Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/kLC_jcdv5fli74icdW_cNXPcsPk.roa
File: kLC_jcdv5fli74icdW_cNXPcsPk.roa (raw, json)
Hash identifier: oHq5PkyiD6k/Ono7T3VFBN3mBrEzw7viTMfK8QijADM=
Subject key identifier: 90:B0:BF:8D:C7:6F:E5:F9:62:EF:88:9C:75:6F:DC:35:73:DC:B0:F9
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 5F
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/kLC_jcdv5fli74icdW_cNXPcsPk.roa
Signing time: Thu 16 Dec 2021 05:39:00 +0000
ROA not before: Thu 16 Dec 2021 05:39:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 141173
IP address blocks: 103.172.124.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Dec 16 05:39:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=90B0BF8DC76FE5F962EF889C756FDC3573DCB0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:31:fd:d9:97:dd:d9:8b:90:21:28:93:91:
c3:ac:a7:a8:1d:55:ae:f8:af:a1:58:49:c4:bb:0d:
9b:89:d1:7f:91:32:f1:2b:f1:d5:6e:9d:27:4a:2c:
5a:16:a3:e3:e5:8e:7c:df:5a:61:e4:91:81:59:39:
43:79:b9:b8:28:6f:5a:f0:72:39:5d:80:d0:c8:50:
43:e7:a6:dd:c5:92:b9:0b:00:e0:2e:61:cf:9c:b1:
5a:02:40:d5:5f:f3:31:8c:6d:a8:16:6c:bf:97:37:
6f:bc:08:47:29:75:14:1f:81:7f:95:30:80:16:54:
b0:7f:09:f9:81:a1:7f:3e:1c:0e:e9:9d:8c:20:d3:
a7:28:f4:81:03:54:bc:6e:82:65:25:79:d9:81:42:
e3:27:3b:81:e9:96:58:a9:d1:58:13:0a:a9:84:b2:
dd:08:88:0d:ff:db:aa:fb:d7:64:b3:d8:e7:8c:cd:
7d:f5:17:48:cd:51:46:91:0d:99:cd:1d:28:ec:8b:
83:f7:b7:c9:2e:c1:31:5b:ed:7d:4a:1a:21:9a:79:
d0:33:bf:11:c9:1d:7d:6c:3c:58:38:39:4d:a1:c7:
05:c9:04:cc:80:3d:e0:c5:57:60:42:b6:ce:cf:00:
36:d6:a1:25:cd:b6:52:c2:ff:d5:6e:84:4a:e0:d8:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:BF:8D:C7:6F:E5:F9:62:EF:88:9C:75:6F:DC:35:73:DC:B0:F9
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/kLC_jcdv5fli74icdW_cNXPcsPk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.124.0/23
Signature Algorithm: sha256WithRSAEncryption
82:94:64:dd:89:29:e7:06:7d:d5:fd:43:b5:41:9b:1d:37:3e:
6b:1b:84:40:f9:e6:f8:d4:23:f5:37:fa:69:7d:62:55:53:ce:
ae:93:ae:20:06:cf:08:bd:a6:4b:b2:6f:12:5f:8e:b8:1a:23:
c2:0c:db:e9:6f:dc:79:07:ab:12:86:68:b5:7b:7a:84:31:aa:
81:ab:5c:7a:17:15:0d:e0:d9:f5:24:0b:1a:bc:14:3d:b5:f4:
b0:43:c0:a4:eb:c4:f7:7d:3c:22:2c:8b:12:58:e0:4e:55:2e:
64:32:1c:a4:66:ac:ca:22:21:07:1c:8d:d5:3b:a9:88:c2:db:
d4:53:16:0d:4b:b7:5c:50:3f:f4:01:a3:b5:29:41:f8:b6:70:
57:ed:76:d5:d5:4d:4e:81:e9:60:8b:ac:a5:fc:8f:19:ea:bf:
ae:ba:66:6f:8e:e4:5a:11:c0:bc:eb:79:ee:27:17:52:cf:62:
f2:db:37:f0:f0:2b:c8:08:aa:46:f0:7e:1c:4b:73:a8:31:58:
f9:ab:7e:6e:d0:04:14:77:e3:21:f8:41:d5:65:de:a7:19:e5:
f4:4d:58:aa:ee:e5:97:9b:15:d4:16:62:62:bb:85:01:ad:66:
7a:4d:78:10:ea:2b:c5:3f:76:cf:d8:53:e4:51:a4:c4:1e:43:
b8:56:17:d8
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkFG
OENGRDk1MjcwRkNGNUMyQ0E2NUQ4Nzc3N0Y2RkI3QUJGRDMyMB4XDTIxMTIxNjA1
MzkwMFoXDTIyMDkyOTAyMzYyMlowMzExMC8GA1UEAxMoOTBCMEJGOERDNzZGRTVG
OTYyRUY4ODlDNzU2RkRDMzU3M0RDQjBGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALl9Mf3Zl93Zi5AhKJORw6ynqB1VrvivoVhJxLsNm4nRf5Ey8Svx
1W6dJ0osWhaj4+WOfN9aYeSRgVk5Q3m5uChvWvByOV2A0MhQQ+em3cWSuQsA4C5h
z5yxWgJA1V/zMYxtqBZsv5c3b7wIRyl1FB+Bf5UwgBZUsH8J+YGhfz4cDumdjCDT
pyj0gQNUvG6CZSV52YFC4yc7gemWWKnRWBMKqYSy3QiIDf/bqvvXZLPY54zNffUX
SM1RRpENmc0dKOyLg/e3yS7BMVvtfUoaIZp50DO/EckdfWw8WDg5TaHHBckEzIA9
4MVXYEK2zs8ANtahJc22UsL/1W6ESuDYbKMCAwEAAaOCAfAwggHsMB0GA1UdDgQW
BBSQsL+Nx2/l+WLviJx1b9w1c9yw+TAfBgNVHSMEGDAWgBTir4z9lScPz1wspl2H
d39vt6v9MjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9SRUNUQUxF
LzRxLU1fWlVuRDg5Y0xLWmRoM2RfYjdlcl9USS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNHEtTV9aVW5EODljTEtaZGgzZF9iN2VyX1RJLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvUkVDVEFMRS9rTENfamNkdjVmbGk3NGlj
ZFdfY05YUGNzUGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
Z6x8MA0GCSqGSIb3DQEBCwUAA4IBAQCClGTdiSnnBn3V/UO1QZsdNz5rG4RA+eb4
1CP1N/ppfWJVU86uk64gBs8IvaZLsm8SX464GiPCDNvpb9x5B6sShmi1e3qEMaqB
q1x6FxUN4Nn1JAsavBQ9tfSwQ8Ck68T3fTwiLIsSWOBOVS5kMhykZqzKIiEHHI3V
O6mIwtvUUxYNS7dcUD/0AaO1KUH4tnBX7XbV1U1Ogelgi6yl/I8Z6r+uumZvjuRa
EcC863nuJxdSz2Ly2zfw8CvICKpG8H4cS3OoMVj5q35u0AQUd+Mh+EHVZd6nGeX0
TViq7uWXmxXUFmJiu4UBrWZ6TXgQ6ivFP3bP2FPkUaTEHkO4VhfY
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:19 2024 by rpki-client on console-ams.rpki-client.org