Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/SPPY9eV9YV543tP9awztI0AvDsw.roa
File: SPPY9eV9YV543tP9awztI0AvDsw.roa (raw, json)
Hash identifier: GsxWQpBraudhVhVS8JndhnAGHwwSqiK0PH2aJywXlx8=
Subject key identifier: 48:F3:D8:F5:E5:7D:61:5E:78:DE:D3:FD:6B:0C:ED:23:40:2F:0E:CC
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 08EA
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/SPPY9eV9YV543tP9awztI0AvDsw.roa
Signing time: Sun 07 Feb 2021 11:33:00 +0000
ROA not before: Sun 07 Feb 2021 11:33:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 202.144.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282 (0x8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Feb 7 11:33:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=48F3D8F5E57D615E78DED3FD6B0CED23402F0ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:6e:78:60:54:fc:aa:f2:9b:b4:9e:82:af:
5b:72:66:1c:87:ee:75:f7:1f:3d:fa:fb:97:fa:ae:
3f:ee:d7:d6:82:67:20:ea:ea:48:3f:cc:68:40:8b:
74:96:a3:94:21:61:d6:d7:ab:ab:a9:82:fe:e9:44:
93:4f:36:8b:e7:11:e8:80:91:ca:b0:af:24:a0:6f:
eb:19:6c:96:26:7a:eb:a2:60:f8:f1:a5:ca:d9:37:
70:9b:29:f8:15:12:6a:08:43:10:b1:a4:7d:ea:dc:
f5:e0:d4:ce:7b:4c:94:3e:71:ab:bc:d1:95:ce:74:
9d:35:26:ab:64:d7:3b:67:70:c1:40:3f:37:2c:c3:
0f:03:be:30:d4:25:38:5c:53:da:66:5d:02:bc:54:
b3:d0:e7:ed:31:54:ea:9d:7b:5d:6a:93:bc:43:cc:
2e:2f:91:cb:12:dd:66:45:1a:8d:f9:11:61:49:89:
8b:4a:d7:04:9a:fa:58:f1:9d:a5:4f:1f:b5:11:5c:
54:48:4a:71:25:2d:ff:f8:7e:20:a7:e9:d5:30:f1:
ac:f8:64:36:06:37:1a:eb:67:aa:26:ca:fd:c7:1e:
e3:82:57:f1:d4:bc:60:11:30:3c:ef:4f:c4:d4:37:
a2:97:1d:c4:25:bd:9f:64:1c:9e:c9:fa:db:82:9f:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:D8:F5:E5:7D:61:5E:78:DE:D3:FD:6B:0C:ED:23:40:2F:0E:CC
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/SPPY9eV9YV543tP9awztI0AvDsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.208.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:6a:eb:a7:62:a2:85:bc:ee:f2:92:ba:71:76:84:26:2e:06:
9a:1f:a3:d9:df:c0:69:e4:c3:b7:f4:54:06:6e:0f:4a:a3:14:
af:9a:c6:35:f2:f1:a7:44:a1:39:ef:4b:2c:0b:73:9e:25:33:
a6:9c:37:ed:59:48:88:c7:2a:4c:5d:c7:ff:85:d4:a5:72:70:
f7:81:0d:49:8b:59:7b:12:90:f9:34:85:12:c9:99:c1:95:73:
67:3f:d1:8c:95:96:ee:73:50:bf:e1:0c:b9:df:ee:e8:a2:88:
cd:0d:8b:22:b6:e3:16:45:c1:ef:3f:af:2c:59:d0:85:c3:d0:
a2:f3:c2:10:3f:0f:c2:06:a4:e7:c1:e6:f1:5d:4c:50:75:ab:
ef:da:64:d5:b8:0f:a8:95:dd:a8:b3:ef:59:41:cf:82:7e:a2:
4b:87:3a:39:2c:1c:48:be:fd:b7:8b:4a:2d:fc:8e:ad:e6:cc:
18:64:59:92:1f:e9:6e:b9:04:10:e8:d6:21:56:c5:0e:f8:03:
1d:b0:80:cd:64:28:98:d2:ca:b8:74:67:64:43:2c:e6:4a:f7:
9e:58:71:1e:fe:0b:69:81:73:5b:72:4f:75:2e:03:ca:b5:25:
08:79:71:dc:12:21:24:fb:e3:b4:f5:e0:a9:e0:bd:08:5f:64:
10:69:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:39 2025 by rpki-client