Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/KArwH-JVoKbAPOpukEhn72nTNQ4.roa
File: KArwH-JVoKbAPOpukEhn72nTNQ4.roa (raw, json)
Hash identifier: +WbGzKNWog2Ye0meL1PE286y3+n1kv784Lq1BUXxRyI=
Subject key identifier: 28:0A:F0:1F:E2:55:A0:A6:C0:3C:EA:6E:90:48:67:EF:69:D3:35:0E
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B7E
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/KArwH-JVoKbAPOpukEhn72nTNQ4.roa
Signing time: Fri 01 Sep 2023 10:19:13 +0000
ROA not before: Fri 01 Sep 2023 10:19:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 202.144.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2942 (0xb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=280AF01FE255A0A6C03CEA6E904867EF69D3350E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:a4:8c:33:0a:b3:99:85:e1:90:3d:18:b1:
f6:6a:05:1d:cb:1a:3e:a7:43:f9:68:1c:99:5e:83:
d5:cf:18:81:89:18:2a:4b:79:99:21:33:53:13:45:
3c:b2:93:e5:de:74:58:71:e0:1c:f3:ed:a2:48:ae:
2b:ba:6b:b2:08:a3:b1:dd:b4:95:0e:71:40:b4:5f:
ab:61:39:5e:a2:98:bd:e9:c9:4d:92:de:89:9f:5c:
66:50:eb:c2:7d:17:7c:f4:69:01:75:60:d1:fc:53:
1c:ea:e2:2e:8e:4a:ad:65:e9:fc:b1:4d:2e:25:d7:
2f:e3:dc:df:e9:80:cf:f6:49:3a:80:a7:77:10:06:
0d:b4:fb:7b:12:87:63:43:f2:af:d2:71:8b:f2:0f:
38:02:0b:12:d4:14:9a:4c:7f:47:d9:ea:46:9d:21:
24:6a:35:89:22:46:d8:35:6a:86:75:16:c1:0a:ae:
52:e3:7e:fe:fb:ae:d5:8b:d5:1e:70:94:01:05:fa:
fb:d5:2f:2a:36:eb:ef:b9:78:62:5e:7e:1e:1c:49:
7f:d9:99:44:b8:64:45:13:6c:4c:1b:a4:60:42:53:
20:24:3c:8d:ba:de:fa:94:ec:42:1b:96:a8:45:c1:
cb:67:9f:fc:4f:de:44:64:63:e5:a1:81:a9:db:1d:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0A:F0:1F:E2:55:A0:A6:C0:3C:EA:6E:90:48:67:EF:69:D3:35:0E
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/KArwH-JVoKbAPOpukEhn72nTNQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.208.0/20
Signature Algorithm: sha256WithRSAEncryption
84:87:6e:c1:fb:31:35:94:8a:23:82:13:a4:b0:d8:b3:81:3c:
97:30:22:69:9c:3e:33:be:a0:62:53:fa:3e:21:6f:93:7e:8a:
38:67:dd:16:78:b4:f1:ca:0f:d5:ff:5c:99:e4:e3:7a:b8:1a:
e0:e2:52:1d:36:a1:2e:b6:41:c3:1f:bb:72:82:01:36:a5:7b:
8e:27:de:df:f9:39:7f:4a:7d:ed:3a:c1:a4:0c:13:83:e5:07:
64:12:02:3b:80:55:91:09:5f:b8:19:a1:29:2d:2e:6b:89:70:
97:90:7f:ec:f2:c6:fc:79:b7:b1:46:d7:f8:4d:62:a2:6b:a8:
6a:17:33:95:18:e0:f1:d1:5b:54:d6:d1:ca:3e:54:8c:9c:68:
bc:a3:ea:d4:a0:03:e0:ca:46:20:c4:57:d8:48:11:be:51:87:
19:12:87:de:3b:e7:d0:59:f9:43:a0:f6:b9:5a:af:f2:7e:0d:
a0:a6:b4:70:49:2e:84:3f:e2:53:8c:b7:a9:e4:f9:b8:1d:a1:
43:9f:fa:48:4a:a8:0c:39:9b:02:c9:f7:c8:47:1f:6b:9b:7e:
22:ff:33:ba:fe:35:3f:bf:17:d7:f3:11:7a:1b:89:36:9b:c1:
0d:e7:5b:31:49:5e:c3:71:2f:56:d5:eb:4e:53:e8:2f:5c:72:
1c:92:63:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org