Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa
File: wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa (raw, json)
Hash identifier: MuWMgIiq6hkDjqTILHwW7sRrLb1k1H9VRz8lp/jEH+s=
Subject key identifier: C0:9A:5F:33:EF:5B:45:A0:DB:A9:CD:CA:39:32:64:46:6E:5D:77:AB
Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial: 0E67
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa
Signing time: Mon 26 Aug 2024 05:17:00 +0000
ROA not before: Mon 26 Aug 2024 05:17:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131642
IP address blocks: 103.137.246.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3687 (0xe67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Validity
Not Before: Aug 26 05:17:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C09A5F33EF5B45A0DBA9CDCA393264466E5D77AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:ce:ae:ab:f0:97:c5:bd:af:54:f7:39:d1:
97:8f:b6:47:88:ea:46:f9:e1:9b:71:0d:91:c5:69:
89:37:80:dd:77:b0:57:42:f5:99:de:e7:db:ad:4d:
1b:bc:93:3a:3b:ef:ba:e9:cd:a7:51:b1:4c:12:92:
a5:89:6b:07:44:38:fc:2a:2b:c8:81:a4:ff:67:44:
69:ba:68:1d:6c:97:20:c9:1f:b9:96:55:dc:ba:d9:
0e:55:76:ff:48:63:f6:fc:70:60:07:34:24:2f:27:
64:c8:65:18:ea:58:d3:42:b0:61:be:8a:be:67:02:
b3:fb:55:ca:a9:9b:9e:04:04:91:5b:82:43:e5:2a:
e1:a3:95:67:81:21:2b:a8:c6:80:3b:20:8c:78:8b:
b8:65:b5:fa:c2:05:c6:b7:8f:84:68:5b:dd:a3:16:
4b:f7:29:06:bc:e9:65:90:29:f0:f2:59:e7:86:18:
96:f1:25:18:2c:8d:85:e3:41:c6:e1:a1:c0:ae:18:
e2:89:01:3a:78:77:d8:a3:f3:65:34:13:d8:c9:57:
97:40:35:10:bd:11:1b:0a:7e:f3:9f:0f:b2:e7:f2:
89:2c:88:41:84:bd:2a:61:7f:10:f1:75:ec:56:38:
98:ef:b4:03:60:ef:b3:79:fe:82:83:fd:d8:4b:54:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:5F:33:EF:5B:45:A0:DB:A9:CD:CA:39:32:64:46:6E:5D:77:AB
X509v3 Authority Key Identifier:
keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.246.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:59:bf:9c:6e:19:35:8c:4e:4e:90:1c:cd:48:46:d1:6d:55:
73:09:26:14:8c:84:79:75:66:22:91:a0:40:d5:4b:1a:f3:ab:
00:1a:40:aa:c0:e5:20:b3:05:b2:45:ed:ad:b9:83:34:fa:9d:
7f:41:53:c5:9a:d6:fd:57:7e:55:3c:99:33:6c:7a:36:95:95:
a7:f8:3b:ab:bb:1f:e4:15:52:7f:b8:21:9e:7d:5d:cf:05:95:
27:4c:34:77:67:18:87:64:ad:97:66:f1:53:f8:c8:bb:f7:f9:
14:04:30:32:ee:34:c7:43:07:a7:5c:76:2b:d8:a2:d8:8c:10:
47:d8:98:6e:70:9c:91:57:4b:3b:04:c6:29:7c:a0:46:87:33:
7a:36:83:bf:b2:7d:2d:13:59:e7:c8:c8:8d:82:de:92:de:dc:
c1:b7:08:09:32:d7:ba:2b:0d:c1:2d:5a:65:77:45:31:f2:42:
c3:e1:aa:16:27:29:41:4d:50:2f:54:0a:94:db:e8:5c:70:e5:
48:02:94:8e:43:14:3e:df:1d:e3:29:0f:e1:1a:e3:47:1e:7e:
78:4a:3f:58:fe:d0:6b:0c:19:73:e1:85:bf:8c:63:08:c2:8e:
fc:e2:a6:a1:16:fc:e9:06:8e:68:af:26:ec:c6:c8:5b:c3:88:
7d:df:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 09:33:21 2024 by rpki-client on console-fra.rpki-client.org