Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/h3SkaA8PjoU6MBScQGc2EnWnHfw.roa
File: h3SkaA8PjoU6MBScQGc2EnWnHfw.roa (raw, json)
Hash identifier: 5R4BPXuMqbBnlgUYCupRn5mU0eZmQCHOB+88oNmieLM=
Subject key identifier: 87:74:A4:68:0F:0F:8E:85:3A:30:14:9C:40:67:36:12:75:A7:1D:FC
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 08E6
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/h3SkaA8PjoU6MBScQGc2EnWnHfw.roa
Signing time: Sun 07 Feb 2021 11:32:57 +0000
ROA not before: Sun 07 Feb 2021 11:32:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 116.89.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2278 (0x8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Feb 7 11:32:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8774A4680F0F8E853A30149C4067361275A71DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:0d:45:87:b3:8d:3a:ff:1c:4e:f6:e9:4e:
b3:9a:2b:2e:f4:69:a7:39:ed:92:10:fc:d5:61:2e:
33:f7:f5:08:84:c7:d9:74:be:d7:13:e8:64:fe:3a:
38:be:37:55:b8:44:79:3a:6a:2d:50:71:15:79:71:
fc:af:75:12:7d:99:1a:cd:e9:3f:93:91:d2:14:68:
95:1c:ad:17:6e:31:63:7b:d5:2c:83:c0:53:ec:a7:
fc:ac:0f:9d:f3:03:99:9b:24:b7:c9:4a:5f:8e:c8:
b1:fd:4b:d5:52:74:4f:1f:9a:10:70:2d:88:e2:53:
09:bb:da:00:5e:31:10:d3:59:ef:42:ff:37:76:14:
10:78:c2:a6:a6:fb:34:06:5d:b9:54:c8:ad:ba:dd:
db:f9:40:2a:c0:c2:18:1b:73:95:89:58:e3:a3:cf:
50:00:f1:91:cb:74:5a:a6:20:e9:28:80:c9:2b:6d:
f5:80:b6:d8:ec:c2:2b:f3:dd:2c:49:f7:f4:56:25:
06:7b:bb:9f:d5:19:21:b8:03:a1:d3:e9:8b:0b:a3:
38:f7:a4:6f:ff:30:7f:a5:d7:6c:67:19:bd:b2:e1:
0a:cb:29:ba:86:35:87:78:0d:08:32:e5:1c:ec:bd:
77:b7:66:e1:34:b9:84:d2:91:b9:cc:b8:3b:0d:4a:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:A4:68:0F:0F:8E:85:3A:30:14:9C:40:67:36:12:75:A7:1D:FC
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/h3SkaA8PjoU6MBScQGc2EnWnHfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.89.128.0/20
Signature Algorithm: sha256WithRSAEncryption
bc:7c:ec:2e:a5:6c:96:57:c9:41:1b:25:57:44:f1:41:97:24:
7b:b3:ff:8e:13:fa:01:08:2a:9a:31:61:92:41:0e:2a:87:e2:
88:28:fe:bb:7b:06:d7:de:96:77:8b:bf:f6:82:51:6f:4e:98:
0f:8a:b2:ee:fe:d3:bb:cd:7d:c6:b9:1b:76:06:98:be:ba:14:
4f:54:69:75:de:b2:1d:b1:d7:d6:3d:35:43:36:39:bd:31:d4:
28:67:74:01:e7:39:28:af:58:15:4c:7b:08:7f:e3:e8:15:e6:
a1:ae:82:78:3d:0d:84:39:e3:5d:1a:97:59:ee:e7:83:05:09:
6f:b4:66:93:95:b3:f6:e3:0b:03:89:34:5e:1a:5b:17:59:e3:
b7:bf:d7:20:ea:ff:66:96:5b:8e:25:01:6b:cb:8a:ac:b3:bf:
da:56:df:3e:39:77:54:4a:fa:fc:d5:49:36:34:8d:af:45:55:
c7:07:e1:53:d9:5a:a3:9c:b4:fc:7e:a4:c2:5f:0f:07:4b:a1:
64:67:c4:d4:09:74:df:c9:0e:fb:94:31:36:9d:c7:84:0d:02:
75:25:1d:ae:2a:dc:b1:be:8b:7b:9e:cc:46:b2:66:7d:d5:26:
c3:aa:0c:eb:1b:e4:7c:15:6b:c9:e2:d8:dd:78:58:0d:be:42:
76:74:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org