Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/l4Q8AaEuJui3Yroj-h9OySWSESc.roa
File: l4Q8AaEuJui3Yroj-h9OySWSESc.roa (raw, json)
Hash identifier: UM8Y1Da5DS5hdI3yZnnmiKwe2nQaOEQN8iQ/QIup3+M=
Subject key identifier: 97:84:3C:01:A1:2E:26:E8:B7:62:BA:23:FA:1F:4E:C9:25:92:11:27
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 08DE
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/l4Q8AaEuJui3Yroj-h9OySWSESc.roa
Signing time: Sun 07 Feb 2021 11:32:52 +0000
ROA not before: Sun 07 Feb 2021 11:32:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 103.239.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Feb 7 11:32:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97843C01A12E26E8B762BA23FA1F4EC925921127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:db:9f:de:e7:94:81:ba:a6:3b:26:c4:0a:
97:21:f9:9e:e8:f2:39:4d:e9:df:ad:c4:46:dc:44:
87:bc:0e:1c:37:a0:a2:45:31:6a:8d:ac:2e:02:d3:
9f:37:5f:56:99:15:d3:8b:67:3e:cf:c5:1d:bd:56:
c4:5b:97:8b:a8:24:3a:00:4d:92:00:e7:a5:4b:54:
40:0e:f8:03:05:a5:f2:fa:fe:f8:a8:8c:40:69:51:
14:a6:e4:7a:1c:18:91:6e:84:4c:c3:80:dd:78:77:
22:2c:03:68:9b:1a:d9:9d:64:3c:38:1a:0f:1b:f0:
3e:00:e0:82:54:97:4c:b8:d2:f2:66:9f:d7:81:3d:
3f:81:1f:d0:4c:ef:f3:12:8c:cf:1d:b6:49:2c:aa:
4f:e9:bc:2f:d6:ab:06:e1:20:cf:b9:d5:e1:8d:77:
9c:90:75:dd:33:18:e6:bd:62:80:2f:dd:02:c8:68:
d6:de:bd:8e:34:a7:5b:ab:ed:fd:f0:3d:cb:78:dc:
88:92:cf:5f:d8:80:54:2e:dd:e3:11:2f:c2:d2:05:
4c:1d:0d:bf:6e:d7:29:4b:36:f2:98:dd:3d:7c:ff:
0b:0b:f2:18:c7:29:5f:af:46:86:a8:9b:94:51:3c:
b5:90:d6:0e:9b:f4:cd:cf:d0:b7:29:ff:1c:15:d9:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:3C:01:A1:2E:26:E8:B7:62:BA:23:FA:1F:4E:C9:25:92:11:27
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/l4Q8AaEuJui3Yroj-h9OySWSESc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:76:74:3e:81:8a:15:23:18:77:1a:66:7d:20:4c:b5:53:0e:
60:a8:6b:8f:50:0c:c6:c1:5e:2e:06:73:43:1f:eb:cd:fe:59:
8a:eb:15:ed:fd:c7:9f:d0:3e:90:46:d9:6a:26:73:4b:48:fb:
21:54:9e:40:b2:3e:ad:e2:62:be:c8:80:67:07:39:a9:ed:ad:
6c:b2:bb:8f:19:7e:2f:e1:b3:b5:48:1a:ca:50:5e:f2:01:c3:
11:03:35:cc:5d:c6:50:c9:07:59:30:9e:0f:69:8f:c0:12:57:
82:24:23:4b:2a:62:be:ad:c3:63:b6:1e:89:50:55:2d:5f:80:
18:2d:be:85:64:5e:13:81:bd:b4:9d:5a:2c:82:db:6f:ad:69:
af:60:1e:14:70:54:10:8f:70:86:0b:32:ea:f6:c6:98:d9:0e:
19:41:2a:df:97:f5:ce:78:d4:17:62:d1:7a:69:36:7f:ac:0c:
09:b1:ef:62:99:d5:6d:70:de:ac:3f:db:9d:25:5c:16:f9:24:
d9:c9:74:03:2f:27:56:35:1f:a4:50:45:bb:a5:13:f4:04:01:
2b:61:a8:57:2c:1b:17:c3:64:93:d5:24:b2:0c:af:95:d8:20:
b7:59:09:97:4b:02:73:83:d8:6b:51:66:52:cc:f7:f2:c0:2b:
72:e6:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org