Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/A9jVEEKCXZ67tSoghN8Tr7S1p4A.roa
File: A9jVEEKCXZ67tSoghN8Tr7S1p4A.roa (raw, json)
Hash identifier: Fa2GsyvDKdTAUpc+ROWIJ6jM8px15DZZqxE1l5HNcas=
Subject key identifier: 03:D8:D5:10:42:82:5D:9E:BB:B5:2A:20:84:DF:13:AF:B4:B5:A7:80
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0B74
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/A9jVEEKCXZ67tSoghN8Tr7S1p4A.roa
Signing time: Fri 01 Sep 2023 08:56:23 +0000
ROA not before: Fri 01 Sep 2023 08:56:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 103.122.188.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 1 08:56:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=03D8D51042825D9EBBB52A2084DF13AFB4B5A780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:d9:80:de:7c:2e:2b:19:e9:ed:6f:44:1b:
9f:24:13:4c:3b:6b:79:e1:a8:58:c8:d4:d8:9a:08:
d9:74:fa:7d:b2:4e:f9:4a:aa:cc:42:cf:9f:c3:fd:
89:2f:02:19:2c:14:f1:93:61:29:96:7c:03:f8:4e:
a1:39:06:a9:e4:30:93:8e:e1:e1:09:da:6e:12:b3:
cf:11:6a:e9:62:a1:87:80:e0:01:9a:75:38:9e:fd:
29:2c:e4:80:bb:ca:00:86:42:5f:35:4e:9c:97:2d:
12:20:ae:41:e1:86:14:46:eb:0f:a3:54:34:95:a3:
2c:1b:64:6f:0d:d0:12:8d:0c:bd:11:f0:ca:1a:07:
ca:81:ab:69:69:f0:40:69:35:03:26:c9:7d:02:09:
ad:f5:9f:87:eb:2b:69:90:f2:3e:08:5e:82:e3:b6:
64:13:fa:e1:e9:4d:41:10:12:c4:ac:c4:11:e6:cc:
1c:53:f3:14:f0:d0:59:1a:33:cf:bc:88:cd:2f:08:
99:4c:c6:7d:06:98:ff:e6:db:e6:fb:57:65:a6:68:
43:72:5e:18:17:be:e5:6e:55:79:96:d7:5e:70:b2:
0d:8f:c0:dd:44:d6:66:52:97:d5:40:b7:b8:cd:f5:
ae:33:69:ba:a4:66:f7:00:30:13:59:a4:55:04:cb:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:D5:10:42:82:5D:9E:BB:B5:2A:20:84:DF:13:AF:B4:B5:A7:80
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/A9jVEEKCXZ67tSoghN8Tr7S1p4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.188.0/22
Signature Algorithm: sha256WithRSAEncryption
02:00:52:e8:e8:d3:a1:2f:d2:c4:bf:eb:fd:3e:e1:07:08:f5:
11:8b:31:57:e3:41:21:89:5a:1a:54:e7:24:db:52:6c:50:9e:
94:b2:4b:5f:48:d9:4b:b6:3e:d4:28:3e:e8:be:0c:13:7a:12:
b4:3c:8a:57:d7:da:e1:30:7c:ce:2b:8d:01:20:18:26:e1:0c:
eb:8a:dc:f7:17:dc:6d:9e:6b:97:c6:68:31:ab:30:9f:0b:ef:
6d:c0:37:8a:19:83:c1:73:69:09:58:d6:54:39:ca:0f:d1:23:
25:d7:08:2e:bb:ab:76:ad:75:db:bd:f2:c7:ea:cb:92:1a:77:
46:16:d3:ea:bf:a4:dc:6c:6d:3f:de:91:d9:14:c7:34:4a:e5:
28:9e:5f:e4:ee:18:a6:db:4f:aa:b7:71:35:5c:af:d0:1f:1a:
cb:90:d7:c7:27:eb:36:f7:87:15:bc:41:3d:b0:82:22:4e:12:
97:30:ec:a8:d4:8e:14:c7:31:36:34:aa:7d:45:23:f6:4a:e5:
a5:20:22:b7:bb:52:fb:3f:45:37:24:25:c2:d4:25:4c:57:e5:
1c:59:57:7e:90:7b:1e:5e:22:25:e9:8d:83:b7:09:01:23:82:
10:2d:00:d3:ca:20:57:ee:64:04:b4:f0:18:22:fa:2b:6d:f6:
ca:3e:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 08:45:26 2023 by rpki-client on console-ams.rpki-client.org