Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/EDq87ZRimszwISEaN_M_DZ5WJwA.roa
File: EDq87ZRimszwISEaN_M_DZ5WJwA.roa (raw, json)
Hash identifier: uUTHM49M6S7eHbprVmNacIJbNFRN/ogN3TtvwCIsXxc=
Subject key identifier: 10:3A:BC:ED:94:62:9A:CC:F0:21:21:1A:37:F3:3F:0D:9E:56:27:00
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 011F
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/EDq87ZRimszwISEaN_M_DZ5WJwA.roa
Signing time: Thu 15 Sep 2022 02:41:52 +0000
ROA not before: Thu 15 Sep 2022 02:41:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7480
IP address blocks: 103.172.124.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Sep 15 02:41:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=103ABCED94629ACCF021211A37F33F0D9E562700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:30:24:a7:d9:8b:10:d0:4f:d7:29:a9:99:
4a:28:37:84:8b:4d:6d:3b:c3:10:4b:00:ec:e9:cb:
a9:59:c8:08:d2:eb:36:e5:d3:9a:d5:6e:a7:ce:8f:
71:8b:9f:31:ad:43:a2:89:92:1c:a8:10:89:07:a1:
8f:77:53:9a:8d:ce:ba:dc:83:bc:03:3c:cc:d9:f2:
f9:0e:dc:95:a5:32:f9:a7:92:bc:09:21:48:c5:35:
87:4b:c2:86:5d:7f:9e:dd:96:5a:07:79:8b:b9:e4:
98:82:52:84:0a:b7:9b:19:44:ef:a1:c0:61:bb:d8:
ea:b5:9d:af:39:20:fa:95:51:f6:67:01:7f:ec:64:
33:0f:ab:7d:33:e8:8c:77:88:c8:01:70:43:15:43:
db:d3:04:b6:b0:f4:2e:c1:b6:36:62:5e:d3:1e:8e:
6a:a7:1e:d1:03:7c:cb:6c:2e:36:eb:6c:a4:9d:90:
e6:5c:e9:90:49:71:37:a0:87:e3:64:7d:6d:36:00:
0b:8c:1d:30:bf:a9:64:95:75:04:c7:ae:3d:67:6d:
15:5b:66:e4:c5:b1:14:55:7b:c3:3d:bc:64:1a:98:
20:14:ae:21:13:a9:af:de:9e:60:13:d6:65:c7:19:
a8:76:d7:b1:72:fb:85:b2:30:7f:4b:7b:9f:46:1a:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:BC:ED:94:62:9A:CC:F0:21:21:1A:37:F3:3F:0D:9E:56:27:00
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/EDq87ZRimszwISEaN_M_DZ5WJwA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.124.0/23
Signature Algorithm: sha256WithRSAEncryption
47:d4:66:c9:c4:81:48:60:8e:1c:c6:3e:45:13:c4:35:43:1c:
f0:de:ef:c2:ac:a4:37:89:97:e7:59:b7:36:66:46:6d:5d:6f:
b3:2b:13:b4:37:fc:7f:ca:4a:f8:ea:43:a5:2e:3c:92:32:94:
ea:5d:5d:d1:f4:ab:40:f2:4e:96:a5:aa:84:57:9b:3c:6f:c7:
94:32:d6:e9:64:b7:9f:e5:fa:36:9f:40:0e:f6:4d:93:96:62:
16:86:22:f7:44:28:4e:5c:d7:c7:8d:c2:ef:9e:03:28:99:db:
59:12:85:f6:17:a0:18:ed:e0:1a:44:29:2c:5b:39:d8:15:0a:
15:3e:d3:88:bf:96:04:7a:51:fd:cf:02:7e:af:2f:8e:b7:b5:
a2:5b:ac:16:19:ec:3a:f6:84:d3:7e:bd:d9:a4:e6:c5:09:59:
e3:10:ab:8d:f9:e9:b6:ec:da:e6:8a:32:aa:34:49:9e:5b:e8:
c3:fd:46:fb:61:d5:1a:85:c0:db:6c:7b:27:b5:ab:0e:f5:69:
82:84:ea:23:92:b4:28:2f:17:33:0a:e6:10:98:87:67:2b:54:
ff:ae:53:40:d3:20:8c:95:8a:36:4a:e8:2c:16:62:09:7b:fb:
8d:3b:88:17:d4:4f:9e:41:29:9d:5d:42:fe:84:92:84:55:86:
62:7f:8c:6c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTJB
RjhDRkQ5NTI3MEZDRjVDMkNBNjVEODc3NzdGNkZCN0FCRkQzMjAeFw0yMjA5MTUw
MjQxNTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEwM0FCQ0VEOTQ2MjlB
Q0NGMDIxMjExQTM3RjMzRjBEOUU1NjI3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsEDAkp9mLENBP1ympmUooN4SLTW07wxBLAOzpy6lZyAjS6zbl
05rVbqfOj3GLnzGtQ6KJkhyoEIkHoY93U5qNzrrcg7wDPMzZ8vkO3JWlMvmnkrwJ
IUjFNYdLwoZdf57dlloHeYu55JiCUoQKt5sZRO+hwGG72Oq1na85IPqVUfZnAX/s
ZDMPq30z6Ix3iMgBcEMVQ9vTBLaw9C7BtjZiXtMejmqnHtEDfMtsLjbrbKSdkOZc
6ZBJcTegh+NkfW02AAuMHTC/qWSVdQTHrj1nbRVbZuTFsRRVe8M9vGQamCAUriET
qa/enmAT1mXHGah217Fy+4WyMH9Le59GGgLPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUEDq87ZRimszwISEaN/M/DZ5WJwAwHwYDVR0jBBgwFoAU4q+M/ZUnD89cLKZd
h3d/b7er/TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVDVEFM
RS80cS1NX1pVbkQ4OWNMS1pkaDNkX2I3ZXJfVEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBLzRxLU1fWlVuRDg5Y0xLWmRoM2RfYjdlcl9USS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1JFQ1RBTEUvRURxODdaUmltc3p3SVNF
YU5fTV9EWjVXSndBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWesfDANBgkqhkiG9w0BAQsFAAOCAQEAR9RmycSBSGCOHMY+RRPENUMc8N7vwqyk
N4mX51m3NmZGbV1vsysTtDf8f8pK+OpDpS48kjKU6l1d0fSrQPJOlqWqhFebPG/H
lDLW6WS3n+X6Np9ADvZNk5ZiFoYi90QoTlzXx43C754DKJnbWRKF9hegGO3gGkQp
LFs52BUKFT7TiL+WBHpR/c8Cfq8vjre1olusFhnsOvaE03692aTmxQlZ4xCrjfnp
tuza5ooyqjRJnlvow/1G+2HVGoXA22x7J7WrDvVpgoTqI5K0KC8XMwrmEJiHZytU
/65TQNMgjJWKNkroLBZiCXv7jTuIF9RPnkEpnV1C/oSShFWGYn+MbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org