Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/RQKxihXSVwfhhJgFUzFRcmBehig.roa
File: RQKxihXSVwfhhJgFUzFRcmBehig.roa (raw, json)
Hash identifier: cJdNJek63VrJuO6yTfxwaykPkmTa5UBp1PBBvDHy1EY=
Subject key identifier: 45:02:B1:8A:15:D2:57:07:E1:84:98:05:53:31:51:72:60:5E:86:28
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 078C
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/RQKxihXSVwfhhJgFUzFRcmBehig.roa
Signing time: Tue 29 Sep 2020 10:09:09 +0000
ROA not before: Tue 29 Sep 2020 10:09:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 1.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4502B18A15D25707E184980553315172605E8628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:a1:31:c8:ae:85:fc:a4:03:5f:36:f7:d8:
f4:34:22:6b:20:56:66:fb:c4:e8:89:09:8c:35:26:
53:87:2f:59:b7:9d:48:ef:74:55:f5:d0:94:fd:82:
24:81:4a:71:fb:88:41:1e:ac:17:ac:bc:2f:a0:2c:
c7:3c:01:12:7b:b2:07:55:cf:54:4a:61:1d:6a:08:
e0:3b:e0:c4:da:b3:a2:94:d2:98:14:c0:79:50:75:
ee:e7:6a:78:a8:34:03:af:d1:bd:50:6e:86:bf:65:
5b:8c:65:81:16:95:11:5b:fc:ec:58:de:e6:01:8e:
8a:c5:6f:26:07:ab:81:a8:d5:2d:d5:5d:ac:d8:b3:
02:55:26:68:fb:4e:f2:b9:36:1b:03:31:92:63:2e:
e6:f7:15:3d:60:ee:eb:33:ff:ee:9e:28:24:7a:96:
fb:a3:6b:6e:01:f2:05:15:97:7a:7d:e5:f5:44:f5:
da:fa:ce:df:71:f9:ff:34:b5:b1:49:5c:11:10:32:
f3:b5:6e:75:d1:79:65:21:6e:1c:cb:d8:de:9b:72:
f5:92:56:31:c1:3f:3c:d6:1a:f8:cc:2d:05:f9:90:
22:84:17:4a:f4:d6:43:f5:d8:28:43:d6:21:e5:e6:
3b:5c:e8:9e:3f:7e:92:36:6e:76:95:4a:c3:22:3b:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:02:B1:8A:15:D2:57:07:E1:84:98:05:53:31:51:72:60:5E:86:28
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/RQKxihXSVwfhhJgFUzFRcmBehig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:eb:5f:4a:c0:3c:be:7a:ce:e7:ec:35:d3:b5:01:01:9b:ed:
b9:81:e5:60:b0:65:49:16:cd:5e:fb:9e:12:ac:e7:b5:35:0c:
e8:72:6d:ee:f1:5a:42:bd:bd:16:2d:49:9d:fb:0e:b0:1d:ca:
a4:7d:06:75:c0:39:ba:19:cc:07:7c:fb:fd:ef:4f:b0:2e:cd:
2a:e1:c2:01:d6:bd:05:03:6c:08:f3:d5:3d:ea:82:05:1f:57:
6b:2f:6a:0b:96:84:49:97:95:c7:80:54:ea:8d:83:dc:e1:d2:
2d:c2:79:99:71:89:55:54:bd:56:1e:97:00:86:42:d8:54:f6:
97:78:0a:95:aa:a3:97:d0:2d:e8:a7:1b:13:2e:48:01:da:3b:
0b:38:10:71:67:49:db:2d:7c:80:ea:7f:6e:9e:52:52:81:a7:
bb:da:f0:6b:88:17:00:47:6d:80:ef:43:97:fa:7a:72:fe:4b:
2d:44:72:f9:64:0d:c2:1e:ea:8e:fa:3e:ee:5c:c3:19:b2:f9:
5f:84:e2:75:8b:9e:fd:a0:ba:d5:de:f2:9d:b0:66:bf:b8:42:
ce:dc:25:26:b9:08:29:21:b7:da:7c:f9:77:03:61:2e:f3:c0:
28:28:1a:f5:3c:e5:7a:39:93:bb:9d:11:b9:99:c7:0b:bd:14:
38:df:e0:4e
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMDA5Mjkx
MDA5MDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ1MDJCMThBMTVEMjU3
MDdFMTg0OTgwNTUzMzE1MTcyNjA1RTg2MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw/KExyK6F/KQDXzb32PQ0ImsgVmb7xOiJCYw1JlOHL1m3nUjv
dFX10JT9giSBSnH7iEEerBesvC+gLMc8ARJ7sgdVz1RKYR1qCOA74MTas6KU0pgU
wHlQde7nanioNAOv0b1Qboa/ZVuMZYEWlRFb/OxY3uYBjorFbyYHq4Go1S3VXazY
swJVJmj7TvK5NhsDMZJjLub3FT1g7usz/+6eKCR6lvuja24B8gUVl3p95fVE9dr6
zt9x+f80tbFJXBEQMvO1bnXReWUhbhzL2N6bcvWSVjHBPzzWGvjMLQX5kCKEF0r0
1kP12ChD1iHl5jtc6J4/fpI2bnaVSsMiO+sVAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQURQKxihXSVwfhhJgFUzFRcmBehigwHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vUlFLeGloWFNWd2ZoaEpnRlV6RlJj
bUJlaGlnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAAHIMA0G
CSqGSIb3DQEBCwUAA4IBAQCg619KwDy+es7n7DXTtQEBm+25geVgsGVJFs1e+54S
rOe1NQzocm3u8VpCvb0WLUmd+w6wHcqkfQZ1wDm6GcwHfPv970+wLs0q4cIB1r0F
A2wI89U96oIFH1drL2oLloRJl5XHgFTqjYPc4dItwnmZcYlVVL1WHpcAhkLYVPaX
eAqVqqOX0C3opxsTLkgB2jsLOBBxZ0nbLXyA6n9unlJSgae72vBriBcAR22A70OX
+npy/kstRHL5ZA3CHuqO+j7uXMMZsvlfhOJ1i579oLrV3vKdsGa/uELO3CUmuQgp
IbfafPl3A2Eu88AoKBr1POV6OZO7nRG5mccLvRQ43+BO
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org