Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/fiR-QwiN8tdCXQWWFVkFpHuShW8.roa
File: fiR-QwiN8tdCXQWWFVkFpHuShW8.roa (raw, json)
Hash identifier: XZY58sND4I2Dtlhp7bbB54Sj7BWy21UKt3MH/xwo/Ew=
Subject key identifier: 7E:24:7E:43:08:8D:F2:D7:42:5D:05:96:15:59:05:A4:7B:92:85:6F
Certificate issuer: /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial: 09C1
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/fiR-QwiN8tdCXQWWFVkFpHuShW8.roa
Signing time: Tue 29 Sep 2020 10:09:31 +0000
ROA not before: Tue 29 Sep 2020 10:09:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131644
IP address blocks: 2404:d740:5::/48 maxlen: 48
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2497 (0x9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Validity
Not Before: Sep 29 10:09:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7E247E43088DF2D7425D0596155905A47B92856F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:9b:38:a5:51:01:eb:d9:25:39:f2:16:f0:
35:89:b3:03:e3:a1:0f:b2:bd:94:5b:19:0a:8e:42:
c0:b5:19:c9:30:dd:ef:d3:fc:cd:7c:7b:ae:3f:7e:
dc:87:3a:a8:25:9b:6a:21:05:c8:90:47:1d:13:52:
fa:2a:bd:7c:f6:4c:4d:b6:06:22:cd:0f:4f:a7:c2:
ee:f4:3e:84:dc:dd:c0:32:d4:03:ba:03:be:ff:74:
9d:04:8a:83:e1:b8:1b:f9:e3:53:84:fe:d9:9b:70:
09:bf:d5:8d:4b:95:f0:07:a2:c7:f3:38:17:9d:73:
ab:84:25:ef:fb:76:c8:7e:4e:c8:63:05:f2:2c:c4:
02:f3:56:fc:08:eb:87:53:a5:62:10:0f:0d:1a:36:
bc:30:e5:17:27:3c:bc:cf:2b:55:10:f1:ff:57:fd:
88:51:23:3b:0a:c9:24:56:9f:d1:37:f8:c1:54:b6:
83:20:b9:11:ad:1d:af:e2:c5:4c:9b:01:44:de:06:
0f:96:9f:28:38:86:e7:c6:34:3b:85:3f:03:27:cb:
fb:74:56:b7:b3:46:52:84:a0:77:b4:01:fd:07:0f:
84:87:56:8b:2a:83:02:44:e7:ca:51:60:de:71:13:
52:81:84:3e:11:7a:0d:47:e1:75:2d:2c:8e:79:e5:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:24:7E:43:08:8D:F2:D7:42:5D:05:96:15:59:05:A4:7B:92:85:6F
X509v3 Authority Key Identifier:
keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/fiR-QwiN8tdCXQWWFVkFpHuShW8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:d740:5::/48
Signature Algorithm: sha256WithRSAEncryption
22:5d:bc:cd:94:8b:d6:98:fe:60:52:b8:da:08:e0:27:d1:8f:
db:64:b1:ba:1a:ad:03:96:bf:87:3f:e5:ea:0e:c8:48:39:15:
54:2f:e1:3d:ed:d7:b1:98:67:50:bb:c7:2b:55:c5:2e:3f:24:
4c:20:8e:50:53:b2:95:29:02:ba:34:9e:64:13:82:2a:af:f8:
18:c3:eb:be:9c:ac:d7:66:f2:3b:8f:c4:57:bd:84:f1:81:eb:
28:83:b5:bf:7e:c8:74:c3:1b:97:0b:a4:94:a6:08:2e:7b:e0:
dd:9c:06:ce:9f:d0:3e:e6:c8:7f:a9:87:c1:ab:52:c6:e2:36:
1e:0f:5a:cb:77:aa:7a:8b:f6:41:bb:26:1c:fc:e6:d3:75:56:
f8:8c:01:ed:a2:e5:83:36:0f:69:e9:c6:1d:76:c3:de:3b:7e:
28:37:d3:6c:0b:f6:93:36:c7:20:59:54:4d:2e:f7:7d:fe:f3:
5c:72:de:7e:85:f8:34:b1:d6:54:e0:97:fb:2e:e8:70:68:07:
97:06:91:91:12:cc:73:5c:1f:c8:f9:57:1b:36:ed:07:ab:17:
ec:bc:02:6a:2a:08:2d:6e:1a:25:8e:25:d3:f1:ea:44:ac:39:
d8:f9:f2:9e:0b:e7:84:e4:35:b8:59:44:72:76:17:cd:79:e4:
ac:2b:dc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org