Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/FIGodxcr0Ud1x20ppxXtl33ybvA.roa
File: FIGodxcr0Ud1x20ppxXtl33ybvA.roa (raw, json)
Hash identifier: Ybv7CKsgoCV58zz528khDavoP4YOJZ2e0vo4XC8SFIk=
Subject key identifier: 14:81:A8:77:17:2B:D1:47:75:C7:6D:29:A7:15:ED:97:7D:F2:6E:F0
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0784
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/FIGodxcr0Ud1x20ppxXtl33ybvA.roa
Signing time: Tue 29 Sep 2020 10:09:07 +0000
ROA not before: Tue 29 Sep 2020 10:09:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 116.89.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1481A877172BD14775C76D29A715ED977DF26EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:d7:dc:38:5e:b9:47:e1:de:d2:4b:88:1a:
81:a7:9b:34:f4:a4:48:48:3c:94:48:d4:a8:9b:bd:
b1:4e:58:59:07:9f:46:5f:d0:26:81:2c:33:05:8d:
69:f9:fd:37:3f:fc:9c:2e:ac:f2:11:17:62:ff:d3:
77:93:a0:4e:d4:6a:23:25:54:d2:d0:f9:9a:40:9d:
05:18:16:5e:b1:ac:08:78:39:41:f6:99:2a:36:8f:
5f:d3:fc:86:bc:12:cb:a7:a9:6d:70:38:eb:05:cd:
a0:7a:3c:80:cc:aa:d7:b8:3a:44:ab:f3:7a:4c:32:
f1:06:2d:7d:d1:a5:00:06:c9:47:5a:b8:9a:41:ea:
93:be:ed:d8:20:e0:d6:12:32:f5:0d:de:ae:ee:c8:
3f:28:9a:d1:97:84:af:97:18:8e:d0:52:f4:ea:44:
92:5e:21:82:17:16:d9:ac:04:6c:38:8d:88:ce:42:
e8:b8:c6:77:51:7a:2d:c9:f5:58:91:44:28:6e:f2:
5a:fa:6d:43:b6:27:4c:07:e8:97:ef:70:df:51:36:
cf:e7:64:bb:27:34:1e:d5:9d:05:2a:a8:e6:30:7f:
02:6e:15:81:17:e3:48:52:26:e2:02:8f:d2:6b:74:
77:04:4d:44:84:8c:93:d0:2d:44:4b:6a:27:33:8f:
4a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:A8:77:17:2B:D1:47:75:C7:6D:29:A7:15:ED:97:7D:F2:6E:F0
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/FIGodxcr0Ud1x20ppxXtl33ybvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.89.128.0/20
Signature Algorithm: sha256WithRSAEncryption
29:ce:e4:df:d4:2a:65:ea:6e:d9:f8:ae:92:3f:1f:e0:b1:a6:
6d:39:e1:34:63:cc:35:e2:8f:b7:b0:88:71:79:8f:b7:a6:eb:
d7:fd:6e:d7:8e:74:48:e4:dc:b2:0e:6a:5b:74:62:d5:c6:b6:
b5:4d:2c:f0:4d:af:d8:d7:16:0a:1e:2d:c4:59:5e:ce:3a:b0:
1a:48:68:ca:c0:ab:05:4b:50:6e:0f:de:cb:9d:ee:10:30:56:
da:f1:5b:8e:bb:51:e4:6f:0c:32:7d:a2:6a:7d:bc:31:0e:dc:
d8:6c:e9:ee:32:aa:c0:c3:6e:8f:29:ab:1e:f9:7e:35:90:6c:
9e:30:8c:93:7b:79:39:49:60:bd:da:3c:9a:36:c1:ba:d9:99:
bd:90:db:29:3f:87:d6:9e:b1:10:44:75:16:b4:52:d2:0c:70:
6e:5e:a8:bd:af:29:b6:73:e4:c1:eb:3d:36:63:a1:56:d4:f9:
00:b7:74:05:1f:c1:49:7a:c6:39:35:35:9e:e7:8c:93:24:76:
78:30:11:77:57:cf:de:49:04:b3:1f:84:34:cc:19:95:8a:51:
f9:29:76:2d:4a:8a:c7:01:be:89:ee:5d:16:1c:22:a5:40:81:
79:d7:b1:45:7f:97:4d:f5:b3:86:eb:d8:72:9e:29:19:7b:b2:
0f:3b:77:dd
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMDA5Mjkx
MDA5MDdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE0ODFBODc3MTcyQkQx
NDc3NUM3NkQyOUE3MTVFRDk3N0RGMjZFRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBHdfcOF65R+He0kuIGoGnmzT0pEhIPJRI1KibvbFOWFkHn0Zf
0CaBLDMFjWn5/Tc//JwurPIRF2L/03eToE7UaiMlVNLQ+ZpAnQUYFl6xrAh4OUH2
mSo2j1/T/Ia8EsunqW1wOOsFzaB6PIDMqte4OkSr83pMMvEGLX3RpQAGyUdauJpB
6pO+7dgg4NYSMvUN3q7uyD8omtGXhK+XGI7QUvTqRJJeIYIXFtmsBGw4jYjOQui4
xndRei3J9ViRRChu8lr6bUO2J0wH6JfvcN9RNs/nZLsnNB7VnQUqqOYwfwJuFYEX
40hSJuICj9JrdHcETUSEjJPQLURLaiczj0rbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFIGodxcr0Ud1x20ppxXtl33ybvAwHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vRklHb2R4Y3IwVWQxeDIwcHB4WHRs
MzN5YnZBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHRZgDAN
BgkqhkiG9w0BAQsFAAOCAQEAKc7k39QqZepu2fiukj8f4LGmbTnhNGPMNeKPt7CI
cXmPt6br1/1u1450SOTcsg5qW3Ri1ca2tU0s8E2v2NcWCh4txFlezjqwGkhoysCr
BUtQbg/ey53uEDBW2vFbjrtR5G8MMn2ian28MQ7c2Gzp7jKqwMNujymrHvl+NZBs
njCMk3t5OUlgvdo8mjbButmZvZDbKT+H1p6xEER1FrRS0gxwbl6ova8ptnPkwes9
NmOhVtT5ALd0BR/BSXrGOTU1nueMkyR2eDARd1fP3kkEsx+ENMwZlYpR+Sl2LUqK
xwG+ie5dFhwipUCBedexRX+XTfWzhuvYcp4pGXuyDzt33Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org