Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/2ywFcViLzpVICi35ek-3TOdpIbk.roa
File: 2ywFcViLzpVICi35ek-3TOdpIbk.roa (raw, json)
Hash identifier: yNPVC6gsfoW7nv++iDa2wulH9bIc0Zo3EWNU0g9Ra+g=
Subject key identifier: DB:2C:05:71:58:8B:CE:95:48:0A:2D:F9:7A:4F:B7:4C:E7:69:21:B9
Certificate issuer: /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial: 0105
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/2ywFcViLzpVICi35ek-3TOdpIbk.roa
Signing time: Fri 14 Oct 2022 08:31:18 +0000
ROA not before: Fri 14 Oct 2022 08:31:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131668
IP address blocks: 103.174.154.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
Validity
Not Before: Oct 14 08:31:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DB2C0571588BCE95480A2DF97A4FB74CE76921B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:87:d6:5c:e8:81:c4:9f:4d:af:cf:0f:57:
b4:33:ff:70:b7:89:ce:6d:ab:a5:14:d4:e6:98:15:
77:7b:8b:13:b6:ac:02:b0:32:28:65:55:0a:74:f3:
35:e2:d7:e2:d6:d2:50:31:b4:34:f6:bd:30:66:c3:
de:9d:c6:55:66:5c:89:17:14:b4:8d:34:8d:fc:c3:
b1:0d:1c:03:35:38:e4:3f:d7:4d:4f:b0:1e:21:30:
e9:11:bd:f4:0a:be:c6:c1:b8:b4:e2:dd:fc:c7:33:
f6:af:51:ed:a9:96:64:36:1c:c1:d8:0b:d3:ff:cc:
35:fb:a4:29:b5:d9:1b:43:78:93:f9:44:d2:c8:e8:
8d:65:59:84:ac:35:67:b3:62:e2:23:25:40:e8:f3:
27:56:de:34:ab:cd:1f:f7:20:b9:56:7e:b1:d2:a6:
40:0a:89:3b:eb:0e:4a:5b:6f:8a:65:0e:e6:32:55:
86:af:c5:7e:17:70:e0:5c:50:7a:fd:75:49:e2:6e:
a4:59:19:68:97:68:e4:14:92:8a:75:e9:1e:b9:43:
51:95:6e:7a:3d:ac:cf:a4:3a:e1:71:fc:79:8d:ad:
5a:ca:89:66:73:fe:06:c4:2e:47:7e:c6:2a:74:c8:
b1:3d:15:f6:1b:89:51:6b:c8:3a:37:cd:f6:91:bd:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2C:05:71:58:8B:CE:95:48:0A:2D:F9:7A:4F:B7:4C:E7:69:21:B9
X509v3 Authority Key Identifier:
keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/2ywFcViLzpVICi35ek-3TOdpIbk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.154.0/23
Signature Algorithm: sha256WithRSAEncryption
62:53:49:42:3d:c5:4c:19:5a:b7:f3:e1:09:f8:5b:c5:92:03:
43:fb:dd:22:d2:05:1d:67:5e:64:62:02:00:c8:13:ea:04:ab:
57:c3:52:df:20:3c:19:f9:0b:21:d5:d0:7f:ad:ae:b0:7e:aa:
9b:0a:2e:c8:b9:23:68:cd:c4:d6:d3:34:fa:8a:2c:37:7c:bb:
0a:7a:23:83:3c:29:d0:44:17:57:9d:0a:9c:a4:4a:f3:6d:ae:
fb:77:6e:57:2d:7c:84:9a:02:c8:6d:2e:34:52:f6:bd:29:7e:
5c:c8:88:37:d2:42:4f:70:24:17:6b:34:af:28:6f:3c:93:e7:
bd:d3:e2:73:12:ef:92:31:65:20:19:9c:d1:d2:26:fa:f0:08:
f9:bb:0e:b3:70:28:c8:86:7c:c8:fe:09:b8:b3:f7:9b:29:13:
e0:5c:ff:37:f7:5a:0b:4d:11:7c:63:94:6a:3d:77:ba:6f:78:
f3:8f:6b:32:7f:17:58:ef:d6:a0:c5:7f:ae:53:fc:95:2e:3b:
30:70:a2:0c:34:5b:91:53:67:be:55:88:67:22:bc:77:ac:46:
c5:aa:d2:8f:d2:99:c3:0b:a3:87:56:0a:bf:5b:e3:f4:e4:e7:
26:39:cf:aa:cb:10:24:a8:2b:94:e1:e4:6f:ce:81:09:45:60:
fb:62:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:57 2023 by rpki-client on console-fra.rpki-client.org