Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/ys410TA4_e-s0yPWoSmruihBoQM.roa
File:                     ys410TA4_e-s0yPWoSmruihBoQM.roa (raw, json)
Hash identifier:          s2qsiF4sgZeYEjU6nmgaMzQ6HOg0FOIeEOP80sz95fk=
Subject key identifier:   CA:CE:35:D1:30:38:FD:EF:AC:D3:23:D6:A1:29:AB:BA:28:41:A1:03
Certificate issuer:       /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial:       010A
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/ys410TA4_e-s0yPWoSmruihBoQM.roa
Signing time:             Tue 16 Aug 2022 03:09:41 +0000
ROA not before:           Tue 16 Aug 2022 03:09:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     212279
IP address blocks:        103.172.124.0/23 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
        Validity
            Not Before: Aug 16 03:09:41 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CACE35D13038FDEFACD323D6A129ABBA2841A103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:79:57:73:4d:41:a4:5f:62:29:bb:d5:7b:
                    29:34:84:ac:c8:ba:81:b6:8d:87:a1:e4:8a:8d:ef:
                    55:39:9d:8a:68:3e:75:8e:6d:71:6d:dd:6b:b2:27:
                    28:53:8c:31:ea:4d:f2:d1:53:6c:be:b5:0e:39:b1:
                    36:e4:b1:a0:74:3c:28:6d:7e:83:02:35:0e:89:80:
                    48:c8:04:da:5b:b4:0c:3f:0c:78:ca:9c:6b:b2:56:
                    75:6c:e6:83:4b:98:21:3f:96:9d:a4:42:82:98:c8:
                    87:fe:e8:6f:f0:1b:93:9a:9f:54:99:c8:6d:8a:8d:
                    d3:98:1d:51:b9:8f:63:c6:5c:f0:cd:53:75:17:ce:
                    de:fa:db:60:e5:f2:98:ea:60:cb:c9:68:2c:49:7f:
                    71:58:41:45:d6:18:7e:47:95:5e:7c:a9:df:90:f5:
                    10:3d:51:17:42:1c:4b:cc:a9:9f:f1:66:ba:14:ef:
                    a6:62:6e:c3:f3:7d:eb:7c:31:ef:ce:32:1a:4e:d6:
                    8e:15:a1:81:ab:bd:86:30:bd:80:93:5d:39:c0:3b:
                    c2:45:33:2b:cc:67:e9:21:22:e8:0e:d4:bc:82:37:
                    07:b5:3c:ee:7c:c0:3c:5d:3e:61:78:aa:ba:e7:01:
                    6b:b8:ed:94:f7:57:b7:6a:3d:19:c3:50:68:63:63:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CE:35:D1:30:38:FD:EF:AC:D3:23:D6:A1:29:AB:BA:28:41:A1:03
            X509v3 Authority Key Identifier:
                keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/ys410TA4_e-s0yPWoSmruihBoQM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:42:ae:1b:65:d8:90:48:c6:fe:3f:8f:16:6b:c4:5f:1a:
         c2:bb:94:f3:a9:99:5d:48:cd:ed:dd:3b:2c:d1:91:f0:75:ce:
         2f:b5:20:71:a9:26:2a:9a:bb:f2:bf:70:66:07:53:2b:95:13:
         f5:c7:34:13:e3:3f:bf:5d:f8:73:d3:fc:d9:05:6c:6a:64:f1:
         3d:58:5e:de:7e:13:b1:a0:ac:37:ae:bd:1b:82:bf:d1:20:c8:
         a5:35:b4:c1:21:ad:a7:8a:0c:17:c7:9b:dd:a0:52:cf:31:0f:
         90:b0:d2:ef:ed:d2:4d:f3:9a:6f:08:89:e7:51:cd:9c:b0:0c:
         48:29:98:1e:51:28:f4:bf:33:c3:a7:a8:6c:8b:19:6b:39:e2:
         1a:10:33:ef:b2:e2:48:5e:18:cc:49:4a:d5:9c:fb:34:c9:66:
         1f:7e:4f:76:6b:51:25:05:84:50:a8:a1:74:50:a2:bd:45:2a:
         fd:09:37:3b:4c:6c:d5:d2:09:a8:e8:f6:df:a5:0e:cb:97:ee:
         3a:43:6a:10:ec:2b:fe:bd:9d:b2:14:e5:79:ac:05:c6:d2:bf:
         78:ff:83:87:f6:58:19:ad:c6:8d:59:8e:79:9d:48:7a:29:49:
         9b:a7:22:31:d6:2d:f7:c7:c9:77:d5:18:c9:dd:a4:98:be:f6:
         ce:49:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----