Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/c_AzZq3udLpwOUg5dnaU9TV-6kU.roa
File: c_AzZq3udLpwOUg5dnaU9TV-6kU.roa (raw, json)
Hash identifier: Mnjinwe456XXwHtu9DvqB3ulG8FlKp+yVM/zQacD7V4=
Subject key identifier: 73:F0:33:66:AD:EE:74:BA:70:39:48:39:76:76:94:F5:35:7E:EA:45
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 5B
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/c_AzZq3udLpwOUg5dnaU9TV-6kU.roa
Signing time: Sun 12 Dec 2021 00:51:36 +0000
ROA not before: Sun 12 Dec 2021 00:51:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 13586
IP address blocks: 103.172.124.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Dec 12 00:51:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73F03366ADEE74BA70394839767694F5357EEA45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:ec:b9:6c:5b:45:e8:47:ec:dc:70:88:c6:
dd:f8:c8:d4:be:76:03:b5:c6:12:6e:cc:89:61:40:
79:8b:ea:ce:28:56:bb:5d:f3:63:34:b4:b4:e0:b8:
5a:8d:a2:36:3d:6e:6b:f6:88:90:93:ed:82:4c:0b:
a2:96:8a:5a:c5:81:9d:45:81:04:f0:a4:85:b4:db:
e3:fd:e2:74:52:54:38:7c:42:37:08:8d:06:09:aa:
68:0f:b1:22:31:4a:a3:fa:8c:f1:ea:0b:d2:d2:8d:
68:bd:bc:76:c6:2d:d6:52:01:08:e8:89:d6:d5:9f:
57:71:49:5d:ed:e3:fe:45:5c:15:f2:06:65:6d:7c:
e3:84:19:3f:2d:c5:a9:7e:fd:e9:c7:7e:de:6f:f7:
99:3e:e6:5b:46:05:1d:4b:f2:a6:7e:df:c8:91:a0:
59:3b:82:f3:94:af:3e:47:c1:8d:b7:e1:a9:61:a5:
fe:9f:da:e1:28:39:7d:a4:77:94:62:ce:ed:f5:a2:
08:80:dd:4f:c5:dc:07:36:2d:2a:fe:db:e9:8c:f9:
7a:71:46:8a:03:94:d4:37:14:81:39:b3:f3:37:3b:
f3:cd:60:19:14:3c:bc:02:22:cb:07:1d:27:f6:2b:
1b:c6:22:37:91:dd:87:da:56:89:9e:77:85:81:0b:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F0:33:66:AD:EE:74:BA:70:39:48:39:76:76:94:F5:35:7E:EA:45
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/c_AzZq3udLpwOUg5dnaU9TV-6kU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fd:54:41:6b:01:d1:44:be:5c:ed:1d:2e:6e:66:a7:a8:24:
ae:72:68:72:5a:83:b5:9b:79:2d:b1:03:d3:67:6f:40:79:ba:
74:77:31:0f:b8:59:43:14:01:f7:30:4c:58:78:47:6a:0d:a2:
6f:ed:d5:11:db:c6:16:99:c1:c6:f2:fd:2e:07:e4:13:95:22:
6e:c2:6f:6b:2e:00:50:c4:2f:7c:bb:85:f8:0e:26:2f:c9:2f:
21:7b:83:62:ce:7e:65:67:e3:5e:ea:c5:9e:73:40:48:af:b0:
e1:ec:53:ca:fd:ba:8f:d0:81:05:29:a4:02:72:bd:97:0b:f3:
6b:19:19:1a:80:73:0c:2f:ce:71:7f:48:a6:4b:83:50:4f:6d:
5f:b8:e7:8b:c5:f1:34:72:a3:ef:fe:30:00:e0:06:76:36:f9:
b9:fc:ed:83:48:1c:6f:70:e9:60:d3:08:4d:fb:b4:87:07:f9:
4d:92:b1:7f:77:40:f9:e9:0d:95:4a:5a:c1:ec:ed:02:c6:ff:
a6:35:3e:cc:0f:02:39:95:08:e7:81:fd:2e:3d:ac:b5:c7:a5:
7e:42:22:b7:a6:8e:ed:17:47:63:62:a1:42:80:6b:7d:47:3e:
53:e1:ce:94:81:ab:96:05:d6:0c:1c:f7:5a:23:13:93:fd:48:
d3:eb:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org