Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa
File: iEjZrND-DNiN28WT8sTGKVRLpJk.roa (raw, json)
Hash identifier: XjKUzOyUTjyXZYtg32QFQFYNWHb5/tP1UPWmnY257Us=
Subject key identifier: 88:48:D9:AC:D0:FE:0C:D8:8D:DB:C5:93:F2:C4:C6:29:54:4B:A4:99
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 0E5F
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa
Signing time: Mon 26 Aug 2024 05:16:59 +0000
ROA not before: Mon 26 Aug 2024 05:16:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 18178
IP address blocks: 103.137.246.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Aug 26 05:16:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8848D9ACD0FE0CD88DDBC593F2C4C629544BA499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:a0:7d:6b:66:7e:d7:38:31:49:97:aa:22:
cc:15:ac:f0:93:fb:2c:44:25:44:9a:85:40:14:96:
30:14:c9:e9:97:a9:24:fb:93:15:0c:9e:10:52:fa:
68:41:ab:93:3f:33:f6:80:38:6f:4c:53:f6:5e:85:
16:72:23:90:11:43:60:fe:05:df:7c:c4:9f:99:d5:
d8:8a:58:51:63:7f:c6:aa:9f:d1:2d:e9:11:a7:61:
d9:85:3c:28:a6:fa:b0:52:05:3b:fe:09:dd:d9:96:
c9:13:2b:8c:9f:cc:5e:ab:bf:77:fe:cf:b0:11:84:
d5:c6:4c:d9:61:b4:73:16:f3:b6:ca:6c:cf:3e:b7:
c8:61:85:64:aa:48:e1:59:33:ca:5c:67:bf:a1:c0:
00:e7:d7:17:f7:14:1e:35:d4:41:5e:68:2e:13:fe:
bc:07:24:60:ad:f3:e1:04:33:e7:1e:7a:f5:d5:29:
81:b9:db:10:08:6f:b0:89:5d:bf:ee:92:45:55:63:
95:af:11:7f:f0:f0:5e:9f:a4:76:d5:bc:5b:96:2c:
56:0f:8b:93:77:f2:d4:e4:48:35:6a:11:f3:2d:69:
bb:8d:de:8b:21:cb:5d:af:f7:a7:6f:2b:b9:96:c3:
50:27:28:58:d1:0b:a9:5e:5e:1d:70:0f:3f:71:7c:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:D9:AC:D0:FE:0C:D8:8D:DB:C5:93:F2:C4:C6:29:54:4B:A4:99
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d0:98:34:24:8b:2d:0d:7e:17:d9:85:b1:b2:f8:e1:c3:69:
6a:b8:56:e5:e5:e8:7d:ca:7c:84:05:0f:06:bf:b0:c3:1f:66:
30:2f:15:e8:14:78:12:32:9f:f8:c5:b7:b1:b4:da:c5:60:fb:
77:af:36:02:b3:ec:d9:82:0e:2d:55:08:ef:3d:00:89:4d:de:
21:30:36:7d:51:84:1d:1e:bf:68:8f:86:8d:a7:b7:41:50:47:
73:9f:d5:d8:89:fc:93:4d:14:74:ef:a1:07:d8:4d:0a:3e:70:
8a:c3:25:56:77:1e:5d:ae:02:a8:09:f8:68:10:73:52:84:4b:
a5:3d:cd:0d:3d:22:af:9a:d7:01:7a:fc:ff:97:9d:22:30:70:
a5:77:ec:05:07:9c:f7:24:21:04:4f:7a:e0:a5:72:96:51:53:
c8:6e:76:20:a7:31:5e:92:08:33:1b:e3:8c:59:e8:96:6e:c3:
31:74:b7:33:31:0d:db:c9:71:0e:8a:39:cb:40:4b:a4:be:c8:
34:d9:97:ca:da:d7:87:c4:64:ab:67:8f:55:24:8c:66:2e:ca:
83:0d:f0:95:9c:5c:bd:91:2e:aa:f2:0c:6c:7a:af:2f:81:57:
e6:de:65:cb:76:bf:f2:3a:ee:30:2f:ec:11:96:e5:1c:da:fc:
fe:9b:28:77
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1
NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yNDA4MjYw
NTE2NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NDhEOUFDRDBGRTBD
RDg4RERCQzU5M0YyQzRDNjI5NTQ0QkE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvO6B9a2Z+1zgxSZeqIswVrPCT+yxEJUSahUAUljAUyemXqST7
kxUMnhBS+mhBq5M/M/aAOG9MU/ZehRZyI5ARQ2D+Bd98xJ+Z1diKWFFjf8aqn9Et
6RGnYdmFPCim+rBSBTv+Cd3ZlskTK4yfzF6rv3f+z7ARhNXGTNlhtHMW87bKbM8+
t8hhhWSqSOFZM8pcZ7+hwADn1xf3FB411EFeaC4T/rwHJGCt8+EEM+ceevXVKYG5
2xAIb7CJXb/ukkVVY5WvEX/w8F6fpHbVvFuWLFYPi5N38tTkSDVqEfMtabuN3osh
y12v96dvK7mWw1AnKFjRC6leXh1wDz9xfLZXAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUiEjZrND+DNiN28WT8sTGKVRLpJkwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD
jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP
VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9pRWpack5ELUROaU4y
OFdUOHNUR0tWUkxwSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQBK0Jg0JIstDX4X2YWxsvjhw2lquFbl
5eh9ynyEBQ8Gv7DDH2YwLxXoFHgSMp/4xbextNrFYPt3rzYCs+zZgg4tVQjvPQCJ
Td4hMDZ9UYQdHr9oj4aNp7dBUEdzn9XYifyTTRR076EH2E0KPnCKwyVWdx5drgKo
CfhoEHNShEulPc0NPSKvmtcBevz/l50iMHCld+wFB5z3JCEET3rgpXKWUVPIbnYg
pzFekggzG+OMWeiWbsMxdLczMQ3byXEOijnLQEukvsg02ZfK2teHxGSrZ49VJIxm
LsqDDfCVnFy9kS6q8gxseq8vgVfm3mXLdr/yOu4wL+wRluUc2vz+myh3
-----END CERTIFICATE-----
Generated at Mon Sep 23 09:33:21 2024 by rpki-client on console-fra.rpki-client.org