Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/54N4UMppOF4APeYQbgc9lzll2Qw.roa
File: 54N4UMppOF4APeYQbgc9lzll2Qw.roa (raw, json)
Hash identifier: mJpFXQUjdbmVP4zXsNqYCNciO7uvyUF1s/kMBUPeQyQ=
Subject key identifier: E7:83:78:50:CA:69:38:5E:00:3D:E6:10:6E:07:3D:97:39:65:D9:0C
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B87
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/54N4UMppOF4APeYQbgc9lzll2Qw.roa
Signing time: Fri 01 Sep 2023 10:19:15 +0000
ROA not before: Fri 01 Sep 2023 10:19:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 116.89.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2951 (0xb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7837850CA69385E003DE6106E073D973965D90C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:2e:7f:70:05:ab:72:10:84:fd:a2:47:e4:
14:cd:98:5f:fa:32:73:e1:64:61:83:93:7f:78:16:
af:1b:ff:c3:8b:ed:94:ec:25:71:ef:bd:4c:71:f4:
40:4a:e3:12:c3:47:f6:de:83:58:55:d6:e5:a6:93:
4f:ad:3a:a2:b1:ac:d9:0a:db:1d:90:47:fa:4f:a5:
7e:a7:cc:b5:a4:d2:1c:22:80:2a:89:01:21:df:f7:
ab:81:78:63:ab:68:ef:b7:bf:0d:80:b3:1a:ca:e8:
36:c5:43:c0:19:77:41:53:30:a3:7a:38:1c:3c:3f:
c6:5b:6c:e7:67:59:6e:2f:12:bc:77:54:7f:c9:99:
ce:6d:14:6c:32:4c:a2:47:f6:e9:3c:c3:07:ef:5a:
bf:e6:2a:f7:fe:81:35:61:f4:a1:d1:8b:b7:5a:2b:
fe:cb:54:be:a0:34:c7:7a:c4:a1:bd:bc:cc:d5:dd:
91:75:23:10:55:51:47:3b:82:54:ef:32:2d:6b:31:
2d:7b:cd:98:99:53:2c:cd:7e:53:55:26:80:3e:93:
69:53:e2:cf:45:eb:02:0f:15:78:41:1b:83:21:54:
69:16:c6:4e:93:20:b6:8e:ce:1b:85:04:17:4c:26:
6c:be:59:34:d1:95:2c:67:28:bb:c9:66:e2:57:7e:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:78:50:CA:69:38:5E:00:3D:E6:10:6E:07:3D:97:39:65:D9:0C
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/54N4UMppOF4APeYQbgc9lzll2Qw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.89.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:84:51:5c:22:f7:c6:2d:80:37:2e:79:71:c1:2d:15:fc:41:
91:15:94:0b:e5:22:09:08:d4:4d:44:c1:ed:e5:81:88:b8:0f:
38:33:5e:c7:37:de:44:5d:2a:e8:88:3b:36:fd:f8:a1:bd:a6:
e3:f6:b4:68:05:ff:56:1c:4d:31:82:f4:0f:9d:dd:99:47:d7:
2a:50:e8:e5:a3:c7:1d:39:4f:59:bd:b1:29:4e:88:b2:d3:04:
76:4f:1f:c2:dd:a0:cf:10:81:d7:21:f4:af:f8:0a:94:fb:ad:
b1:16:b3:95:bf:a9:19:bb:86:50:76:92:ee:61:76:e1:bf:7a:
9e:e9:b6:47:24:bf:88:9f:1f:fa:33:ee:4c:ef:a3:0b:4a:bd:
e8:f2:2f:00:ce:91:b8:78:a9:15:79:0b:85:38:3e:65:2b:7d:
8e:29:1b:53:ba:5d:71:43:8e:53:eb:cd:ae:d3:7f:63:3c:ae:
39:83:55:5a:b5:75:17:41:a0:67:49:f7:ea:64:88:0d:52:67:
22:bd:33:81:ae:89:2b:db:2c:8f:64:bf:b6:f8:d3:91:7b:d9:
cb:0f:e6:b4:88:cd:f8:fe:14:86:51:b5:32:f5:d3:8a:1c:9d:
da:a1:fb:53:23:0d:8d:2b:05:7f:69:bc:23:89:f1:f4:ed:ad:
60:cd:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org