Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/NsaKKswZLkngK7peFZLJMFJ10t0.roa
File: NsaKKswZLkngK7peFZLJMFJ10t0.roa (raw, json)
Hash identifier: gHv0TC/mSkkGk4zJ5wloEGyS3xArhencX3xuPnCduXw=
Subject key identifier: 36:C6:8A:2A:CC:19:2E:49:E0:2B:BA:5E:15:92:C9:30:52:75:D2:DD
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 078D
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/NsaKKswZLkngK7peFZLJMFJ10t0.roa
Signing time: Tue 29 Sep 2020 10:09:09 +0000
ROA not before: Tue 29 Sep 2020 10:09:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 103.5.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=36C68A2ACC192E49E02BBA5E1592C9305275D2DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ff:6f:7d:4b:7d:43:16:00:bb:ce:45:65:1a:
40:c0:d0:db:4b:f4:e6:68:10:84:c5:aa:b0:27:b7:
16:69:64:3a:ed:88:7e:73:60:a1:c1:72:06:91:e2:
6d:8d:58:16:0a:ac:93:a1:1d:9e:3b:9b:ad:7d:c6:
42:42:c3:e5:1a:1c:5c:a1:03:6d:0e:d9:32:c5:d6:
31:0d:ef:e6:2d:82:7e:3d:81:5d:97:ac:66:9b:51:
0c:bb:a1:bd:88:f7:27:3c:b1:ce:ed:8c:e9:0d:04:
2c:4b:4a:ae:8e:af:dc:49:19:67:76:10:ba:75:3f:
c2:b1:19:fa:3f:31:8e:cb:85:af:fc:50:73:7e:ba:
8f:5f:af:35:ea:c6:da:d9:ce:b8:00:b9:fd:ab:62:
c7:b2:f5:82:7b:58:7c:1e:a6:5f:5c:fb:62:1d:3d:
f1:58:09:7c:79:04:b0:77:d3:f6:11:64:89:66:87:
43:18:58:d5:88:70:23:8d:67:38:21:8f:01:fb:5e:
e2:86:bb:77:51:96:b4:23:24:2a:d6:7b:45:1a:1d:
cd:c2:bb:0a:dd:07:59:60:a5:b8:1c:72:d0:d9:02:
1c:1e:d9:52:bd:ea:8d:10:d3:ef:f3:3e:df:77:de:
da:03:97:07:cf:ab:e4:5d:14:32:02:d1:56:37:b9:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:8A:2A:CC:19:2E:49:E0:2B:BA:5E:15:92:C9:30:52:75:D2:DD
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/NsaKKswZLkngK7peFZLJMFJ10t0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.32.0/22
Signature Algorithm: sha256WithRSAEncryption
92:74:e7:78:68:ed:99:11:6a:49:17:81:8a:15:78:39:de:67:
d0:c3:00:65:d8:bc:45:1d:f4:df:50:3e:d3:28:7b:dc:8d:8a:
29:09:be:36:a8:d2:d6:c9:82:6c:78:04:22:ef:26:30:f9:52:
88:5b:d8:3b:b5:e9:a0:10:b6:cf:92:e3:cc:9a:14:26:33:9f:
19:38:99:d9:6b:98:9b:7a:0e:2a:12:72:51:39:6f:ca:4a:b1:
8f:8e:db:da:44:36:28:74:71:ad:05:06:03:d4:62:db:fa:ed:
8b:7f:33:a3:c6:43:39:9b:67:7c:0e:d9:d1:ca:27:ff:6a:75:
5f:52:ba:5c:97:43:2d:c7:fc:46:f0:af:cb:be:cf:62:6d:10:
93:dc:f0:a7:d8:7d:70:ec:d1:8e:ee:bf:82:c3:a0:61:6f:19:
81:8b:05:68:c9:57:4f:d6:11:a0:5c:60:1b:8e:72:ad:ca:c5:
14:0a:8f:d4:0a:ce:b3:96:90:74:7c:24:81:8d:33:38:ac:53:
83:8d:61:78:3b:74:6b:d2:3c:83:7c:48:ca:54:a0:b7:02:d9:
bc:16:3b:84:e8:23:aa:37:6c:bb:5a:cf:31:e0:5f:8c:45:7c:
27:8f:cf:58:bf:18:e9:f2:0d:ff:86:35:90:45:6a:5c:4c:a7:
ce:c3:2d:e3
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICB40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMDA5Mjkx
MDA5MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDM2QzY4QTJBQ0MxOTJF
NDlFMDJCQkE1RTE1OTJDOTMwNTI3NUQyREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg/299S31DFgC7zkVlGkDA0NtL9OZoEITFqrAntxZpZDrtiH5z
YKHBcgaR4m2NWBYKrJOhHZ47m619xkJCw+UaHFyhA20O2TLF1jEN7+Ytgn49gV2X
rGabUQy7ob2I9yc8sc7tjOkNBCxLSq6Or9xJGWd2ELp1P8KxGfo/MY7Lha/8UHN+
uo9frzXqxtrZzrgAuf2rYsey9YJ7WHwepl9c+2IdPfFYCXx5BLB30/YRZIlmh0MY
WNWIcCONZzghjwH7XuKGu3dRlrQjJCrWe0UaHc3CuwrdB1lgpbgcctDZAhwe2VK9
6o0Q0+/zPt933toDlwfPq+RdFDIC0VY3uUmbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUNsaKKswZLkngK7peFZLJMFJ10t0wHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vTnNhS0tzd1pMa25nSzdwZUZaTEpN
RkoxMHQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcFIDAN
BgkqhkiG9w0BAQsFAAOCAQEAknTneGjtmRFqSReBihV4Od5n0MMAZdi8RR3031A+
0yh73I2KKQm+NqjS1smCbHgEIu8mMPlSiFvYO7XpoBC2z5LjzJoUJjOfGTiZ2WuY
m3oOKhJyUTlvykqxj47b2kQ2KHRxrQUGA9Ri2/rti38zo8ZDOZtnfA7Z0con/2p1
X1K6XJdDLcf8RvCvy77PYm0Qk9zwp9h9cOzRju6/gsOgYW8ZgYsFaMlXT9YRoFxg
G45yrcrFFAqP1ArOs5aQdHwkgY0zOKxTg41heDt0a9I8g3xIylSgtwLZvBY7hOgj
qjdsu1rPMeBfjEV8J4/PWL8Y6fIN/4Y1kEVqXEynzsMt4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org