Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/65jvrDXcgKFHv2DGXp-6HK0ffus.roa
File: 65jvrDXcgKFHv2DGXp-6HK0ffus.roa (raw, json)
Hash identifier: IpOiWtZ1Z+S0PTIIsW6Xnxd8wcmJf4qRSlizudZDD/8=
Subject key identifier: EB:98:EF:AC:35:DC:80:A1:47:BF:60:C6:5E:9F:BA:1C:AD:1F:7E:EB
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/65jvrDXcgKFHv2DGXp-6HK0ffus.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 103.5.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EB98EFAC35DC80A147BF60C65E9FBA1CAD1F7EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1f:c1:56:22:ac:4c:8e:3a:cc:ca:52:2e:73:
3a:dd:73:3b:42:2e:9e:79:e6:78:a5:8f:fd:cc:a5:
46:9e:74:e4:74:17:3c:f6:1f:0b:42:ef:33:cb:84:
66:b5:fa:6c:56:e9:6f:32:f2:dd:87:96:a4:79:e3:
1c:9c:49:86:3d:0d:8d:13:1b:84:db:9a:ad:48:de:
27:63:45:20:79:91:2f:0e:0b:20:31:1e:0e:bb:99:
a9:a5:bc:58:14:32:aa:08:06:93:f2:af:da:7f:ef:
9a:18:06:69:c2:c5:d4:ba:d8:a7:06:ba:6b:c3:b0:
95:c1:60:7d:73:94:46:17:00:ae:81:fb:12:b8:88:
d9:2d:83:db:43:53:49:c7:9d:68:3c:27:61:68:51:
c4:7e:ac:86:40:97:56:b4:9d:bd:d0:26:b3:ff:19:
e9:3f:e9:99:39:f0:f1:e3:12:0d:3e:9f:86:65:8b:
a5:28:9f:d2:1a:20:b4:fd:eb:b4:b8:dc:48:ed:6f:
b0:50:9a:4f:a0:99:74:fa:e7:23:a3:df:fa:2d:4b:
70:ff:ff:ad:d2:73:a8:a0:55:8b:b6:6d:b6:7d:1d:
d4:f6:9c:af:5e:86:17:dd:0d:6f:c2:fb:2f:3c:f6:
71:6a:ce:7f:6e:46:54:d4:49:e2:0a:a8:2e:b0:5d:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:98:EF:AC:35:DC:80:A1:47:BF:60:C6:5E:9F:BA:1C:AD:1F:7E:EB
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/65jvrDXcgKFHv2DGXp-6HK0ffus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:7f:0b:c5:ae:9a:b6:82:8d:b6:73:c2:2d:d7:ba:11:49:4d:
98:1c:41:cd:98:b8:8b:60:15:13:1b:77:e5:a1:a7:db:6a:d3:
6b:df:3d:32:04:ea:34:67:18:c3:6d:e6:be:af:f5:2f:69:1a:
67:da:f8:38:47:0a:37:89:fd:0c:f3:3f:58:37:85:21:ef:e9:
d0:66:f6:9e:a0:4f:03:54:d8:3e:b6:46:ac:82:6c:a5:51:b3:
8b:b3:5f:79:bb:7d:d0:68:d6:41:82:a6:76:f4:10:cd:9f:49:
62:5a:90:28:55:09:9a:20:0f:be:f6:cf:79:ef:f7:0e:02:79:
c2:c3:df:e8:4c:40:42:5d:28:cd:44:b6:ac:b0:cf:6a:11:4b:
43:2d:85:fc:47:f2:1a:25:6c:fa:b3:2d:ee:10:f6:57:60:d7:
4f:41:16:d7:b5:ae:d4:af:5d:b2:42:00:72:76:64:71:23:ba:
93:e0:df:b7:cd:07:f1:82:8a:bf:03:9d:08:bc:44:b9:12:46:
cf:5f:e4:c8:b0:2b:38:57:e6:86:69:09:5d:08:9d:90:35:5b:
e1:bb:24:ac:0f:ce:21:f3:74:f0:36:e2:12:8f:c8:4c:e5:1a:
2e:c6:b8:f4:d5:c7:6a:86:10:38:c0:86:c5:bd:4d:9c:73:b2:
e7:4f:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org