Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/OHJDxRVpbv0-It_tTxe1S9FeCFE.roa
File: OHJDxRVpbv0-It_tTxe1S9FeCFE.roa (raw, json)
Hash identifier: 3BmGGknBQooltCrGRQbrg4WFais/IxTbrOyqRKUTBPU=
Subject key identifier: 38:72:43:C5:15:69:6E:FD:3E:22:DF:ED:4F:17:B5:4B:D1:5E:08:51
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/OHJDxRVpbv0-It_tTxe1S9FeCFE.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 1.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=387243C515696EFD3E22DFED4F17B54BD15E0851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:05:99:1d:fa:d2:5c:c0:2c:06:f0:11:da:
e2:54:6f:29:f3:68:06:d4:34:e8:99:10:f7:9e:11:
c9:00:b2:94:4e:22:a9:12:f5:3b:e7:46:92:07:27:
8a:64:67:a9:f5:88:10:58:f4:82:88:64:99:99:cc:
98:b0:a9:fe:e4:73:6c:9c:ab:50:81:85:cc:3d:b0:
be:ff:18:4e:61:54:0a:ed:f2:8c:13:4a:28:fa:1c:
f8:9f:46:be:e7:3c:04:89:af:8e:b2:ca:32:d7:69:
84:42:3c:d2:3f:da:dd:87:2d:08:cd:bb:55:45:4c:
9c:e1:53:05:e5:14:ba:e2:20:d9:b7:e2:58:5f:c8:
b9:89:f8:c3:ee:5d:a5:4d:59:63:57:1b:e8:34:4f:
f9:f4:88:50:96:82:13:34:5d:4e:f7:83:e7:b8:44:
89:a2:d6:86:c5:e8:79:08:f7:f9:05:3e:a0:cc:8b:
c2:c7:1a:c4:73:51:8a:a8:75:32:39:57:bb:74:80:
89:7a:4d:e9:bc:da:8a:01:90:47:7a:67:f0:5e:07:
ea:a9:95:06:b0:ff:ac:64:f0:cb:06:a2:04:6d:a1:
92:d6:78:98:17:f5:ef:89:a1:12:50:34:98:3e:74:
96:95:ff:2a:23:6a:e4:77:ef:b3:37:58:54:25:47:
66:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:43:C5:15:69:6E:FD:3E:22:DF:ED:4F:17:B5:4B:D1:5E:08:51
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/OHJDxRVpbv0-It_tTxe1S9FeCFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:86:08:1b:4e:96:26:ee:12:e8:b4:1c:d6:e4:2d:db:99:b7:
71:82:f6:da:b3:a1:b7:04:6f:2c:8b:6c:09:57:f4:26:67:6d:
d8:3e:78:62:a0:15:28:d7:45:0a:85:9a:d3:7c:1a:62:8b:6e:
6f:15:e6:2f:79:32:48:fd:3b:0a:2d:c8:36:4e:d6:07:f5:f0:
f5:4a:7c:b2:26:8d:ae:47:a0:bf:27:e9:ed:02:ad:67:46:f4:
ba:3a:7f:ff:73:14:c7:7d:73:94:c4:4d:e7:0b:6f:a9:35:3d:
3a:81:30:27:42:d4:74:5a:39:56:b2:42:5c:04:68:16:f6:b3:
84:bf:cb:6a:3d:08:2b:7d:05:ef:fb:c9:98:44:ab:ad:fb:ac:
0a:c0:e5:bb:62:9d:16:cd:0a:72:51:f3:57:02:5d:ca:94:46:
dc:54:79:cb:64:c1:47:f9:a7:2e:63:d3:8e:f1:eb:ef:71:48:
4d:3d:cd:e0:44:3d:5d:7d:2d:6c:9a:c0:d3:a4:b6:13:0e:4e:
be:6d:18:aa:2b:25:0e:fe:89:b4:77:12:31:89:aa:60:a9:e6:
20:9b:2c:13:92:20:55:d5:e2:40:53:8c:0f:ee:e0:6f:5d:a6:
98:63:37:6e:f7:36:bc:03:cb:09:49:e8:1f:4d:bc:f6:8c:e1:
37:d2:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org