Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ebY4H03QAed5pwLHneBzjirwZd4.roa
File: ebY4H03QAed5pwLHneBzjirwZd4.roa (raw, json)
Hash identifier: 6qslM8M9/qRtuxXL2zq7hmsad/US16MSGBZjodUwwpo=
Subject key identifier: 79:B6:38:1F:4D:D0:01:E7:79:A7:02:C7:9D:E0:73:8E:2A:F0:65:DE
Certificate issuer: /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial: 09BA
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ebY4H03QAed5pwLHneBzjirwZd4.roa
Signing time: Tue 29 Sep 2020 10:09:28 +0000
ROA not before: Tue 29 Sep 2020 10:09:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131644
IP address blocks: 103.138.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2490 (0x9ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Validity
Not Before: Sep 29 10:09:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79B6381F4DD001E779A702C79DE0738E2AF065DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:4f:31:87:6b:9e:e3:73:a1:15:14:4d:d1:
50:8d:f0:54:af:bd:ea:7e:8a:7c:c4:db:06:ed:0d:
ff:25:94:17:18:4b:f8:7f:cb:de:3c:10:51:90:dd:
55:53:9e:de:aa:05:34:75:f2:b4:a7:f1:45:ea:3d:
d7:85:76:d1:55:34:25:10:53:9d:c3:02:89:18:d3:
d5:28:3d:88:84:48:c6:6a:1f:b3:c1:6c:37:07:3d:
00:bc:d4:48:ea:23:0c:0b:f4:f9:98:e6:a1:ac:d9:
d6:c1:90:ab:07:27:f6:af:45:7a:97:12:68:cb:f9:
53:9f:de:f2:a7:f7:7d:c7:8d:b9:aa:af:44:5a:dd:
25:6a:24:e7:e8:11:22:1e:81:6c:a8:f6:07:84:73:
ff:48:d0:26:b0:82:9c:2f:3e:fc:bb:b4:19:ef:9d:
9f:28:71:6b:f8:e9:30:fa:a8:76:46:94:4a:87:d1:
9e:09:56:dd:61:87:45:e8:3d:80:3c:8d:7f:04:c6:
78:80:85:9a:04:02:9e:88:a9:f4:dc:a7:63:9f:fa:
b2:76:b7:91:7d:01:f8:97:5a:9c:c4:7a:33:85:9e:
e4:d7:37:9b:6e:2b:75:7c:f4:11:13:9c:54:c4:29:
fb:c3:5e:b4:04:be:cb:39:cd:18:77:05:87:06:ab:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:38:1F:4D:D0:01:E7:79:A7:02:C7:9D:E0:73:8E:2A:F0:65:DE
X509v3 Authority Key Identifier:
keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ebY4H03QAed5pwLHneBzjirwZd4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.254.0/24
Signature Algorithm: sha256WithRSAEncryption
05:77:35:5d:fc:d5:a8:6a:38:7e:ac:06:3a:78:86:94:38:08:
8b:a2:89:23:07:88:0c:f4:a7:8f:76:3b:de:99:bc:e2:a0:18:
59:9d:03:37:f1:4b:e8:9e:1e:fc:5d:08:74:16:b1:7e:af:7c:
ed:6e:53:b0:4d:45:fb:87:c3:7f:7a:1b:85:38:4f:6f:ce:3b:
27:4e:eb:07:ff:f5:66:ef:6e:4b:06:90:11:2a:6f:25:e4:10:
1a:cb:38:e0:15:d4:38:ea:e0:41:8b:0b:01:ab:11:6c:33:63:
4d:0a:b6:92:f2:a2:47:9f:52:c1:ac:6d:c7:74:71:9f:20:a1:
a4:98:dd:d4:88:d7:b3:61:a5:88:3a:36:b3:c2:58:93:88:5e:
22:59:f1:ea:e5:01:d0:09:2d:d9:32:a1:6e:67:61:89:1f:ad:
65:bf:c6:39:cc:06:9d:88:3b:46:ce:4b:1a:b3:e6:55:da:45:
00:7b:a0:a8:5f:69:b9:ec:0b:c6:86:69:9e:66:d4:26:6f:ba:
95:ac:77:89:b9:d7:0a:d3:5f:df:82:a2:2b:f7:5c:c1:b4:13:
21:9e:4c:0d:95:90:03:d5:6d:02:fd:3e:f8:50:d9:3e:47:4f:
5c:c1:ee:39:3a:bb:f8:a6:1d:63:ea:2a:e7:98:f6:ed:c4:33:
bb:a9:8a:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org