Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa
File: dMUBncc6RLOqIWlxwo6FcXA1_z0.roa (raw, json)
Hash identifier: 6vfXLt91L6/y+quo1R6JXWAY+MhbOWXrWR8wPa3q6g8=
Subject key identifier: 74:C5:01:9D:C7:3A:44:B3:AA:21:69:71:C2:8E:85:71:70:35:FF:3D
Certificate issuer: /CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2
Certificate serial: 0102
Authority key identifier: A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa
Signing time: Mon 23 Sep 2024 05:20:29 +0000
ROA not before: Mon 23 Sep 2024 05:20:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 2401:3a20::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A39E4FC057049E0560E61D3969D13A5E2F11ACD2
Validity
Not Before: Sep 23 05:20:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=74C5019DC73A44B3AA216971C28E85717035FF3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b6:22:46:7f:7e:9d:c7:34:3c:cd:ab:bd:
76:4d:90:96:99:22:d4:30:07:7d:4a:45:b2:eb:f0:
aa:db:65:08:6a:96:73:43:9c:b5:6c:f4:21:93:57:
b9:2c:15:dd:5d:28:bb:66:f5:c0:28:0e:0b:d4:8b:
91:99:5f:47:93:f8:de:ab:1a:8e:ed:35:94:3e:da:
24:74:f8:b1:dc:0f:66:e0:d6:db:f1:7e:e5:4c:24:
9c:9b:99:1c:a8:65:cc:20:6e:87:3f:25:47:0c:d5:
a6:02:03:61:79:76:cd:cf:32:0a:bc:4e:ef:15:46:
2a:65:19:23:c9:01:fa:df:69:3d:30:c2:52:87:e0:
ac:48:b7:50:85:f7:03:8e:b1:18:d0:39:fe:f3:25:
e7:d5:ca:b0:72:4b:14:03:9c:7b:16:ac:38:b9:b9:
f5:ca:9c:c3:9b:72:5e:1a:3e:c9:28:96:62:ce:3f:
c8:a8:5d:ab:eb:b1:f8:cf:c9:18:05:a2:ab:6b:79:
47:d6:15:e9:11:94:97:d7:ab:0d:7e:22:0d:93:19:
44:d1:08:e2:3e:ef:3b:34:65:c2:04:94:30:ca:c7:
b4:47:64:df:6c:d0:23:ae:3c:d4:61:c4:34:da:ea:
7d:d2:b9:af:9c:4e:4a:ad:48:f1:9b:07:e5:69:b1:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C5:01:9D:C7:3A:44:B3:AA:21:69:71:C2:8E:85:71:70:35:FF:3D
X509v3 Authority Key Identifier:
keyid:A3:9E:4F:C0:57:04:9E:05:60:E6:1D:39:69:D1:3A:5E:2F:11:AC:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/o55PwFcEngVg5h05adE6Xi8RrNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/o55PwFcEngVg5h05adE6Xi8RrNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CLOUDWALK/dMUBncc6RLOqIWlxwo6FcXA1_z0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:3a20::/32
Signature Algorithm: sha256WithRSAEncryption
78:01:79:3f:d9:78:8e:fa:f7:24:b8:ce:2c:19:c2:d4:e7:27:
99:a7:9d:fd:5f:3b:be:48:ab:fe:7a:4b:10:e5:5b:49:3a:23:
7f:52:2a:e7:0a:b6:10:08:49:f4:6c:91:90:dc:73:0b:07:0c:
d8:d3:49:c8:c9:ce:03:02:84:9f:cc:47:ae:51:10:33:c5:0c:
a8:c2:7d:d0:bf:b3:31:78:d6:82:28:86:ac:bd:d8:9e:41:f1:
21:60:f5:45:bf:cc:3c:5b:4b:50:de:f0:03:a6:9e:a3:a4:21:
be:41:d2:13:8c:21:ac:6a:9b:fc:32:a1:2e:ad:25:ec:90:c8:
94:c0:a4:71:58:4f:54:0c:e8:30:76:c7:f8:a3:3e:c5:7a:49:
0b:a9:0f:b5:96:9f:05:c5:3f:2c:08:ee:b1:8e:22:e1:55:ab:
d0:72:7d:96:61:8e:13:bf:ec:64:f6:6e:00:5b:68:df:5b:ea:
72:e8:c2:96:ea:fb:b5:9c:02:9e:ca:2d:ff:f4:45:e9:59:74:
3d:eb:cd:29:8e:f7:67:45:35:0b:1d:f0:d7:3b:54:20:ba:d2:
e7:a7:ed:8f:53:e8:5f:36:98:9c:57:ff:f5:29:69:a5:4f:c2:
56:42:de:98:ec:d6:7f:00:b2:c2:b6:f5:1c:7f:43:e2:26:cb:
c3:d3:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:17:56 2025 by rpki-client