Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/XGgJ4EG2-bqtSUKI8M1NVjJFL5I.roa
File: XGgJ4EG2-bqtSUKI8M1NVjJFL5I.roa (raw, json)
Hash identifier: na3AviMn27ytTRDhZwzqM4X1L6U7AhI5SzD6Nj0U0UU=
Subject key identifier: 5C:68:09:E0:41:B6:F9:BA:AD:49:42:88:F0:CD:4D:56:32:45:2F:92
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 08E0
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/XGgJ4EG2-bqtSUKI8M1NVjJFL5I.roa
Signing time: Sun 07 Feb 2021 11:32:53 +0000
ROA not before: Sun 07 Feb 2021 11:32:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 103.5.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Feb 7 11:32:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C6809E041B6F9BAAD494288F0CD4D5632452F92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:2c:c7:3f:1a:f9:37:4c:83:a8:5a:24:94:
55:38:a1:05:65:cf:59:73:6e:0c:6c:09:90:c6:b0:
17:88:f2:52:69:47:94:13:95:54:5f:fe:eb:cc:9c:
e8:cd:46:c5:96:73:fd:f9:b3:11:b9:bf:d5:34:60:
b6:f8:2e:79:25:66:37:e0:92:f0:d0:26:2f:cb:b8:
71:a2:16:82:c0:f1:06:aa:e4:93:6b:5f:2e:5f:6b:
4d:74:9e:d8:7f:43:d3:2f:5c:5e:68:d0:04:90:6b:
76:9b:6d:78:31:ec:64:81:07:3f:63:37:23:db:d7:
e8:bb:27:94:67:5d:e9:f9:7f:20:8c:89:a0:c4:ff:
b5:a5:16:6e:23:0c:0f:07:ac:4d:cd:2c:f4:4e:f7:
59:9b:e3:47:ca:14:b3:d8:27:19:20:5e:a6:0d:38:
99:23:f9:70:32:25:75:ce:2f:cf:7e:cf:f1:32:f7:
8d:67:98:b3:b8:b0:52:32:a3:bd:05:bf:fd:81:7e:
52:e3:94:79:91:39:0b:43:6b:69:cf:c1:2e:0d:d8:
db:cb:59:5e:05:1e:8a:fe:dd:f8:46:ba:5d:cc:15:
55:4e:f8:b2:03:6f:ac:7a:cb:b8:ca:d7:e8:ac:db:
dd:19:f4:0d:62:ce:d4:b5:96:b6:bf:9c:00:91:6d:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:09:E0:41:B6:F9:BA:AD:49:42:88:F0:CD:4D:56:32:45:2F:92
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/XGgJ4EG2-bqtSUKI8M1NVjJFL5I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:8e:17:bd:d1:4b:7d:4e:73:03:a1:ec:5d:7b:40:36:b7:9d:
09:23:19:cd:4a:52:e0:5a:10:34:20:54:0c:36:b8:42:43:67:
67:d2:48:e7:88:08:66:19:2a:d3:aa:23:74:c0:40:84:05:6a:
9b:6a:cc:c0:7a:e3:a5:5f:a1:67:0d:a0:e9:6e:15:b8:c8:64:
f7:0f:57:19:ec:f8:13:f7:14:0b:d1:2e:aa:0e:a7:57:db:a8:
97:37:29:45:68:9a:af:57:1a:b2:da:1a:cd:e3:6b:49:94:35:
82:dd:00:4d:6c:ef:56:eb:27:55:be:0d:c6:0c:47:5a:8a:d9:
74:1a:bd:4f:aa:d7:bc:fd:f8:f3:7d:1d:ee:1e:ba:e0:13:21:
dc:1b:1e:46:86:90:3a:f0:37:a1:cd:37:55:86:b6:9c:db:23:
12:ca:cc:c5:6f:27:55:9f:fa:50:cc:d4:39:2d:35:86:f3:6a:
c5:02:c0:bd:e7:46:43:70:51:97:5a:a2:b3:fc:77:47:3e:b2:
dc:b3:5e:e8:86:2a:dc:7c:2b:b6:7b:e1:6d:7b:3b:d6:bd:68:
c8:db:fa:fe:f1:22:52:5a:61:2c:a7:ad:ca:38:f5:f4:f3:be:
8f:b0:9d:a9:65:9d:3b:33:74:03:f4:22:c9:58:86:85:fb:5d:
e0:c2:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org