Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/dF58EtrwXdO4Dl6To9cslYaOimw.roa
File: dF58EtrwXdO4Dl6To9cslYaOimw.roa (raw, json)
Hash identifier: Fq3Qe5ka3FHwrpeMnkLAVtGiCnX/5VPhWiQy/Pw0lqM=
Subject key identifier: 74:5E:7C:12:DA:F0:5D:D3:B8:0E:5E:93:A3:D7:2C:95:86:8E:8A:6C
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 098D
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/dF58EtrwXdO4Dl6To9cslYaOimw.roa
Signing time: Wed 29 Sep 2021 02:36:56 +0000
ROA not before: Wed 29 Sep 2021 02:36:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 43.255.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 02:36:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=745E7C12DAF05DD3B80E5E93A3D72C95868E8A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:de:09:07:1d:e6:f7:c3:3b:48:a4:79:1f:57:
de:9e:d1:fb:d8:5b:6d:33:84:3b:f1:fb:ae:dc:56:
53:cc:92:15:b6:61:22:f6:f2:0f:54:ec:16:ea:3a:
c9:5e:a0:64:91:30:b7:fb:8a:ae:71:18:e4:8a:20:
a0:01:f3:f7:b5:57:5c:48:18:11:78:14:c1:3d:a0:
c9:9a:b2:2e:dc:c1:25:93:4a:49:e8:83:d0:df:af:
59:64:7d:81:36:cf:9f:5b:d9:3d:1c:b9:08:ce:69:
49:28:8c:d9:e9:6d:4c:1a:95:7f:83:72:e4:b8:3e:
62:0f:a5:8b:05:de:65:b7:1f:3e:f4:5d:db:19:0d:
ed:0d:6f:16:c1:a0:81:c3:c6:cf:de:ed:bb:b8:c1:
0b:bd:9e:4c:00:af:55:32:53:ad:5d:c7:e7:f6:07:
6b:37:3a:75:b9:df:80:5f:fe:d6:7b:6d:37:ab:f4:
ff:9b:d6:aa:5e:85:8e:68:31:ac:2b:08:0f:23:88:
de:2d:11:25:64:5a:dc:9f:a6:31:94:06:0b:19:c6:
15:01:8a:a3:6b:c6:2a:d0:33:8b:04:e4:b0:e5:86:
60:aa:23:23:10:da:1d:f5:9e:6c:0c:8d:a3:1f:c3:
00:95:04:ad:7f:5d:db:55:33:47:fc:7c:8e:36:65:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5E:7C:12:DA:F0:5D:D3:B8:0E:5E:93:A3:D7:2C:95:86:8E:8A:6C
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/dF58EtrwXdO4Dl6To9cslYaOimw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:45:f6:b0:d4:a8:24:f2:26:64:c5:ee:17:88:a5:49:58:81:
ea:db:17:5d:c5:e2:a4:0a:bb:18:ac:87:bf:9e:89:30:20:4d:
50:75:ce:a4:f8:08:a8:b1:09:b9:bf:7b:74:1c:f7:79:04:69:
e7:de:0e:fd:3a:71:e7:d3:cd:bc:b5:42:42:7d:41:d7:28:f4:
14:54:ac:f2:92:d9:80:bf:77:b3:48:97:ca:6e:be:54:74:a7:
d3:4c:de:4b:5b:77:07:2a:9c:5e:f5:d7:6b:b4:d9:6c:35:95:
b2:f1:42:53:ce:db:d8:a1:9c:2f:bd:e3:f1:ad:17:98:ab:dd:
b5:b6:45:4e:90:fd:78:44:68:24:d7:7b:ab:24:15:fc:d0:d8:
cc:e7:b7:c4:4d:a0:fa:83:aa:98:73:d5:bc:53:9d:aa:7d:3f:
ad:7b:b3:bf:7f:48:4d:5f:81:92:63:67:41:66:82:2b:d6:f1:
e0:ec:a9:22:9c:b1:58:97:dc:b4:8c:a6:2e:39:a5:80:e4:eb:
64:08:ed:ae:14:8d:2a:a9:83:ea:4c:c3:25:57:dc:41:93:b1:
e8:d0:89:19:c5:58:ae:2a:6a:1d:4e:b0:8c:26:a0:96:03:87:
5e:9d:42:cd:5f:a7:fe:82:3d:8d:3e:8e:ea:a8:99:ec:83:5a:
08:13:54:17
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTJB
M0YwMTk4MDA5ODAzQjUxNjVERTVFQ0I2MUZENDUxMjQ2Q0ZBQjAeFw0yMTA5Mjkw
MjM2NTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc0NUU3QzEyREFGMDVE
RDNCODBFNUU5M0EzRDcyQzk1ODY4RThBNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDv3gkHHeb3wztIpHkfV96e0fvYW20zhDvx+67cVlPMkhW2YSL2
8g9U7BbqOsleoGSRMLf7iq5xGOSKIKAB8/e1V1xIGBF4FME9oMmasi7cwSWTSkno
g9Dfr1lkfYE2z59b2T0cuQjOaUkojNnpbUwalX+DcuS4PmIPpYsF3mW3Hz70XdsZ
De0NbxbBoIHDxs/e7bu4wQu9nkwAr1UyU61dx+f2B2s3OnW534Bf/tZ7bTer9P+b
1qpehY5oMawrCA8jiN4tESVkWtyfpjGUBgsZxhUBiqNrxirQM4sE5LDlhmCqIyMQ
2h31nmwMjaMfwwCVBK1/XdtVM0f8fI42ZQ8XAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUdF58EtrwXdO4Dl6To9cslYaOimwwHwYDVR0jBBgwFoAUUqPwGYAJgDtRZd5e
y2H9RRJGz6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVklCTy9V
cVB3R1lBSmdEdFJaZDVleTJIOVJSSkd6NnMuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1VxUHdHWUFKZ0R0UlpkNWV5Mkg5UlJKR3o2cy5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1ZJQk8vZEY1OEV0cndYZE80RGw2VG85Y3Ns
WWFPaW13LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv/tDAN
BgkqhkiG9w0BAQsFAAOCAQEAmkX2sNSoJPImZMXuF4ilSViB6tsXXcXipAq7GKyH
v56JMCBNUHXOpPgIqLEJub97dBz3eQRp594O/Tpx59PNvLVCQn1B1yj0FFSs8pLZ
gL93s0iXym6+VHSn00zeS1t3ByqcXvXXa7TZbDWVsvFCU87b2KGcL73j8a0XmKvd
tbZFTpD9eERoJNd7qyQV/NDYzOe3xE2g+oOqmHPVvFOdqn0/rXuzv39ITV+BkmNn
QWaCK9bx4OypIpyxWJfctIymLjmlgOTrZAjtrhSNKqmD6kzDJVfcQZOx6NCJGcVY
ripqHU6wjCaglgOHXp1CzV+n/oI9jT6O6qiZ7INaCBNUFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org