Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/rwDhVag4okbYhx25jAZz8zb1XsM.roa
File: rwDhVag4okbYhx25jAZz8zb1XsM.roa (raw, json)
Hash identifier: zkSBxACtY6aoRS9pPnaVXNTWomav9Ue3eZC6XLg4buc=
Subject key identifier: AF:00:E1:55:A8:38:A2:46:D8:87:1D:B9:8C:06:73:F3:36:F5:5E:C3
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 011F
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/rwDhVag4okbYhx25jAZz8zb1XsM.roa
Signing time: Thu 15 Sep 2022 02:41:51 +0000
ROA not before: Thu 15 Sep 2022 02:41:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7480
IP address blocks: 103.172.125.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Sep 15 02:41:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF00E155A838A246D8871DB98C0673F336F55EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:97:d3:04:8f:8f:1b:3d:90:38:09:37:87:
2e:c3:eb:13:49:69:97:4c:0f:96:71:b5:a2:0a:55:
c2:50:3e:73:20:27:40:bb:c2:1b:e0:50:1b:ec:ab:
ff:b1:34:f8:13:4b:03:40:c8:bc:9a:c9:7d:8d:9f:
41:9f:fa:ea:ae:41:c3:90:d3:9c:2a:33:14:d2:77:
bd:c1:77:da:6b:0a:e2:ac:a8:9b:dd:c4:c5:16:10:
9f:80:19:74:12:9d:c9:a3:ab:b2:c7:e7:7f:e8:d1:
f6:31:ce:af:21:8e:c7:e8:28:f6:c2:27:f1:31:e8:
9d:32:49:1c:e9:66:c9:b7:54:56:1c:17:46:22:28:
af:23:c4:7e:be:76:f4:62:d2:b4:e7:fa:8d:17:13:
b0:8e:96:4b:ea:62:58:8e:e2:fb:2a:4a:1d:8c:84:
50:4c:b3:be:91:db:00:0d:12:dc:17:34:26:56:5d:
06:d7:9d:0b:95:b9:63:97:13:49:ec:34:b9:7f:29:
40:4f:29:b4:c2:fa:d6:95:75:cf:a2:60:f8:67:21:
e2:77:75:f2:15:c6:67:89:2c:18:42:b3:2d:3f:87:
16:ce:1b:a6:b3:96:d8:35:df:1f:39:1f:6c:46:42:
b5:0a:eb:9e:ab:8d:1e:b5:56:ba:23:4a:e8:79:5b:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:E1:55:A8:38:A2:46:D8:87:1D:B9:8C:06:73:F3:36:F5:5E:C3
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/rwDhVag4okbYhx25jAZz8zb1XsM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:87:93:41:c2:bc:57:62:e5:a5:00:29:68:da:42:c7:84:56:
19:50:22:41:a9:66:03:5a:fd:7c:60:11:d7:77:d5:f7:f9:2d:
0b:f4:b0:44:f7:81:7a:d3:2d:23:2f:b0:52:fd:d9:a0:1e:01:
71:31:5b:92:9e:a6:8f:db:c1:0f:6f:d1:3f:86:b7:34:da:93:
ae:71:12:22:c4:85:38:7f:5b:bb:70:fb:db:45:05:ab:ef:6c:
76:97:fa:02:60:ee:c7:e1:f6:0f:4a:27:a9:ed:2f:b0:ba:44:
15:33:18:db:57:bd:f4:d1:73:a4:f8:9c:b8:36:fa:3f:49:af:
57:c0:5e:9a:48:6e:ad:49:d3:10:54:31:32:dc:59:0a:35:95:
f3:fc:f2:11:c7:ff:0f:cd:2d:93:e2:56:ea:bf:56:fc:62:d4:
15:07:32:bf:1e:7f:70:67:8a:3e:3f:c9:b9:7b:28:58:81:b8:
7c:f9:fa:d7:76:30:a8:e6:fb:09:33:65:17:4d:56:a8:ac:c4:
4b:73:5e:8c:57:5f:d3:66:26:e4:a8:cc:3b:11:0b:db:f8:1f:
b1:f5:aa:d4:f3:42:59:09:41:db:08:a3:33:3a:d8:b6:fe:2e:
52:c0:8a:7f:e0:ef:d6:c1:24:36:fb:5e:47:ab:0e:e5:2f:b1:
7c:0c:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:38 2025 by rpki-client