Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/-Ox28f250sgTHAbHVIk-12T462Q.roa
File: -Ox28f250sgTHAbHVIk-12T462Q.roa (raw, json)
Hash identifier: 2kBpHx36uP8lizIqByciTiUT9A140FAqFSLsSuC2RFQ=
Subject key identifier: F8:EC:76:F1:FD:B9:D2:C8:13:1C:06:C7:54:89:3E:D7:64:F8:EB:64
Certificate issuer: /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial: 09C4
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/-Ox28f250sgTHAbHVIk-12T462Q.roa
Signing time: Tue 29 Sep 2020 10:09:32 +0000
ROA not before: Tue 29 Sep 2020 10:09:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131644
IP address blocks: 2404:d740:2266::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Validity
Not Before: Sep 29 10:09:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F8EC76F1FDB9D2C8131C06C754893ED764F8EB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:5e:a8:f6:67:f6:b1:88:fb:66:5f:d7:66:
04:f6:87:90:7a:46:f7:32:bb:af:94:e8:c0:bc:4e:
e1:27:ed:4a:ac:ac:ef:88:17:67:c4:7b:90:13:a5:
7b:4e:c0:db:c8:cd:69:24:70:46:dc:4e:1a:88:69:
ff:76:ca:69:66:7c:17:df:cd:79:0f:df:c4:f9:73:
34:9f:76:d3:c7:47:d6:d6:6d:61:13:c9:d7:71:2c:
6f:0f:8b:05:76:5d:93:f8:f5:59:97:d1:bb:1a:53:
78:f4:bc:b2:b0:d7:cd:4f:4b:7f:c7:cf:49:24:68:
d8:72:84:e2:3f:90:ad:47:84:1f:4b:21:17:fc:14:
d9:50:c0:a9:d0:03:b4:c8:d6:3d:64:4d:61:7b:a6:
a5:1d:e4:8c:f7:70:a3:be:06:a4:dc:58:4d:74:b9:
5a:eb:96:a8:96:82:38:1b:ad:5d:59:c5:2b:ed:79:
8b:1a:ad:fb:20:14:0a:07:6d:b8:42:60:e6:28:4e:
2f:f4:88:4d:f4:bf:4f:a5:77:c5:26:3c:a3:b4:f1:
3f:ac:cd:ee:17:d3:22:ba:9b:50:73:1e:db:6a:bb:
4a:f6:e9:89:21:d7:3a:b2:ba:ab:06:da:78:fd:aa:
7e:20:d7:56:eb:91:14:6b:2e:ac:db:22:ee:63:60:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:76:F1:FD:B9:D2:C8:13:1C:06:C7:54:89:3E:D7:64:F8:EB:64
X509v3 Authority Key Identifier:
keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/-Ox28f250sgTHAbHVIk-12T462Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:d740:2266::/48
Signature Algorithm: sha256WithRSAEncryption
8f:4f:62:bc:e2:6f:03:e4:11:1a:de:93:5e:f1:0e:a9:24:ab:
23:aa:99:d2:f7:aa:19:c8:16:e0:e6:47:16:d2:4c:bc:84:35:
08:49:f3:dd:48:25:6a:2f:84:73:59:ff:64:76:b3:f3:24:e3:
a9:d9:a1:75:dd:4a:f6:0b:ad:72:cc:90:de:ef:5c:97:23:36:
8d:d2:36:c4:98:de:fb:69:d5:a8:21:ce:45:a0:0c:0f:e3:48:
d6:7b:63:67:29:c4:6c:83:9c:f1:83:aa:a9:0c:d8:99:01:f1:
6e:62:4d:3d:91:44:bb:eb:00:d2:1d:6f:68:80:31:6a:68:6c:
dc:56:52:c7:14:dc:9b:54:75:87:87:9f:62:a5:d3:de:56:3c:
8b:4b:0a:27:84:36:77:b5:61:e0:ff:bf:bd:10:de:4e:78:1f:
69:21:2a:e4:c7:da:33:92:0f:6c:cf:f8:83:56:d4:6c:ca:c1:
b6:7d:f2:78:82:25:5f:db:51:9d:1f:e3:44:50:02:b1:72:ea:
b0:04:af:ff:e3:5e:02:16:28:c8:05:f1:74:7f:92:f6:bb:38:
9a:26:1b:6b:ee:0e:ab:46:f1:40:b2:3f:f8:e5:03:2d:d7:96:
85:47:d4:2f:3c:f7:d7:bc:3c:0b:96:0a:cc:d1:2a:b8:f7:45:
38:ca:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org