9ChctPJxHn7AifR/RN8VuzUXUz9
GSx9lwPz8yTdd9HVMY+aI7g+caTFrY58tzF/pFhpdN/4o32iQmLvKxREiOGoe/49
8X6xTAraNzKxUJru7rzYMILYZ5dcZPaBAdFpC9bVumlFlvPYzku7uRjbcIej7DeD
G9sv+fRD3wW1AJd05IZvVuiWxxRmZvsr0ThdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU4rBNDBD7suT8SzohRwgtae6MzQEwHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vNHJCTkRCRDdzdVQ4U3pvaFJ3Z3Rh
ZTZNelFFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv/WDAN
BgkqhkiG9w0BAQsFAAOCAQEAuMidrGqJDHyqvaFzOHNgm9yP8yS/qMiXH8auDke/
YE46mXOMYQvBEA1HW3weVUT5Kz8tMNamMSFZOBjITe+mnfI7BfgBrFqQuDzp2A7n
nQqJ0CDD7IqHYY7Ar+PhhvOK6v+zd5Bp2vWKitxXv3W9D3Ku3doIb/PLpDyclqAi
8CaCGZcmocrt+TrTkrAx1xTijAntmFgK7Mm7pPakjNTMwMqPksbI7Rlmqb60O0EX
6hbp2zuG38aHb8gsagQTsgK84SoOfWRiQCc/AJc1h/gOwLyHxRXF/YoLVKUTSLPN
CyRo8xIESEmu1lB+QSX17ODW1QIknAvff/lADS2nVv9ZvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org