Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/xtmtjUzvQezefH9yQKVBQwZ5Syk.roa
File: xtmtjUzvQezefH9yQKVBQwZ5Syk.roa (raw, json)
Hash identifier: pu/+mb28LQ2tnLe3V5omoLJIv96xaL0DzGIVGigwemA=
Subject key identifier: C6:D9:AD:8D:4C:EF:41:EC:DE:7C:7F:72:40:A5:41:43:06:79:4B:29
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/xtmtjUzvQezefH9yQKVBQwZ5Syk.roa
Signing time: Thu 15 Sep 2022 02:37:57 +0000
ROA not before: Thu 15 Sep 2022 02:37:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 116.89.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C6D9AD8D4CEF41ECDE7C7F7240A5414306794B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:ed:cb:db:6e:70:7f:14:14:56:67:85:0f:
f5:36:16:a9:f1:d2:a1:a5:46:95:d9:cc:68:05:0a:
e9:2f:58:e8:98:2d:0f:32:d0:d4:2d:e0:e7:cf:96:
26:ce:f5:48:72:7a:76:26:70:d1:f1:ea:b2:13:5c:
a8:87:6a:af:52:aa:de:34:0f:00:be:ae:9d:20:96:
0e:b9:5a:b5:47:4d:3e:94:8e:cd:b3:69:17:65:56:
38:df:e1:f0:aa:ee:0a:ed:0b:02:f6:e1:77:bf:c4:
91:05:c7:61:b0:cb:c7:65:2d:e3:29:49:c4:79:e6:
d4:f6:c1:39:5a:b2:3c:0f:f3:e6:a7:fa:a6:99:77:
78:35:34:cb:6c:1d:0e:1a:7e:6f:d7:02:e6:a9:4e:
24:09:5b:dc:48:11:f3:ce:5b:aa:45:89:4a:ff:03:
7b:b2:c4:72:4e:41:c6:8e:13:44:c1:d8:fc:4d:42:
df:23:49:7d:47:18:19:99:57:77:0d:34:e6:d9:d7:
76:4f:81:36:ff:65:da:5b:f4:bc:99:ca:9e:a8:30:
52:8e:00:e0:58:cf:af:c2:1f:62:16:12:64:d5:2c:
7f:dc:de:7e:01:4a:f5:57:f9:83:cf:66:ca:e2:cc:
fc:8a:b7:f2:7e:46:9f:8d:ea:52:18:47:45:88:27:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:AD:8D:4C:EF:41:EC:DE:7C:7F:72:40:A5:41:43:06:79:4B:29
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/xtmtjUzvQezefH9yQKVBQwZ5Syk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
116.89.128.0/20
Signature Algorithm: sha256WithRSAEncryption
31:54:17:e5:a0:c7:d1:3f:b0:1a:4c:99:fa:f0:97:f9:dc:61:
be:d4:d4:fe:ff:37:85:1e:1f:e8:98:00:fd:09:b2:28:f8:e2:
14:5a:29:e6:5e:57:87:f7:e7:7c:28:f2:00:49:f1:f7:07:fc:
80:ca:4a:f8:c4:5f:b6:a1:1c:86:0b:e9:36:36:56:f3:e3:5c:
8c:ba:c5:14:a3:82:df:a7:d9:75:33:f0:86:38:e3:c1:b5:03:
25:cb:e9:2b:2a:ed:0b:d7:37:d0:67:b0:0c:65:08:5c:38:97:
6b:08:c3:85:e1:cf:4d:23:ee:9d:28:85:3a:a0:c5:48:18:d5:
48:41:c9:cd:d5:74:8d:8e:2d:4d:cc:92:4e:45:a0:c9:1a:a6:
02:63:b0:49:8f:4e:da:db:10:aa:ab:8b:65:aa:d7:a7:08:dc:
07:20:cf:f2:54:fe:5a:ed:24:6c:0e:d8:f7:23:1b:cd:a1:0a:
77:3a:b0:05:c9:36:9d:be:48:92:cc:ac:fd:d1:d3:28:b3:f9:
9a:7c:e9:0d:84:3e:87:6f:15:8d:77:57:55:43:01:15:c7:d8:
4e:33:25:d3:98:b9:1b:a4:d9:b8:93:8f:1f:01:d6:28:e9:57:
54:f2:a2:e5:09:48:f8:f2:92:55:19:77:b0:fd:89:86:5c:b3:
a0:95:f7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org