Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/EZ1T3JOpr_vopjBncW_TiSZJjQM.roa
File: EZ1T3JOpr_vopjBncW_TiSZJjQM.roa (raw, json)
Hash identifier: ol2YmQFBCXM/uBv/aYkRlSUzi+eU1QWUdGJA7lkQsso=
Subject key identifier: 11:9D:53:DC:93:A9:AF:FB:E8:A6:30:67:71:6F:D3:89:26:49:8D:03
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/EZ1T3JOpr_vopjBncW_TiSZJjQM.roa
Signing time: Fri 01 Sep 2023 10:19:14 +0000
ROA not before: Fri 01 Sep 2023 10:19:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 180.217.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=119D53DC93A9AFFBE8A63067716FD38926498D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:8e:67:35:57:db:3e:4b:63:e9:7b:5a:e7:
22:3c:1f:89:7e:8a:83:d2:82:d0:52:df:2f:d1:b8:
d6:4e:82:f8:2d:14:d4:a4:43:4b:91:88:8c:17:2a:
40:61:fd:f1:1f:d2:d3:53:b7:6f:52:32:f2:9f:d9:
60:6d:03:55:d2:b1:3a:22:80:cb:84:d9:87:c9:4b:
21:d2:f7:18:ee:9c:ee:1f:9e:5a:89:b2:e5:1f:d5:
fb:85:aa:5a:b5:5c:58:ed:56:66:14:6c:dc:f6:b9:
b1:6d:1c:f6:e8:ee:ef:40:be:4f:6b:73:ee:6c:b9:
cc:c2:ed:3b:b5:64:98:9b:9d:49:40:81:e7:da:f2:
36:51:e3:b5:50:cb:03:cb:19:3e:93:48:b4:84:8f:
17:75:2f:57:83:f0:fb:eb:0d:13:0b:b8:53:28:3d:
c3:25:db:4f:44:3e:3d:05:e0:02:f3:eb:67:b0:ff:
4e:29:50:4b:73:51:80:19:54:3f:f0:d7:25:cc:fa:
7e:3d:35:9e:8e:a4:13:73:47:eb:14:c1:85:5d:00:
25:dc:6d:3b:66:d3:2f:b9:2a:b2:05:67:10:19:27:
68:3b:3f:82:e2:ff:23:c6:a5:91:90:1e:5a:c6:16:
7e:b9:30:42:ce:81:fa:9f:77:80:86:a7:76:c8:4f:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:53:DC:93:A9:AF:FB:E8:A6:30:67:71:6F:D3:89:26:49:8D:03
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/EZ1T3JOpr_vopjBncW_TiSZJjQM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:31:ef:7b:9d:52:95:e6:5d:65:f6:90:55:9b:d4:6e:7a:37:
7e:52:06:ae:c0:0e:bc:3f:fa:ed:09:c0:c2:66:97:5f:e6:61:
38:fc:42:99:c2:1a:09:4a:14:22:5b:94:fc:74:dd:8f:d4:e7:
82:9c:da:22:e9:7a:51:a3:1f:d0:f4:25:dd:c3:49:6e:a9:72:
e4:83:4c:7e:53:89:be:aa:58:c6:97:95:b3:77:48:13:1b:93:
c2:7d:c8:72:c2:67:d6:58:b4:2c:ac:cf:66:68:a4:43:85:e3:
35:9a:28:18:12:7d:1d:38:4f:fb:b6:d1:2e:f5:0c:5d:d4:89:
65:4b:fe:9e:63:86:23:e2:9e:7b:b4:9e:72:dc:31:1c:6d:15:
1f:6b:03:53:ff:2a:51:82:47:a3:fe:6f:91:f3:5c:d3:9f:ba:
8b:ee:b1:d2:4d:69:46:d3:d6:7f:c8:49:ef:bf:b7:c9:86:a4:
c3:f4:e8:53:66:17:1e:49:88:7f:83:87:51:f0:8d:1e:cd:a8:
0c:e2:92:22:d5:9f:04:dc:93:00:6b:25:ee:d2:f3:2c:3b:c2:
60:b5:8d:e2:d5:34:b4:c9:eb:28:1a:15:ae:b4:bf:87:d0:da:
b9:4d:fc:be:e2:4b:a0:3f:de:a1:2b:7e:87:56:85:fc:4e:b2:
81:bc:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org