Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/wRFymoit7VvkeeKT5olHtH2xBKc.roa
File: wRFymoit7VvkeeKT5olHtH2xBKc.roa (raw, json)
Hash identifier: zXjcmn3rezDGlE0FgK3rcQQPOVoyS7yNMIU3nXC8r50=
Subject key identifier: C1:11:72:9A:88:AD:ED:5B:E4:79:E2:93:E6:89:47:B4:7D:B1:04:A7
Certificate issuer: /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial: 05
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/wRFymoit7VvkeeKT5olHtH2xBKc.roa
Signing time: Mon 30 Aug 2021 03:29:35 +0000
ROA not before: Mon 30 Aug 2021 03:29:35 +0000
ROA not after: Tue 30 Aug 2022 03:11:21 +0000
asID: 24162
IP address blocks: 2407:d1c0::/32 maxlen: 64
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Validity
Not Before: Aug 30 03:29:35 2021 GMT
Not After : Aug 30 03:11:21 2022 GMT
Subject: CN=C111729A88ADED5BE479E293E68947B47DB104A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:90:24:d5:3a:d3:0c:87:5f:c0:c6:c3:d5:
f5:d4:46:1c:28:13:ab:89:f4:32:0d:b1:96:c9:40:
30:ad:c7:ac:d8:6d:9a:e6:78:9d:bf:15:fa:78:43:
40:6e:bc:17:87:43:98:c6:bb:5c:8f:36:d3:f2:02:
4b:a0:9a:6e:94:f5:07:aa:64:ee:fb:b8:83:1b:e1:
37:4b:fe:69:b5:f2:53:1c:aa:64:70:b7:c5:29:bd:
7c:48:1b:59:77:ab:d1:16:e1:85:19:04:fe:1b:05:
95:67:65:58:ad:b6:7b:82:79:ee:56:b5:3c:0f:4b:
b7:02:79:5d:25:90:62:2a:4c:f6:d6:2a:fb:a2:72:
9b:b6:65:27:d9:39:47:21:d3:75:31:0a:c4:a5:11:
60:56:04:9e:c8:98:91:31:50:57:3e:84:31:eb:7c:
49:b5:1d:f2:90:18:d6:52:e6:4c:91:67:cf:24:e7:
59:3f:32:b3:73:4a:ac:7f:10:da:3a:aa:2e:a3:50:
7a:a8:20:75:cf:b1:43:39:38:00:4b:f7:0b:8b:cf:
5a:bb:7d:ca:d5:e0:28:2f:90:ec:5d:61:55:62:05:
83:68:05:ea:56:cd:ba:d5:c3:e9:4e:21:48:11:17:
a6:84:e0:76:92:9d:b8:ff:30:cf:9e:cf:81:5f:7d:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:72:9A:88:AD:ED:5B:E4:79:E2:93:E6:89:47:B4:7D:B1:04:A7
X509v3 Authority Key Identifier:
keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/wRFymoit7VvkeeKT5olHtH2xBKc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:ac:9c:75:6f:9d:fc:b1:60:12:6d:7d:f9:7e:1f:f1:58:26:
70:dc:0b:05:d0:c6:87:a5:58:cb:3e:4a:0b:13:bf:47:42:9c:
2f:b2:29:2f:85:66:4f:9c:73:91:3a:20:20:80:46:de:b1:a3:
ac:93:30:c4:ce:9e:d9:52:18:40:13:14:c0:d9:79:d7:9c:30:
e7:14:da:64:bd:c9:35:c2:07:23:03:c0:c1:5f:95:55:cd:8b:
0b:04:36:84:0d:7f:d9:b4:5e:dc:8b:07:af:e7:de:f3:c2:9d:
81:29:ee:9a:d3:49:70:82:04:50:a3:ca:a0:d3:cb:34:7c:b0:
89:64:4d:20:35:91:c3:36:2d:69:18:12:38:a0:16:8e:ae:f1:
fe:13:f8:db:7f:25:f6:f4:cf:0e:52:a4:16:7b:77:4a:bb:c2:
5a:82:1c:20:21:a2:35:1e:89:7e:6e:9c:78:0e:0d:a9:1d:1d:
b0:e5:ff:15:14:ef:d5:f0:44:90:7e:81:f2:4f:cf:64:6d:05:
8b:28:48:21:30:80:81:20:44:8b:5a:a2:ca:62:0a:66:b4:87:
44:a4:de:bd:64:91:3e:bd:37:0d:6f:a9:ba:36:9a:93:42:97:
bf:23:33:e3:71:6c:d7:93:f6:66:2e:70:b1:c0:82:56:ec:63:
29:4f:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org