Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/YexxeZJGzp58khDSXW_FZrFQJfA.roa
File: YexxeZJGzp58khDSXW_FZrFQJfA.roa (raw, json)
Hash identifier: vTr2LoYHMDaLIYRL3Pc8fQ98QSufOeY5ihS5wrlvkqE=
Subject key identifier: 61:EC:71:79:92:46:CE:9E:7C:92:10:D2:5D:6F:C5:66:B1:50:25:F0
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0786
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/YexxeZJGzp58khDSXW_FZrFQJfA.roa
Signing time: Tue 29 Sep 2020 10:09:07 +0000
ROA not before: Tue 29 Sep 2020 10:09:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 202.144.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1926 (0x786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=61EC71799246CE9E7C9210D25D6FC566B15025F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:95:6f:81:32:30:2d:c6:ad:71:3c:9e:9a:
2b:c3:6c:e5:c4:b4:ce:90:0b:f9:eb:ac:8d:13:bb:
c7:0e:17:e4:62:36:60:cf:12:24:ad:aa:3f:6d:e2:
b1:42:5f:33:a5:d4:51:67:9b:e5:40:ef:06:9f:14:
d0:11:6e:b0:c7:72:08:2c:e5:3a:6c:9e:6a:2c:ee:
bb:0c:8d:b1:fd:fd:11:94:59:37:0a:3a:76:53:28:
29:47:ff:31:56:be:98:2f:65:ab:27:b7:58:6f:1c:
05:63:3e:a0:af:38:fe:4e:97:e3:87:05:74:f1:18:
52:ef:79:e4:b4:a0:28:5c:4b:20:cc:5a:0e:d7:84:
9e:99:ff:b0:92:8b:97:53:a9:6d:8c:3b:3f:c7:08:
b0:33:81:ee:9a:6e:4b:f6:71:b6:7a:91:61:da:f7:
36:4e:08:06:2b:98:d6:01:3a:fe:b1:ac:ce:e9:a9:
51:49:98:7b:ad:1d:fa:ca:86:61:09:ea:c6:e2:a7:
a8:bd:32:ab:96:5f:75:4f:3b:57:96:ba:45:7c:b8:
dd:63:91:4e:be:cf:f8:f7:ac:ff:76:65:83:07:a4:
96:00:d4:8d:3b:39:0b:86:90:bb:86:f5:4b:71:a3:
6f:38:03:bd:e0:26:17:e6:de:6c:0d:74:10:7d:e5:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:71:79:92:46:CE:9E:7C:92:10:D2:5D:6F:C5:66:B1:50:25:F0
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/YexxeZJGzp58khDSXW_FZrFQJfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.144.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:57:3e:70:17:5c:64:9f:93:4a:be:73:b4:86:c0:b3:e3:9a:
1d:4b:b4:3a:b9:38:47:24:9e:ec:a1:99:a7:10:df:d4:01:66:
0a:28:0f:cb:d0:ed:28:b3:3e:82:ed:c1:78:0c:89:ac:bf:35:
1a:a2:06:f4:fe:b7:56:26:82:97:87:00:5a:c4:3e:4f:59:84:
0d:db:13:16:1d:e4:0d:1f:43:32:cb:4a:7e:f4:c0:9f:80:d8:
cd:d1:48:3d:04:13:39:e1:24:fb:fd:54:e4:2f:bf:f0:25:78:
a0:2e:be:70:18:33:7f:dc:95:6b:cf:bc:c5:73:80:08:1e:e8:
cc:3e:6d:ad:83:cb:2b:33:05:81:de:d3:5c:8d:fe:26:e7:9a:
1c:c9:e6:b8:23:56:7f:66:6a:d4:60:df:10:33:2d:79:03:a7:
be:5d:a9:55:fa:e2:8f:bd:9b:52:a1:03:2f:5d:5f:c0:b4:d0:
30:d2:58:fb:dd:3d:61:51:18:a5:aa:3e:e0:66:67:8b:3b:f1:
f9:ca:a2:b8:cb:5e:31:a1:45:88:f5:c8:a1:f7:df:48:92:5d:
43:65:8c:e9:c8:d9:4e:81:e3:55:fe:c8:f4:9b:e0:23:7a:ea:
82:99:c6:f7:4d:3d:20:b3:d8:a6:fa:3d:73:98:9e:5f:df:2e:
3d:28:f0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org