Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/E2LP8qx_ETcjIFvWj3Pa2Zl1UcI.roa
File: E2LP8qx_ETcjIFvWj3Pa2Zl1UcI.roa (raw, json)
Hash identifier: XXJVpMQWEzB/LWHRcd+gm1xa5nGTIKWILw898QbdmZ8=
Subject key identifier: 13:62:CF:F2:AC:7F:11:37:23:20:5B:D6:8F:73:DA:D9:99:75:51:C2
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 010A
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/E2LP8qx_ETcjIFvWj3Pa2Zl1UcI.roa
Signing time: Tue 16 Aug 2022 03:09:41 +0000
ROA not before: Tue 16 Aug 2022 03:09:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 212279
IP address blocks: 103.172.124.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266 (0x10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Aug 16 03:09:41 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1362CFF2AC7F113723205BD68F73DAD9997551C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:03:27:2a:bd:62:d0:3a:0a:16:45:46:44:
2f:1b:80:76:07:6d:ff:1a:62:38:6c:59:8b:bd:56:
db:84:e7:fc:c9:69:a2:11:38:f4:81:90:30:c0:9d:
e1:c2:38:8c:36:4e:2d:a1:76:25:58:b7:2d:7c:0a:
8d:9b:a3:34:e9:38:b0:fe:b7:12:2d:65:66:e6:ed:
1c:bd:af:30:3c:0c:75:7a:ac:ed:b0:e2:63:4d:8c:
24:19:97:5b:e7:b0:2d:b3:aa:d2:1d:2c:f8:d5:3d:
9c:45:27:7e:60:88:f5:75:6c:96:ac:72:5c:7d:71:
11:2a:e5:b8:32:f8:b0:ed:0f:db:d3:e3:4c:bb:6d:
48:80:8b:9a:f6:be:6e:18:ce:93:4a:2a:b8:b1:28:
7b:19:1f:f6:28:85:68:cf:8b:f3:83:3d:bc:af:7b:
36:a8:a6:1b:19:55:7c:75:87:ba:d7:49:9b:41:66:
63:23:28:75:3e:f1:bd:94:d1:87:cc:c8:28:4d:16:
c5:52:d5:d9:cc:e3:fa:aa:cb:13:94:30:4a:f7:83:
ed:1d:ff:0b:53:ef:f5:06:1f:71:b4:28:8c:8d:de:
8d:12:ea:21:9e:1e:fe:5a:0b:2d:b4:3c:8c:b7:c7:
7f:b1:ba:47:50:ba:8c:ff:e3:30:13:13:03:3d:3e:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:62:CF:F2:AC:7F:11:37:23:20:5B:D6:8F:73:DA:D9:99:75:51:C2
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/E2LP8qx_ETcjIFvWj3Pa2Zl1UcI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.124.0/24
Signature Algorithm: sha256WithRSAEncryption
36:65:3f:54:73:ef:5c:3a:cc:47:4d:a1:64:f1:27:86:d9:44:
b3:33:bc:82:de:cb:24:6e:92:e4:5a:47:f0:86:bc:f5:f8:a5:
28:aa:47:da:12:34:24:18:e7:c8:42:ea:7a:6b:24:05:7e:90:
5d:da:71:11:63:65:c0:35:d5:2f:6c:d6:ed:8f:e5:54:cd:fe:
0e:b3:e5:b8:7e:b1:a7:4d:ac:10:85:31:da:47:f6:d8:ad:92:
28:7b:a6:3c:67:4e:9b:42:3b:2c:1b:83:90:04:b3:27:86:6b:
0c:0d:78:86:29:a1:20:b4:5b:ed:d1:72:cd:67:3f:cc:8d:28:
22:41:73:d0:d5:c8:bc:e1:ee:22:e9:4a:60:6f:c9:b7:e5:b3:
b7:b3:2d:3a:86:c1:3a:3d:dc:97:97:b6:50:8a:0d:42:d0:39:
3c:e2:a2:47:90:fe:3b:ff:96:5d:70:12:15:a6:53:87:b7:f6:
0a:5f:11:1c:56:97:dd:17:76:60:3e:2b:65:e3:0b:d8:f1:9a:
2f:af:c9:17:07:21:95:27:2f:8b:02:5f:67:f1:f5:cf:1a:35:
8f:bd:ea:17:85:8c:25:17:5d:23:c3:dc:09:b8:a3:f4:e3:aa:
25:f6:eb:ed:c0:63:f2:7f:22:0d:8f:59:95:4c:50:86:33:af:
49:6e:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org