Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/rBfkCKhdFjVZnxd11HpzdLrI9TE.roa
File: rBfkCKhdFjVZnxd11HpzdLrI9TE.roa (raw, json)
Hash identifier: MR4rGWsvGKimH5lChr/yHOIQ2QT/yvKJY3XOVbL/ER4=
Subject key identifier: AC:17:E4:08:A8:5D:16:35:59:9F:17:75:D4:7A:73:74:BA:C8:F5:31
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0789
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/rBfkCKhdFjVZnxd11HpzdLrI9TE.roa
Signing time: Tue 29 Sep 2020 10:09:09 +0000
ROA not before: Tue 29 Sep 2020 10:09:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24157
IP address blocks: 43.255.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 29 10:09:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC17E408A85D1635599F1775D47A7374BAC8F531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:47:b0:8e:2a:7e:f3:26:b2:0e:2d:45:66:
54:06:7f:90:65:8f:15:65:34:81:3e:3b:e8:86:f5:
73:f7:88:07:14:42:d0:2b:5c:69:a9:b4:25:0d:36:
78:5d:a6:54:fd:2f:3f:0b:e9:ec:1f:7b:e4:4c:ca:
6f:2e:8a:d2:8c:34:97:b4:c8:f3:fe:2c:07:e2:c6:
66:9c:14:16:43:c1:0a:01:9d:5c:da:30:82:d7:16:
d9:5f:aa:13:14:97:a9:9f:96:b1:73:6e:23:ad:50:
0f:9a:09:56:ef:46:9e:57:da:47:da:4c:24:51:98:
68:c7:b1:75:45:86:2a:77:bb:4b:ad:07:8c:57:5f:
91:ff:df:bd:da:19:d3:ad:d9:a3:e4:72:e5:2d:ff:
df:09:46:46:57:15:63:3d:b0:98:f0:60:94:7b:fa:
36:65:19:b9:fc:1b:92:58:60:c6:f4:49:eb:f2:62:
23:ec:cc:eb:9e:26:e1:88:83:8d:ff:51:b4:56:f9:
19:c5:ec:f8:5e:9c:6e:4d:5c:e1:95:84:a2:0a:39:
ef:7e:95:af:6a:8d:bf:54:3c:99:42:64:b0:6c:fa:
3d:86:7d:42:4e:1e:b6:7e:0b:3b:b1:c6:2e:3a:22:
b0:ab:01:ef:73:ea:95:32:5b:54:ee:ce:73:ec:5e:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:17:E4:08:A8:5D:16:35:59:9F:17:75:D4:7A:73:74:BA:C8:F5:31
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/rBfkCKhdFjVZnxd11HpzdLrI9TE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:75:38:a4:18:46:ff:f3:52:00:ee:89:0e:b7:8e:dc:b3:7f:
bd:01:3c:44:bf:c3:4f:8f:12:59:f1:c3:58:65:99:1d:db:eb:
c9:bf:83:a1:b3:2c:f7:d3:7b:2e:13:5e:50:21:e2:a9:cf:9f:
79:09:20:c0:50:6c:6c:df:3c:91:01:5b:58:6a:45:aa:db:b0:
a1:7d:b2:fd:34:bc:83:c3:b3:f2:ad:7d:f8:a9:79:91:ee:94:
e6:33:8a:06:27:77:c9:25:24:fa:62:ea:b5:b8:ca:11:f4:e1:
65:55:26:08:00:c3:5a:f4:44:2d:49:0b:90:b8:5f:5a:a8:ae:
98:3d:c9:fd:a5:5f:56:8b:b5:6f:13:04:7e:40:ab:3b:bd:90:
91:86:7f:14:4a:77:ba:41:8b:a7:42:44:08:d8:4d:5f:88:f4:
6e:66:e2:c5:7e:c0:bd:4e:2a:d6:a1:fc:39:b1:3b:42:e6:5c:
da:9b:2e:38:cc:a3:3c:0a:55:c0:ca:88:21:e8:42:63:f3:66:
12:06:0b:1f:3a:bb:f4:c0:c7:16:30:c3:09:7a:da:63:4d:9f:
85:80:08:26:a2:07:d2:41:e0:9e:e1:74:32:dd:77:34:ca:e4:
53:64:b1:e8:04:d0:e9:ca:28:8c:10:ee:6a:5d:85:79:2d:c3:
89:4e:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:57 2025 by rpki-client