Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/8Zkvxfz60jdgMt9FpebV2ye2xJc.roa
File: 8Zkvxfz60jdgMt9FpebV2ye2xJc.roa (raw, json)
Hash identifier: 2uqRYuaaeD8+qtFZXTRBZ4NjUBbVOYzQx7gSFrQ4q1w=
Subject key identifier: F1:99:2F:C5:FC:FA:D2:37:60:32:DF:45:A5:E6:D5:DB:27:B6:C4:97
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0997
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/8Zkvxfz60jdgMt9FpebV2ye2xJc.roa
Signing time: Wed 29 Sep 2021 02:36:59 +0000
ROA not before: Wed 29 Sep 2021 02:36:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 2403:c300::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 02:36:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F1992FC5FCFAD2376032DF45A5E6D5DB27B6C497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:f4:60:55:9c:ff:37:11:43:00:97:47:40:
6f:b4:62:22:a4:ed:a4:4d:da:eb:4b:68:b6:6d:3b:
dd:6e:4a:c3:8e:45:32:a3:13:38:77:ad:32:bc:ae:
fe:89:33:5d:e0:8d:54:19:8d:30:6f:b9:81:90:6b:
42:d6:f2:96:8b:37:99:14:67:02:13:c4:4b:6e:30:
3b:e1:2c:15:5b:cd:e4:04:a6:e7:6b:77:8d:a8:70:
bc:dd:88:8d:ce:57:52:1a:e0:33:34:b9:99:32:f9:
83:dc:e1:4f:ee:51:db:c6:84:60:39:83:f2:39:7d:
c8:7f:46:37:ad:61:90:2a:1d:14:5f:a7:da:bb:61:
5c:98:3f:83:03:94:3a:1b:1f:78:81:b7:59:bd:97:
e7:21:79:f6:fc:bd:c6:dc:68:72:c7:50:67:3a:4f:
c7:43:9c:37:da:ae:b2:6f:2c:49:66:f4:85:93:2e:
7f:f8:79:dc:5e:dc:d6:e9:9a:78:3d:e5:74:41:b6:
a9:59:6f:5e:0e:c4:ba:d0:71:ee:ee:9c:48:4c:e5:
45:aa:56:46:22:d7:ff:c4:a9:31:58:79:e4:f5:d1:
de:5b:c7:f1:83:25:48:e8:1f:a0:f7:f8:8a:c1:e4:
2f:6d:d1:0d:eb:59:c0:9b:d8:f2:a9:a5:ca:a6:5b:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:2F:C5:FC:FA:D2:37:60:32:DF:45:A5:E6:D5:DB:27:B6:C4:97
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/8Zkvxfz60jdgMt9FpebV2ye2xJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:c300::/32
Signature Algorithm: sha256WithRSAEncryption
a6:fa:44:a9:f1:24:0e:53:cd:35:c6:f4:cd:7a:50:61:8b:43:
e0:9e:4d:10:1f:6f:c8:a1:0f:b3:43:f7:83:f6:41:ad:17:fd:
0e:b9:aa:30:bd:02:a1:ab:64:93:3a:bb:c7:f3:9b:5b:c0:0b:
02:c8:96:7d:84:52:d8:2a:fc:76:ee:bb:75:fb:31:a7:61:ca:
08:b3:3a:27:6e:24:56:43:0c:f2:f0:10:ac:b9:7c:4b:45:7d:
83:d2:73:66:4c:62:1a:09:a1:25:59:22:34:98:32:62:6f:e9:
9a:f7:a9:82:98:32:79:e7:f6:e2:f2:4a:d1:e7:7e:21:35:4d:
02:79:6a:07:7d:dc:84:c1:da:59:07:4b:e1:af:36:8f:5a:6d:
52:68:73:29:bc:46:88:09:d3:35:4a:cb:fa:26:89:38:bc:6a:
0b:ef:a5:99:cd:d2:77:85:c6:ee:eb:b0:a9:c4:07:36:40:98:
6d:19:78:ce:63:11:46:b9:59:8d:07:1b:82:f1:6a:36:76:14:
3f:ec:f5:dd:6e:55:65:c3:92:37:8b:8a:ce:c4:e3:c1:f9:89:
88:35:0b:31:b4:14:a1:03:19:25:c2:a0:71:87:32:60:d3:43:
72:2b:dc:95:f9:ef:94:35:ca:1f:b6:2d:81:a7:24:d1:96:55:
1e:4f:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:32 2025 by rpki-client