Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/gsgabnaHrdBfgL6S3rctrbp0KhQ.roa
File: gsgabnaHrdBfgL6S3rctrbp0KhQ.roa (raw, json)
Hash identifier: oenEcd3i2n2kc3pzLwWOpmJ+WCN7vmgdecBubiwPm80=
Subject key identifier: 82:C8:1A:6E:76:87:AD:D0:5F:80:BE:92:DE:B7:2D:AD:BA:74:2A:14
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0999
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/gsgabnaHrdBfgL6S3rctrbp0KhQ.roa
Signing time: Thu 30 Sep 2021 13:36:40 +0000
ROA not before: Thu 30 Sep 2021 13:36:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24157
IP address blocks: 1.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 30 13:36:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=82C81A6E7687ADD05F80BE92DEB72DADBA742A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:b5:71:f4:35:4d:a5:00:72:dc:f3:34:9a:
44:a1:92:a9:01:ae:e4:9c:78:6a:5b:cc:07:0b:e9:
9c:3a:0f:21:17:b3:48:e4:3a:36:2b:f9:60:09:15:
c8:91:3f:ee:a3:ec:d7:a8:98:97:92:82:60:8b:dc:
31:e8:43:f6:19:37:c5:66:c3:7a:b5:27:b1:b2:79:
6e:7f:c5:8c:30:e8:2a:fa:02:f5:89:6b:e0:d1:6b:
4b:31:61:e5:de:4c:c0:56:4f:54:b4:70:eb:7f:24:
c9:9a:a1:15:c2:c8:d4:18:23:c6:05:7d:c8:f3:9d:
d6:c6:c5:86:a9:c2:ad:69:20:5a:a4:15:bd:c4:6a:
c0:b2:ae:a5:09:1c:ce:0e:5b:b5:d9:1e:37:01:8c:
f4:f6:2f:99:0b:fd:4b:42:39:71:ea:9d:ad:b3:bc:
e4:b1:e9:77:e5:fd:73:4a:f3:4e:8c:44:12:38:01:
a0:d3:03:a4:0a:ca:c5:12:26:c2:cf:ba:10:6e:1c:
b5:e3:01:4c:1d:8e:0f:a6:38:36:2b:39:0f:b3:7e:
50:1c:3d:81:ac:7c:4b:10:0c:73:ef:0e:7b:24:f2:
76:c4:67:70:e0:ae:c9:6a:a2:85:fc:ed:09:5b:89:
69:3f:66:1d:21:56:4f:18:4b:38:9a:25:d8:49:9c:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:1A:6E:76:87:AD:D0:5F:80:BE:92:DE:B7:2D:AD:BA:74:2A:14
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/gsgabnaHrdBfgL6S3rctrbp0KhQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
1.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:37:56:2b:2e:40:a2:ef:63:87:ef:fd:d6:47:5b:b8:d6:91:
32:8d:ed:28:74:49:79:ef:a3:07:d3:2e:46:f8:c3:f4:01:85:
07:98:8c:56:b3:25:d7:73:51:8f:bd:d7:4d:65:04:fb:a9:ef:
de:ea:bc:2a:e4:5e:c7:68:d8:5b:eb:53:75:80:da:d2:f3:b4:
85:fe:6f:06:b4:16:05:98:0d:06:06:ed:a0:ab:1b:54:50:b4:
d7:be:8e:d2:f3:66:ef:32:b6:20:63:79:f2:ac:75:0e:be:83:
1e:de:2c:e0:ce:22:c5:ce:08:73:ee:88:8c:bc:d1:49:9f:70:
fc:52:fc:f7:75:c0:2c:13:55:c7:a0:ab:e5:42:cd:6d:a5:6c:
e8:bb:37:6d:93:62:f6:24:19:b6:f3:6a:46:12:be:b8:53:46:
d0:ff:1e:5d:94:d9:7b:ac:25:d1:1e:d2:1e:38:26:f4:e6:ae:
79:fc:6a:98:26:d1:6b:f0:b1:d3:55:f8:74:16:da:65:c7:65:
27:d4:1e:58:28:a3:89:13:7c:29:08:94:6b:71:00:b7:44:f1:
db:74:ac:e7:2c:0b:9e:32:b2:10:83:68:4f:e4:b8:4c:94:bb:
f4:98:ce:bb:9b:0f:ed:72:06:b4:95:ac:d3:7c:97:b9:f2:64:
75:9a:57:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org