Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/nhh3_NwCFNsUepkcxWlRvbg3icQ.roa
File: nhh3_NwCFNsUepkcxWlRvbg3icQ.roa (raw, json)
Hash identifier: yrVHEMXc2xFqKk7thsFKZcDH6aQ29ASjlriflZMvZdI=
Subject key identifier: 9E:18:77:FC:DC:02:14:DB:14:7A:99:1C:C5:69:51:BD:B8:37:89:C4
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/nhh3_NwCFNsUepkcxWlRvbg3icQ.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 2403:c300::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9E1877FCDC0214DB147A991CC56951BDB83789C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:a1:aa:df:6e:f8:c5:e6:b8:d9:89:05:d8:
ad:ac:97:b4:ba:76:1a:43:6a:f9:e3:f3:6b:b1:92:
85:d1:23:e1:01:82:fe:1f:c1:be:d2:7a:7a:a3:ae:
97:1d:61:5d:6e:0d:e3:ae:39:17:b5:af:31:23:f4:
75:58:d3:30:bc:49:84:08:77:d9:ad:42:be:de:db:
e8:02:e8:37:4c:cc:52:56:3e:a1:b6:84:f5:6f:42:
ed:ae:90:5b:87:b7:10:40:f0:f5:0b:4e:ab:4a:58:
ca:34:07:82:10:51:4d:8e:bf:41:9e:eb:e3:e4:34:
ac:09:89:45:fd:c5:0a:2a:4d:40:d2:0c:b4:9f:fa:
f4:bc:e9:de:66:82:78:70:a4:66:10:6f:49:77:a4:
2e:e8:b2:48:82:00:6c:46:46:88:c0:d8:c3:45:8b:
ae:83:c1:ee:9b:57:48:02:ca:05:ab:0b:a1:dc:17:
b0:12:25:ae:4f:ce:73:05:31:d2:80:f1:48:27:57:
95:03:83:4d:5c:59:4a:94:ac:52:64:e8:34:c6:b5:
4a:86:29:e0:a0:f6:00:2a:0e:de:ce:32:b7:50:bf:
81:e7:90:6e:ab:c3:2e:11:2b:9d:41:7e:bc:02:ac:
c2:22:68:d3:b5:70:0f:ee:d6:13:25:6e:b3:9d:8b:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:77:FC:DC:02:14:DB:14:7A:99:1C:C5:69:51:BD:B8:37:89:C4
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/nhh3_NwCFNsUepkcxWlRvbg3icQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:c300::/32
Signature Algorithm: sha256WithRSAEncryption
3a:38:4c:24:2e:4e:29:09:ed:9a:5e:e8:38:f2:e2:78:c3:60:
ad:9c:05:21:a0:d3:72:23:af:bd:40:eb:c4:ba:70:30:33:81:
88:e0:ab:e8:23:cc:53:94:93:b5:9d:5a:77:25:22:83:a9:50:
b0:9a:10:8d:43:1c:f9:e3:33:5d:e6:72:b3:66:57:1a:f4:90:
b0:18:58:64:7b:cd:9d:98:84:30:11:16:05:8b:b7:52:8f:70:
e0:ba:3c:90:61:51:02:00:0f:35:7e:a6:36:83:b8:97:d3:40:
41:f8:de:1c:5c:fb:29:f4:04:a1:d4:54:1f:67:08:aa:b0:dd:
9b:1a:5f:c4:7f:05:00:72:ae:25:2f:03:6a:70:ce:d7:ad:a2:
69:3b:32:2a:06:e4:77:92:3b:65:6d:d3:40:4c:5c:2b:c5:69:
5c:6b:fc:41:15:74:cd:e1:e6:3f:da:a5:37:6a:15:91:78:9d:
86:d4:93:85:ab:4c:64:35:38:23:07:87:87:97:b8:61:f4:7f:
ac:85:d1:0f:c6:e7:5f:4f:04:4d:84:c2:ae:c0:41:87:34:80:
9a:65:7a:7e:09:b4:d1:bb:68:3a:cc:b4:61:c9:91:56:d6:15:
f9:2f:bb:c7:e4:93:0f:77:35:b6:da:dc:4a:d4:d3:8a:f3:d6:
d3:9e:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org