Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/Fpg7SE5S2-5-x9KAgG3Xme9JV7I.roa
File: Fpg7SE5S2-5-x9KAgG3Xme9JV7I.roa (raw, json)
Hash identifier: ab0IxmBO46Mt3mwGqWIk0fMJUFCyFu7S9MTt7E+NJLM=
Subject key identifier: 16:98:3B:48:4E:52:DB:EE:7E:C7:D2:80:80:6D:D7:99:EF:49:57:B2
Certificate issuer: /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial: 09B3
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/Fpg7SE5S2-5-x9KAgG3Xme9JV7I.roa
Signing time: Tue 29 Sep 2020 10:09:26 +0000
ROA not before: Tue 29 Sep 2020 10:09:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131644
IP address blocks: 2404:d740:eeee::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Validity
Not Before: Sep 29 10:09:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=16983B484E52DBEE7EC7D280806DD799EF4957B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:32:15:be:c8:e0:69:1a:63:53:97:96:f3:
45:89:7c:67:cb:34:6d:73:87:3b:b3:7a:f2:4f:65:
6c:cf:dd:a5:94:60:51:c2:bd:a4:63:14:0e:c0:a6:
61:22:df:16:5f:a8:8d:d1:b4:18:20:89:02:3e:e8:
66:18:d1:7e:5c:19:d5:73:15:4f:b8:9c:a4:6e:c0:
5d:ec:48:ab:99:2b:42:26:1d:bb:54:39:67:f8:d5:
d6:e8:2c:94:63:14:ad:25:dc:35:43:ad:55:ef:7e:
82:d2:3e:eb:61:18:0a:13:9f:1e:74:86:8d:62:23:
e2:05:89:1b:7d:9e:3f:57:f2:00:f7:8d:b1:15:db:
69:7c:d8:18:8a:db:b0:3b:fc:89:20:7e:6b:c2:86:
85:57:78:1b:66:5e:f2:1d:fe:6a:75:a1:86:cd:3f:
73:b0:78:43:fb:24:17:aa:ba:95:53:6d:14:d7:3e:
4f:b2:e7:f5:70:17:ec:6a:e2:5c:d0:d0:3a:cd:d5:
e0:58:25:eb:71:1b:9d:51:0c:e0:f8:9a:d7:a0:03:
50:c1:46:c3:1f:23:8d:4b:e7:bb:dd:4e:d9:a7:da:
ea:78:10:d1:88:27:f0:02:7a:7a:a1:21:d2:35:ab:
18:76:5e:a0:b7:04:12:80:6a:b4:cc:bb:32:a5:00:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:3B:48:4E:52:DB:EE:7E:C7:D2:80:80:6D:D7:99:EF:49:57:B2
X509v3 Authority Key Identifier:
keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/Fpg7SE5S2-5-x9KAgG3Xme9JV7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:d740:eeee::/48
Signature Algorithm: sha256WithRSAEncryption
79:c4:55:fa:41:29:6b:e8:92:80:a7:52:d5:fa:53:7a:14:47:
97:2a:ea:69:b8:2a:8f:fe:49:9c:86:42:9a:e9:7f:ac:67:fa:
4c:fe:92:12:b8:56:e4:a0:8d:53:8c:94:1b:c3:2d:ec:c0:2e:
77:fe:5f:f9:13:75:ee:49:10:9e:37:04:3f:58:a5:c2:69:ea:
5a:05:bc:84:48:ad:cc:6d:52:46:ce:c8:4e:b1:b5:f7:e0:ff:
25:d4:3a:1e:3b:c8:36:b0:28:56:b4:c7:25:a1:af:5b:df:a5:
63:cc:e0:e0:56:32:9a:64:09:e6:fc:8e:2b:93:84:63:ce:36:
7a:f4:02:9b:e9:3f:15:fd:cb:38:5e:da:4f:96:80:9a:c0:ee:
af:75:bc:0b:b0:b9:8b:ad:ac:98:78:0b:0f:34:09:33:62:a5:
86:0c:7f:cf:52:51:c9:7a:d3:c5:db:c2:f7:23:6a:96:4b:c3:
9d:f4:14:b9:3d:67:aa:34:c8:1c:e0:83:24:20:1c:74:14:34:
84:bc:d8:1c:79:b1:82:f3:8c:29:9c:28:45:57:55:d2:8e:f7:
1c:3d:ef:d9:1f:38:a0:8f:f7:83:53:80:fa:a2:91:45:c4:3e:
e7:e9:a7:ec:b2:18:c5:e0:86:9c:4c:83:c3:38:2a:13:1d:9b:
f5:da:e6:b0
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgICCbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUM4
RjQ4NkI2OEU5RUJBNjUxQjE0QkMwMDhGNUE5REQ2ODNFQ0U3NzAeFw0yMDA5Mjkx
MDA5MjZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE2OTgzQjQ4NEU1MkRC
RUU3RUM3RDI4MDgwNkRENzk5RUY0OTU3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCykDIVvsjgaRpjU5eW80WJfGfLNG1zhzuzevJPZWzP3aWUYFHC
vaRjFA7ApmEi3xZfqI3RtBggiQI+6GYY0X5cGdVzFU+4nKRuwF3sSKuZK0ImHbtU
OWf41dboLJRjFK0l3DVDrVXvfoLSPuthGAoTnx50ho1iI+IFiRt9nj9X8gD3jbEV
22l82BiK27A7/IkgfmvChoVXeBtmXvId/mp1oYbNP3OweEP7JBequpVTbRTXPk+y
5/VwF+xq4lzQ0DrN1eBYJetxG51RDOD4mtegA1DBRsMfI41L57vdTtmn2up4ENGI
J/ACenqhIdI1qxh2XqC3BBKAarTMuzKlABHxAgMBAAGjggH5MIIB9TAdBgNVHQ4E
FgQUFpg7SE5S2+5+x9KAgG3Xme9JV7IwHwYDVR0jBBgwFoAUXI9Ia2jp66ZRsUvA
CPWp3Wg+zncwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkVORE9O
SU5GTy9YSTlJYTJqcDY2WlJzVXZBQ1BXcDNXZy16bmMuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1hJOUlhMmpwNjZaUnNVdkFDUFdwM1dnLXpuYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1pFTkRPTklORk8vRnBnN1NFNVMy
LTUteDlLQWdHM1htZTlKVjdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC
AAIwCQMHACQE10Du7jANBgkqhkiG9w0BAQsFAAOCAQEAecRV+kEpa+iSgKdS1fpT
ehRHlyrqabgqj/5JnIZCmul/rGf6TP6SErhW5KCNU4yUG8Mt7MAud/5f+RN17kkQ
njcEP1ilwmnqWgW8hEitzG1SRs7ITrG19+D/JdQ6HjvINrAoVrTHJaGvW9+lY8zg
4FYymmQJ5vyOK5OEY842evQCm+k/Ff3LOF7aT5aAmsDur3W8C7C5i62smHgLDzQJ
M2Klhgx/z1JRyXrTxdvC9yNqlkvDnfQUuT1nqjTIHOCDJCAcdBQ0hLzYHHmxgvOM
KZwoRVdV0o73HD3v2R84oI/3g1OA+qKRRcQ+5+mn7LIYxeCGnEyDwzgqEx2b9drm
sA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:23 2025 by rpki-client