Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa
File: pzzcTLqLS_0MAriowbU-5iZwfl8.roa (raw, json)
Hash identifier: Pc1h7dZCWRx2SQiSE2/EIW3dHBh6MZbsXdmVXzN4qeU=
Subject key identifier: A7:3C:DC:4C:BA:8B:4B:FD:0C:02:B8:A8:C1:B5:3E:E6:26:70:7E:5F
Certificate issuer: /CN=6D1243152906B6566A2B3E19CC468E46DE709D04
Certificate serial: 0103
Authority key identifier: 6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa
Signing time: Mon 23 Sep 2024 05:18:44 +0000
ROA not before: Mon 23 Sep 2024 05:18:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 2401:39e0::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1243152906B6566A2B3E19CC468E46DE709D04
Validity
Not Before: Sep 23 05:18:44 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A73CDC4CBA8B4BFD0C02B8A8C1B53EE626707E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:93:a9:25:2a:1f:23:ee:ff:c0:1a:8c:f5:
ed:a5:d2:be:9c:e1:2b:7e:46:4c:ae:6d:44:01:ed:
95:26:27:e4:d2:7f:2b:80:d5:f2:e7:03:3a:17:0d:
26:04:fa:dc:1a:3e:9e:b4:a5:9c:40:c1:b8:89:57:
cb:7c:0b:c4:d0:f1:df:d9:54:4f:d1:52:66:53:02:
c0:c8:d2:c7:97:4d:cf:c0:24:2e:86:e6:88:d4:65:
0f:be:cf:bd:99:f7:a5:81:96:c5:06:2c:0b:3d:57:
02:50:14:eb:8b:46:75:fd:4f:66:0d:9b:9f:4c:ab:
51:56:42:c0:eb:58:97:ed:0b:f2:e1:44:cf:76:f5:
54:91:a3:8b:73:0a:8f:10:8f:c0:0f:e6:17:0e:34:
a0:32:1c:89:c0:6a:28:55:6e:4b:c6:e3:cc:04:c4:
16:d7:57:c8:65:ba:6a:26:1d:b8:c6:e3:42:b6:39:
aa:d0:2b:b7:a9:e9:d5:da:d2:a7:43:ac:5b:df:9b:
50:a4:5b:4a:72:2b:6a:6c:38:e4:77:24:dd:58:0c:
f7:b8:e3:9d:cc:b9:a9:60:e9:6a:59:40:56:9e:25:
a7:76:9c:bd:6f:66:ff:10:56:8b:3f:ac:49:2b:bc:
a4:ff:13:e5:f6:4a:bc:34:2b:be:0b:a7:05:83:1c:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:DC:4C:BA:8B:4B:FD:0C:02:B8:A8:C1:B5:3E:E6:26:70:7E:5F
X509v3 Authority Key Identifier:
keyid:6D:12:43:15:29:06:B6:56:6A:2B:3E:19:CC:46:8E:46:DE:70:9D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bRJDFSkGtlZqKz4ZzEaORt5wnQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUSHENGXIN/pzzcTLqLS_0MAriowbU-5iZwfl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:39e0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:6d:c0:a6:bf:25:05:7c:85:e7:63:97:cc:6a:9f:87:4b:55:
bc:52:66:c4:c7:aa:72:2f:06:c9:ed:43:b0:fc:f2:1b:31:86:
75:ce:d6:f3:07:0b:72:f3:da:14:5c:40:b6:0c:3f:05:70:a9:
ae:a5:9c:46:f4:d7:3b:b0:96:5d:36:23:c9:98:6b:0c:7c:4a:
66:97:07:36:a7:6d:61:b8:0a:a8:a3:e7:95:89:7d:6d:ab:c3:
f9:5d:63:5f:0a:28:30:b9:f6:b7:64:f7:18:d8:3f:60:6e:80:
61:8e:0e:dc:71:15:85:a6:1e:ec:8a:a6:99:8f:49:46:e7:6a:
95:5b:30:55:2c:e7:1b:ef:5d:77:e5:a2:00:79:f7:da:07:cc:
88:4c:20:32:3e:60:bc:bd:4a:e5:0c:5c:2b:ae:5b:65:aa:36:
9a:cc:08:5e:73:c6:ba:30:99:f9:ce:b4:16:ed:97:ee:df:b2:
1f:56:f4:a9:84:1f:43:91:27:06:0c:e1:4e:10:4b:25:71:93:
2a:a2:3b:c8:13:05:ef:78:db:d0:0e:35:34:be:35:07:ee:2e:
b7:40:1a:27:d1:60:14:84:95:bd:00:df:51:db:e1:12:75:de:
c1:91:7a:90:0a:9d:80:a2:17:ed:5b:1e:73:fc:cf:3e:fb:61:
73:93:ee:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:58:45 2025 by rpki-client