Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/CaKZ3F0-hUPk4RQL65LpX-AQGe4.roa
File: CaKZ3F0-hUPk4RQL65LpX-AQGe4.roa (raw, json)
Hash identifier: 3WlV0T8OHjgOMlrRko5ktivTStIuUjgJbhSEOh9Ee6o=
Subject key identifier: 09:A2:99:DC:5D:3E:85:43:E4:E1:14:0B:EB:92:E9:5F:E0:10:19:EE
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0782
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/CaKZ3F0-hUPk4RQL65LpX-AQGe4.roa
Signing time: Tue 29 Sep 2020 10:09:06 +0000
ROA not before: Tue 29 Sep 2020 10:09:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 43.255.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=09A299DC5D3E8543E4E1140BEB92E95FE01019EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:fe:71:7a:dd:7d:bd:29:5d:e1:0a:97:a2:
46:2d:dd:f3:55:d6:56:aa:90:c6:44:0d:0c:43:3b:
9e:bf:6d:d3:92:ff:04:cf:a8:34:27:1b:3e:3e:86:
e9:a1:05:e3:ad:2b:a2:4b:cb:39:88:46:3d:12:aa:
41:4f:ef:31:15:9a:13:ed:2a:b6:a5:6d:96:0f:46:
6b:80:e5:9c:87:75:57:ec:cf:7c:20:c5:d0:80:f6:
bd:3a:68:82:95:2e:ab:69:36:1c:23:8b:02:24:97:
39:c1:e4:c8:60:32:94:49:9b:8c:16:2d:b4:54:fa:
9d:dc:2e:c3:e4:16:b7:e6:50:05:19:ce:44:39:ab:
98:6e:99:b4:08:4e:be:31:40:f9:86:6c:3b:5e:6f:
ad:79:36:34:68:54:7c:50:1a:d7:41:3a:f8:5b:01:
b4:89:db:bd:f3:ad:bf:cd:57:9a:2a:d7:c9:7e:ec:
bc:27:c5:08:69:b2:2a:6a:d1:88:24:67:84:23:57:
76:ea:99:23:40:a5:e2:55:d5:e9:40:a3:94:c9:a4:
da:90:e5:33:b6:19:97:82:88:10:b7:f7:d9:5f:57:
67:91:a6:4f:b0:66:85:22:9d:a2:6d:ef:08:ae:17:
9c:9b:9d:19:b6:b1:85:af:88:03:6d:a9:2b:d8:00:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A2:99:DC:5D:3E:85:43:E4:E1:14:0B:EB:92:E9:5F:E0:10:19:EE
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/CaKZ3F0-hUPk4RQL65LpX-AQGe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:c1:f6:05:d8:6f:6d:0a:72:49:b9:44:b7:87:55:cf:52:a3:
a6:bd:e2:0a:75:ae:72:d4:7b:6a:93:72:4d:c9:71:94:b9:1b:
88:73:37:09:83:ba:39:f1:2c:25:21:73:65:e4:d2:da:97:99:
3f:20:f9:0f:ea:e6:f1:20:e7:40:54:63:c5:e5:17:40:36:76:
16:90:17:14:69:ba:9d:65:16:5d:76:f7:a0:3a:e8:9c:68:35:
96:50:03:32:3d:8f:55:c9:ee:f0:f1:e9:92:56:73:b0:7c:c7:
47:82:2f:6f:5b:3e:a8:0c:f4:04:06:09:69:ea:89:da:4e:89:
44:fa:1b:33:4f:96:75:3c:79:7d:47:55:e1:31:7a:1e:a8:93:
97:0d:81:77:cc:7a:ba:8b:7a:e8:2b:c2:6c:48:3f:10:99:7a:
58:94:71:35:d5:36:1c:a1:32:64:e3:22:74:b1:eb:0b:b5:1d:
e9:d5:e6:35:6f:e9:12:3f:a5:68:d5:3b:b3:4a:80:70:eb:96:
f2:8c:38:fa:eb:2c:e2:99:82:d2:0c:9b:0b:2c:37:f3:d5:77:
6b:3c:7b:10:47:d4:a2:d1:39:72:16:96:24:d5:f6:95:5f:ad:
c2:0a:06:46:50:9f:2a:20:0b:fd:1d:03:f0:d5:9f:7d:1c:72:
a7:0a:f0:57
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMDA5Mjkx
MDA5MDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA5QTI5OURDNUQzRTg1
NDNFNEUxMTQwQkVCOTJFOTVGRTAxMDE5RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+b/5xet19vSld4QqXokYt3fNV1laqkMZEDQxDO56/bdOS/wTP
qDQnGz4+humhBeOtK6JLyzmIRj0SqkFP7zEVmhPtKralbZYPRmuA5ZyHdVfsz3wg
xdCA9r06aIKVLqtpNhwjiwIklznB5MhgMpRJm4wWLbRU+p3cLsPkFrfmUAUZzkQ5
q5humbQITr4xQPmGbDteb615NjRoVHxQGtdBOvhbAbSJ273zrb/NV5oq18l+7Lwn
xQhpsipq0YgkZ4QjV3bqmSNApeJV1elAo5TJpNqQ5TO2GZeCiBC399lfV2eRpk+w
ZoUinaJt7wiuF5ybnRm2sYWviANtqSvYALZ1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUCaKZ3F0+hUPk4RQL65LpX+AQGe4wHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vQ2FLWjNGMC1oVVBrNFJRTDY1THBY
LUFRR2U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv/tDAN
BgkqhkiG9w0BAQsFAAOCAQEAL8H2BdhvbQpySblEt4dVz1Kjpr3iCnWuctR7apNy
TclxlLkbiHM3CYO6OfEsJSFzZeTS2peZPyD5D+rm8SDnQFRjxeUXQDZ2FpAXFGm6
nWUWXXb3oDronGg1llADMj2PVcnu8PHpklZzsHzHR4Ivb1s+qAz0BAYJaeqJ2k6J
RPobM0+WdTx5fUdV4TF6HqiTlw2Bd8x6uot66CvCbEg/EJl6WJRxNdU2HKEyZOMi
dLHrC7Ud6dXmNW/pEj+laNU7s0qAcOuW8ow4+uss4pmC0gybCyw389V3azx7EEfU
otE5chaWJNX2lV+twgoGRlCfKiAL/R0D8NWffRxypwrwVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org