Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa
File: I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa (raw, json)
Hash identifier: Uthnip0AO1whuDM4FKjm/ygAlri0eK+cWdgdlByGp4o=
Subject key identifier: 23:77:93:56:A4:80:6F:34:28:E2:26:C7:23:CC:9B:9F:77:9E:D7:64
Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial: 02B0
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa
Signing time: Mon 26 Aug 2024 05:19:01 +0000
ROA not before: Mon 26 Aug 2024 05:19:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38042
IP address blocks: 2400:37a0::/32 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Validity
Not Before: Aug 26 05:19:01 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=23779356A4806F3428E226C723CC9B9F779ED764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:78:fb:fd:d9:02:2b:5c:6f:06:dc:7e:31:
ae:69:bf:7a:8f:7d:55:72:36:0a:a2:f8:44:c9:3e:
95:ec:7c:31:3f:57:14:7c:79:29:08:d7:9c:ea:6f:
27:26:3b:ca:95:be:e2:b2:5f:55:07:55:8d:4d:d3:
6c:d9:73:d6:08:41:11:6e:6f:3a:2f:fb:8c:5c:fd:
5a:78:c1:5d:48:61:34:69:09:ee:91:81:0b:d0:be:
44:ea:3b:d5:74:f5:36:97:bd:76:b7:f4:a2:6d:f4:
b6:01:bd:28:62:ce:f9:9f:2a:82:81:59:ef:01:8f:
d6:1b:2b:60:c2:9e:49:8d:ee:62:34:95:d4:e5:96:
7a:8f:0d:cb:20:aa:fe:31:df:22:f2:09:cb:70:c8:
f7:38:0f:89:f1:a8:a9:4c:b4:3c:90:4a:df:13:f4:
60:aa:d8:d0:a3:eb:92:05:7a:28:9d:e5:8f:33:8e:
0c:48:4a:8a:89:f8:c6:f0:ca:8f:9b:a9:e8:ba:6d:
2d:24:c2:01:0e:28:9e:57:18:e6:d3:ed:48:08:9e:
f9:2d:34:ae:de:7f:10:b4:19:05:e3:bb:03:d2:60:
64:76:f6:5c:bc:3d:c9:fb:4b:7c:13:bd:c4:d6:72:
4c:df:64:d6:68:dd:16:d1:55:a1:32:de:64:b8:3c:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:93:56:A4:80:6F:34:28:E2:26:C7:23:CC:9B:9F:77:9E:D7:64
X509v3 Authority Key Identifier:
keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/I3eTVqSAbzQo4ibHI8ybn3ee12Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:37a0::/32
Signature Algorithm: sha256WithRSAEncryption
d4:05:a0:a9:51:5f:f2:4c:a8:36:6f:2a:4f:98:dc:a5:32:e1:
68:d4:72:f5:10:fe:27:23:fc:da:c2:dc:fc:af:5a:6f:12:38:
9f:86:b2:f4:31:58:9b:ce:cd:f1:54:c5:68:02:43:51:5e:99:
47:94:c2:74:53:bc:ef:2f:fa:b2:b1:ab:12:e9:0e:79:bd:3d:
cb:cf:7d:93:8e:10:0f:ea:35:6b:e8:35:6f:0b:02:36:e0:64:
87:cd:fd:cf:2b:16:67:3f:78:be:44:7d:3f:b1:bc:96:c7:e5:
58:68:0a:5f:97:2e:08:59:d8:eb:4b:1d:6d:23:a6:d9:2d:28:
29:d8:a9:f6:e8:9a:b1:e7:13:ee:54:10:41:9f:b6:c3:79:0b:
25:11:ca:b1:ac:cd:39:f9:d1:4b:51:3c:aa:65:fc:e5:e4:66:
da:69:04:66:b0:3a:18:37:64:31:01:0d:08:ab:1f:2e:5f:5c:
79:87:41:bf:54:b4:7b:e5:7a:8d:b3:d4:fb:12:a7:86:22:11:
c9:bf:95:b6:67:ab:db:1b:2b:df:dc:d4:63:d1:2a:2b:04:14:
47:32:56:2d:b0:42:86:d0:48:d5:a1:32:24:43:8a:fd:fc:b0:
1d:9c:03:60:f3:25:32:40:11:02:f0:c9:6a:fb:63:b6:2f:fc:
0d:f2:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:50 2025 by rpki-client