Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/LnYr1vg0LLBg-9XvpI62kVfQXL4.roa
File: LnYr1vg0LLBg-9XvpI62kVfQXL4.roa (raw, json)
Hash identifier: zLPj2f3PSKce4ffsY/5opH/CEEronUY3Twe1Tz8gkw4=
Subject key identifier: 2E:76:2B:D6:F8:34:2C:B0:60:FB:D5:EF:A4:8E:B6:91:57:D0:5C:BE
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0994
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/LnYr1vg0LLBg-9XvpI62kVfQXL4.roa
Signing time: Wed 29 Sep 2021 02:36:58 +0000
ROA not before: Wed 29 Sep 2021 02:36:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2452 (0x994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 02:36:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2E762BD6F8342CB060FBD5EFA48EB69157D05CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:35:50:e8:69:4d:6d:88:7f:c5:24:55:d8:
e8:8a:6b:02:64:8d:bd:c6:3f:0b:df:3d:cd:cd:92:
f9:2f:af:1a:0d:2c:89:61:57:f6:94:66:50:4d:71:
2a:13:12:cc:d8:54:90:6b:fa:08:5a:9c:d7:92:60:
44:9c:69:24:8d:b2:cc:4a:8c:1a:4a:dd:99:b0:78:
bb:5b:a3:4d:b8:3a:c7:e4:ed:08:58:dc:ab:d3:73:
4f:50:fd:0f:85:45:27:2d:d8:1c:dd:91:38:e8:60:
1a:be:d2:2b:32:25:bf:8f:f5:09:e6:51:ee:9b:b4:
bf:51:e0:61:85:99:be:d1:1b:ba:92:f7:55:91:47:
e5:7b:ad:7c:82:7b:38:ba:20:57:00:2f:58:b8:ae:
39:14:b2:d2:3c:95:ee:b1:31:d3:78:49:5d:d8:65:
6c:9d:aa:f6:b9:f8:31:7b:28:51:06:e2:69:f8:a8:
80:3a:8a:84:f8:78:ed:43:76:02:de:5d:1b:98:73:
ed:e0:ca:5a:45:03:40:e2:30:ae:6f:df:20:cd:04:
09:96:d8:45:ad:86:06:9a:b5:42:44:be:83:96:90:
8b:3f:83:e4:24:67:f3:c6:5f:3f:83:f0:e0:23:5b:
28:90:74:ea:09:47:7e:6d:5a:77:01:50:d4:38:f5:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:76:2B:D6:F8:34:2C:B0:60:FB:D5:EF:A4:8E:B6:91:57:D0:5C:BE
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/LnYr1vg0LLBg-9XvpI62kVfQXL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
27:89:a1:4a:88:7a:54:e8:1f:2f:d3:df:c4:69:56:d1:60:99:
4b:81:e7:39:d3:be:9e:15:ce:6c:04:60:e7:24:7d:a2:f1:b2:
0f:7a:63:1d:47:ae:d9:ee:de:88:01:ce:07:71:57:8e:15:c8:
02:ee:54:c9:6e:3a:8d:a7:53:f2:46:dc:c2:58:38:66:1c:b4:
6b:00:d8:5f:f6:ff:37:66:1c:92:74:6b:78:bf:35:b7:3f:4c:
08:18:58:26:b0:82:20:41:62:d4:d8:ca:04:57:25:96:b3:fc:
4c:2b:9e:68:8e:2e:a5:3a:f7:ac:ba:9f:d9:29:6d:28:06:aa:
a4:cd:7a:8e:08:e7:30:3b:fb:a8:67:e2:2b:ae:a9:d3:de:60:
11:2a:e6:0a:ec:dc:e2:93:f1:3d:38:b8:4d:4d:01:b4:8c:59:
8b:e1:c0:a1:1d:db:37:0b:04:e3:6e:53:8b:6c:53:22:d3:d6:
92:06:53:7a:48:33:c6:e8:e4:7a:d3:55:c8:42:a8:73:4e:ad:
f8:c0:35:dc:1f:d6:09:56:0b:f3:a3:b4:1f:c7:ac:3f:46:f5:
83:a0:5b:ad:c1:84:20:52:5e:7d:f6:f8:92:06:38:bf:e1:8a:
ac:dd:19:5c:82:9f:c0:a3:64:69:d4:04:42:b3:08:2e:25:f0:
ba:5f:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org