Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/5eB519ssSBD_RN8WDffxWy_Z-Ag.roa
File: 5eB519ssSBD_RN8WDffxWy_Z-Ag.roa (raw, json)
Hash identifier: qk0LO5XdOSnLyhuB9Px9mDTdfdvfYVuGPW/X0FMy+B4=
Subject key identifier: E5:E0:79:D7:DB:2C:48:10:FF:44:DF:16:0D:F7:F1:5B:2F:D9:F8:08
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 3D
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/5eB519ssSBD_RN8WDffxWy_Z-Ag.roa
Signing time: Fri 29 Oct 2021 17:52:52 +0000
ROA not before: Fri 29 Oct 2021 17:52:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 210707
IP address blocks: 2407:d1c0::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Oct 29 17:52:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E5E079D7DB2C4810FF44DF160DF7F15B2FD9F808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b7:6c:47:13:e7:d7:1f:e4:78:a1:99:39:6c:
67:43:94:02:a4:88:8c:68:0f:5a:ac:5f:f6:f9:b5:
26:d1:37:26:77:65:e6:92:87:3c:18:6c:f1:56:04:
a9:ec:bc:2a:e2:ee:fb:49:82:00:f3:2b:3a:d7:3a:
6d:a4:bb:8f:ed:7f:b2:b4:e7:f7:bf:7c:e4:8d:a7:
93:fe:5a:36:7a:2d:9d:7d:9c:8c:84:69:9a:11:6a:
42:ad:1e:85:68:ea:a2:64:17:78:3e:d4:d0:72:43:
eb:ef:f9:21:ba:f9:51:ae:8a:ad:30:ee:9d:8d:82:
32:0c:61:be:55:53:4f:2e:e2:ec:83:cb:3a:bc:19:
19:c8:2e:23:15:3a:80:28:25:ac:7b:9a:90:a1:15:
6c:21:e8:aa:35:af:dc:8d:60:06:24:1f:f1:18:d4:
6c:41:c3:b5:b3:f9:33:ec:7d:f3:37:45:7b:3c:be:
63:82:e4:83:fa:d2:ff:a6:ca:66:5f:04:eb:e8:92:
c8:07:7d:2b:68:a3:fd:20:35:80:ad:6c:4e:d5:11:
49:bd:3b:8a:47:a8:8a:21:d5:c4:07:a6:29:4b:48:
5d:8d:66:f2:be:67:ae:c3:cd:eb:1d:9f:d4:83:ee:
44:02:54:88:a2:69:2a:a1:9f:d5:eb:74:a6:13:57:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:79:D7:DB:2C:48:10:FF:44:DF:16:0D:F7:F1:5B:2F:D9:F8:08
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/5eB519ssSBD_RN8WDffxWy_Z-Ag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
39:4a:57:ba:da:01:11:b3:20:24:4f:52:a1:89:a9:cc:25:38:
ab:ba:c0:67:23:f5:74:cb:82:02:3f:98:6b:6d:6b:0b:f6:d5:
78:bf:dc:fe:c4:58:75:61:d5:c3:8b:94:36:15:3b:87:58:42:
59:a9:24:4f:3a:e1:80:1f:ae:10:ef:1f:94:a1:8d:00:02:0f:
bc:f3:26:05:b3:0d:c7:ff:e2:c0:d8:27:e8:a7:a0:5c:db:36:
ed:66:f2:00:c4:09:da:f4:98:65:9e:b1:8f:23:28:e4:78:ea:
69:4a:c0:99:7c:3b:fa:52:17:fa:cf:37:ad:ca:f2:3f:df:9b:
53:3d:ea:a9:d2:a4:45:c6:19:dd:3d:d5:0d:3e:a0:e7:9b:b5:
4f:64:12:d5:03:5a:65:f3:02:36:6e:49:c0:16:79:b6:cd:5c:
9e:9c:2c:f7:a7:a3:a0:b6:90:21:9e:f4:41:af:27:e3:33:ad:
2d:59:8f:c9:81:92:be:e6:23:be:01:bb:19:bc:9f:02:13:04:
c8:cc:53:97:c6:77:87:a4:40:fe:dc:15:fa:90:ca:3e:ad:d9:
cb:68:c9:64:75:45:4d:74:8f:e6:c5:7b:19:ec:f0:bf:22:d9:
d7:bb:a9:ba:4e:c6:46:78:2e:0c:67:69:07:60:11:b4:bb:b0:
86:3f:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:38 2025 by rpki-client