Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/8EDcHaHaKocX28Zv2QrD5XOonek.roa
File: 8EDcHaHaKocX28Zv2QrD5XOonek.roa (raw, json)
Hash identifier: 8B+7O/1ZJ5/07HBBR766pm1cmAyiXsghTb49RwLBPFg=
Subject key identifier: F0:40:DC:1D:A1:DA:2A:87:17:DB:C6:6F:D9:0A:C3:E5:73:A8:9D:E9
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 098C
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/8EDcHaHaKocX28Zv2QrD5XOonek.roa
Signing time: Wed 29 Sep 2021 02:36:55 +0000
ROA not before: Wed 29 Sep 2021 02:36:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 43.255.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 02:36:55 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F040DC1DA1DA2A8717DBC66FD90AC3E573A89DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:b4:11:46:b8:36:80:85:db:38:3d:e8:11:
c9:93:66:dc:4d:b7:e6:59:30:dc:ce:99:40:8e:42:
e0:cd:8c:a3:d6:f1:97:49:bf:de:f3:e8:5c:24:bd:
a5:1a:db:b6:bc:ca:38:78:01:df:a4:fb:a4:f7:ae:
76:0d:b6:c4:51:cd:14:75:0f:00:13:c3:24:13:c0:
43:0e:a8:c3:10:17:74:4f:3c:83:74:8a:81:41:c9:
f6:49:a9:59:ee:89:e0:47:aa:5d:f9:5a:42:d7:59:
3f:44:20:77:ed:6e:f3:9f:0b:1b:f3:b8:4f:d6:fb:
97:04:6f:0f:73:e3:1f:4c:cd:c3:50:00:40:7d:8f:
a7:5b:e4:2d:e4:23:46:4a:60:bc:b8:5b:1e:9f:6f:
39:fc:7d:a3:5a:ad:d2:d8:d1:60:a5:5a:8d:bd:78:
6d:b1:e7:f7:37:b5:4b:2b:75:cd:65:bb:02:2d:50:
5d:29:27:f9:d6:d9:6f:f6:43:d1:47:6b:65:6e:60:
c2:95:b1:49:aa:60:76:32:e9:37:b4:25:a6:3a:6c:
ac:04:49:22:31:2e:b4:e3:a1:e9:e4:00:be:be:24:
75:df:e7:f1:f8:3a:d6:75:8b:82:f9:1a:cc:5e:ae:
46:c9:51:c6:fd:00:f1:c7:9f:17:90:1d:44:28:a0:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:40:DC:1D:A1:DA:2A:87:17:DB:C6:6F:D9:0A:C3:E5:73:A8:9D:E9
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/8EDcHaHaKocX28Zv2QrD5XOonek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:e8:1b:4f:26:9f:e2:a1:79:58:69:fc:92:a8:81:fa:8f:bd:
4a:21:02:83:ee:c2:c3:4f:0c:de:17:e7:87:f4:3f:93:ba:2d:
3c:c9:de:9f:23:0b:7d:20:cb:56:a9:15:41:57:55:42:f1:6d:
9a:9c:2e:d3:67:93:b9:fe:f5:1b:6b:1a:12:42:42:48:51:ae:
98:cb:90:29:9c:61:03:e5:7c:35:a2:8c:66:b5:ee:4b:54:14:
59:78:95:d0:11:ac:7f:ec:de:d5:e6:5e:8a:ce:03:d0:60:f4:
95:12:e8:74:0f:52:eb:5a:40:5c:39:8e:3c:6b:7a:60:72:c5:
d2:4c:a9:14:8b:c0:f5:10:2c:c3:5e:ae:c2:9c:f9:ac:99:dd:
98:a8:ae:40:1c:81:42:11:10:d8:f7:6b:95:33:68:b0:fc:7e:
be:f7:0f:85:a6:9d:ec:fb:5e:f1:37:ce:fc:cb:22:4b:1d:b6:
c5:12:a3:df:60:fe:bd:71:7c:81:92:b6:b8:6e:c4:14:ba:95:
82:36:7b:84:29:c7:5c:28:a3:d6:42:c2:2b:97:c6:40:b1:0e:
a7:87:85:3c:62:a1:24:98:bc:cf:95:a1:f2:6f:75:c2:20:56:
c8:dc:93:f7:8d:2c:13:a0:8d:9d:2a:a2:d3:89:c7:b5:1a:c9:
ca:2a:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org