Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/5xNzhdCl_HiSMPM2e4iwTIhtnfw.roa
File: 5xNzhdCl_HiSMPM2e4iwTIhtnfw.roa (raw, json)
Hash identifier: i7kjXPLBBIKOdWtSPhuYBCJ3eruuV7OgagW2zDmUMoU=
Subject key identifier: E7:13:73:85:D0:A5:FC:78:92:30:F3:36:7B:88:B0:4C:88:6D:9D:FC
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B84
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/5xNzhdCl_HiSMPM2e4iwTIhtnfw.roa
Signing time: Fri 01 Sep 2023 10:19:14 +0000
ROA not before: Fri 01 Sep 2023 10:19:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 112.78.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2948 (0xb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7137385D0A5FC789230F3367B88B04C886D9DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:8c:2e:f0:5b:9a:ee:1a:a3:b7:a8:10:70:
a6:59:29:74:24:09:2c:e6:cd:a5:02:80:0b:78:e6:
7e:65:b1:25:24:34:b8:53:a7:58:cc:d7:da:63:f6:
e4:b8:5e:f4:7e:36:bb:3a:3a:f4:76:75:2a:d0:e9:
61:da:5e:46:9f:33:25:de:a7:c3:2a:4f:71:22:13:
e8:3f:85:7a:34:e7:1e:02:b8:ad:95:2e:03:54:7d:
01:57:23:29:bf:44:5d:ca:37:cc:bc:93:ae:2f:30:
c9:7e:00:09:72:b9:38:04:a2:ae:34:df:7c:d1:dd:
b5:f0:98:40:f8:f7:eb:49:53:6c:0c:bc:09:27:bb:
03:b6:d6:f5:59:85:ed:b2:0a:f5:4f:a6:a7:d2:77:
99:4d:0a:07:0a:bc:7d:4f:04:2b:06:ce:d0:9f:83:
66:f1:8d:5b:44:eb:62:69:61:46:d0:5a:58:60:19:
72:0c:b3:4d:64:6a:8a:1d:38:e6:e6:75:46:0d:78:
87:52:aa:43:8d:92:f6:8e:47:d0:45:dc:83:f2:cf:
92:84:ce:e6:31:c8:93:d2:13:3b:98:31:67:89:29:
bb:ac:d9:c0:e6:26:86:90:eb:b8:11:d1:1b:52:ba:
13:7f:09:bd:d1:65:06:99:36:c4:c7:87:97:d8:dc:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:73:85:D0:A5:FC:78:92:30:F3:36:7B:88:B0:4C:88:6D:9D:FC
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/5xNzhdCl_HiSMPM2e4iwTIhtnfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
53:38:a9:af:82:63:dd:1f:26:38:b0:8d:5d:d0:23:d9:ab:ab:
7d:46:6b:41:4a:d2:a9:8a:eb:4e:d8:53:c7:27:b0:3d:59:48:
09:56:f9:2d:8a:6a:d8:62:56:f0:47:1e:36:80:79:e9:dd:d3:
37:3b:6f:14:c0:96:38:be:d7:17:3c:90:2f:b9:be:8b:ad:92:
19:14:27:e3:96:4d:e2:e3:6d:02:20:f5:61:76:32:54:1a:09:
7d:14:b5:14:bc:d9:1b:db:4b:37:ef:ac:ab:fc:35:b8:89:08:
34:c9:74:94:4a:a8:83:f4:8a:a4:c1:18:5b:41:ce:67:45:19:
01:8a:e1:12:52:6e:23:43:fe:ac:ca:53:59:a2:a2:dd:53:7d:
86:1b:57:4a:e2:14:bf:29:73:ca:4e:c5:57:23:6d:7e:1d:c9:
80:c3:8e:01:0b:97:26:43:1d:fd:78:aa:85:27:08:1b:e7:c5:
74:03:8b:45:e9:57:59:ce:f1:4c:13:bf:08:60:f1:e7:06:99:
e4:62:e9:15:64:93:87:4c:ed:aa:31:4f:9c:9f:7d:2a:44:81:
65:f0:f6:9e:f1:c0:78:4c:f2:0a:31:c8:32:05:df:4b:3b:76:
24:2b:ce:86:6a:75:d0:10:94:52:ff:51:05:9f:60:91:0f:12:
c5:ce:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org