Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/j2SHkPCYa0C8TDOGUX9WZ2gE6NM.roa
File: j2SHkPCYa0C8TDOGUX9WZ2gE6NM.roa (raw, json)
Hash identifier: 3qFkiF8VywlmuLLascw5qjECoDSNktVvUZv4r0dvHMM=
Subject key identifier: 8F:64:87:90:F0:98:6B:40:BC:4C:33:86:51:7F:56:67:68:04:E8:D3
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0B86
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/j2SHkPCYa0C8TDOGUX9WZ2gE6NM.roa
Signing time: Fri 01 Sep 2023 10:19:15 +0000
ROA not before: Fri 01 Sep 2023 10:19:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24157
IP address blocks: 110.50.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2950 (0xb86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 1 10:19:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8F648790F0986B40BC4C3386517F56676804E8D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:8e:d3:ad:f3:ca:c3:e2:d1:37:44:23:88:
b8:19:d4:95:61:5c:8e:e0:56:72:11:cf:6b:a0:bf:
ae:64:1c:b2:21:1a:01:03:ba:79:dd:23:80:0d:c8:
e1:14:da:61:c0:c1:40:26:4f:63:11:ca:e2:0f:eb:
33:c8:b0:78:1d:2c:77:5d:e3:cc:47:7f:d1:b7:9b:
8f:08:03:cb:08:2e:6f:bd:2a:4b:c8:79:71:0c:66:
39:34:a3:2a:7f:5b:98:27:4a:10:67:38:2b:5f:ee:
4e:7b:ac:4c:5d:9e:bd:55:a3:67:58:19:c9:ee:fb:
17:77:e8:56:39:74:da:90:45:cf:9c:31:36:00:94:
e2:4e:96:30:1d:93:b3:dc:8a:1f:0e:61:41:8f:8a:
38:21:81:0a:90:d0:b8:c6:7a:79:d6:16:83:a1:cc:
5d:f6:56:d0:8e:9b:d1:86:80:f2:d2:c7:ed:c0:0f:
6b:4f:3a:61:f5:27:1b:46:b3:96:16:27:fd:e6:ee:
21:9f:49:ac:81:75:72:87:cf:0b:b5:a0:0e:30:a5:
c8:52:5b:c6:12:02:e5:19:f9:d6:84:70:37:b7:7a:
20:c1:a2:2a:ef:8e:b7:61:e8:a1:f4:72:21:f2:57:
7f:8c:63:28:78:63:37:43:a0:58:43:97:22:f4:73:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:64:87:90:F0:98:6B:40:BC:4C:33:86:51:7F:56:67:68:04:E8:D3
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/j2SHkPCYa0C8TDOGUX9WZ2gE6NM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
110.50.128.0/18
Signature Algorithm: sha256WithRSAEncryption
28:27:7d:4b:bd:68:27:c9:80:04:cc:a7:f6:f9:d0:f6:4e:07:
6d:e8:ea:08:9d:d3:e8:c4:ce:96:19:3c:bf:56:3d:47:8a:8d:
08:79:ab:9f:a8:a1:ef:9c:1a:d0:3d:88:a1:91:bf:a3:ee:ca:
85:55:f4:03:cc:11:7d:39:c9:45:ae:e1:d0:cb:c8:39:58:f0:
74:2f:45:77:6a:de:29:dd:68:3b:ff:26:01:06:03:12:04:87:
8b:9a:48:07:08:b8:60:e9:bc:17:19:58:46:51:8f:5a:17:f8:
88:1a:fd:09:08:25:2e:a8:98:cc:66:32:d9:b1:a0:fc:4b:db:
8c:ef:07:e1:c0:f7:c4:d7:c0:95:d4:b1:d9:df:42:0c:9a:8b:
5f:27:80:c1:88:42:1e:b6:90:b2:61:7a:27:e9:8f:7a:74:91:
33:3b:78:a8:3c:59:44:cb:2c:02:cf:e0:6c:fc:25:15:0c:00:
71:65:53:7b:a9:66:d0:22:53:d4:2b:6d:89:0e:6e:21:23:99:
51:3f:e0:39:14:f2:4c:82:4c:f4:25:ae:61:1c:b4:13:2a:1c:
7b:c0:c4:b5:d3:9e:e8:76:56:b9:e9:60:7a:a6:66:e1:05:6c:
21:71:9a:35:cc:ae:da:7e:ea:60:db:33:a3:cf:47:36:02:de:
2b:07:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org