Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/IX5osair_Ao0DrtRE0_hBXuklQ4.roa
File: IX5osair_Ao0DrtRE0_hBXuklQ4.roa (raw, json)
Hash identifier: 6c95Szn17C75x846dGgrZSooV5TKtml6jItp+8igWlo=
Subject key identifier: 21:7E:68:B1:A8:AB:FC:0A:34:0E:BB:51:13:4F:E1:05:7B:A4:95:0E
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: 03AF
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/IX5osair_Ao0DrtRE0_hBXuklQ4.roa
Signing time: Mon 26 Aug 2024 05:13:45 +0000
ROA not before: Mon 26 Aug 2024 05:13:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 134823
IP address blocks: 2406:c3c0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Aug 26 05:13:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=217E68B1A8ABFC0A340EBB51134FE1057BA4950E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:0c:33:c1:73:5d:00:d3:9e:e4:e7:e4:d5:
4b:9a:3a:2e:49:66:c7:04:34:49:85:0d:46:7f:53:
16:a3:4d:8f:bd:a8:8b:d4:d8:1c:41:55:8d:24:7b:
7b:0c:a9:40:b8:ab:a5:07:93:ac:97:e7:6c:7b:19:
8e:de:7f:1f:0b:46:2b:79:b7:a5:23:c6:a1:77:8a:
f5:0b:5b:49:e3:cb:b1:61:dd:2c:c2:18:4c:79:1e:
39:ae:7f:f2:ac:d9:05:ed:1f:6b:60:25:e0:ef:34:
88:0e:b2:40:9c:89:84:4c:df:dd:38:0c:bf:79:06:
a6:80:f0:06:6d:cf:00:95:01:04:3d:d2:1c:41:bd:
74:33:d1:62:4d:79:1e:c0:1e:5d:68:fa:2a:08:3a:
f7:bf:d0:09:64:1f:6b:37:79:b2:94:99:68:1e:38:
47:a9:12:0e:65:1e:34:26:9d:c0:3d:f9:99:71:0d:
eb:4a:f2:ad:fe:2d:0b:1d:14:45:40:8c:1e:9d:5e:
71:60:1c:dd:d1:58:39:89:cf:8d:a9:d6:7d:ce:77:
4c:73:7b:81:96:79:74:56:8a:c5:24:d4:13:0d:6b:
61:94:11:60:54:3c:05:68:92:d9:48:af:ba:c4:f3:
e5:a1:4a:42:32:a4:4d:bc:89:31:c8:df:37:cb:a6:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:68:B1:A8:AB:FC:0A:34:0E:BB:51:13:4F:E1:05:7B:A4:95:0E
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/IX5osair_Ao0DrtRE0_hBXuklQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:c3c0::/32
Signature Algorithm: sha256WithRSAEncryption
68:60:dc:98:2e:f3:8a:b7:71:f1:58:96:e7:b2:a6:24:e0:ae:
84:8b:4c:25:59:19:94:56:a0:4c:45:53:24:c7:87:64:e2:78:
4a:d3:0a:d5:10:1e:f7:52:dd:9a:8c:d3:c4:3a:6d:c4:24:de:
64:0c:d1:ed:10:15:b3:d9:aa:d3:9f:a5:6b:46:f4:94:e2:17:
40:77:7b:d4:34:6e:b2:f8:c7:a1:13:f5:a2:86:50:f3:13:f3:
d4:aa:35:94:90:27:a2:23:2b:4c:cd:a7:8a:f5:3e:46:8d:24:
40:aa:8e:32:f1:2f:c7:cd:ef:cc:89:7f:39:c3:7e:e7:b2:4f:
9c:6c:6f:fe:98:50:86:6c:7d:32:fd:08:78:b2:3a:bc:92:ad:
da:e5:57:fa:7f:39:1b:81:ab:5d:93:e0:bb:b1:38:68:18:0f:
52:29:45:e7:a2:e9:31:7d:4c:b6:81:ed:0c:5f:0c:02:e9:68:
ce:20:70:92:26:7a:e7:bc:f8:38:f7:0f:a4:0c:c6:16:4a:4a:
de:a6:16:36:5b:d1:dc:91:cd:b3:2f:2f:a9:ab:d6:34:96:68:
5e:4d:a1:c8:38:2a:1a:b4:09:8b:37:3e:ac:16:11:ae:56:1b:
47:23:71:c4:dc:ea:ac:96:42:81:a9:e7:c3:53:e8:a2:ab:dd:
11:ff:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:44 2025 by rpki-client