Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ticoL_mbrpIlLjD665Fs_SQc7WY.roa
File: ticoL_mbrpIlLjD665Fs_SQc7WY.roa (raw, json)
Hash identifier: P8U32iN5Sgaw1JnFFXe/dDZGNTP6XgTZpoPBKSFv6o8=
Subject key identifier: B6:27:28:2F:F9:9B:AE:92:25:2E:30:FA:EB:91:6C:FD:24:1C:ED:66
Certificate issuer: /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial: 0B10
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ticoL_mbrpIlLjD665Fs_SQc7WY.roa
Signing time: Sun 07 Feb 2021 11:54:24 +0000
ROA not before: Sun 07 Feb 2021 11:54:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131644
IP address blocks: 103.138.254.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Validity
Not Before: Feb 7 11:54:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B627282FF99BAE92252E30FAEB916CFD241CED66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:74:0f:1a:fb:4f:2f:1c:f7:72:b6:40:b3:
4d:c9:bc:27:f0:44:1d:b4:4e:4e:70:9b:93:45:bd:
6e:89:73:86:62:76:b9:e9:0d:05:28:ad:01:fa:10:
31:2d:59:1b:7c:28:8e:3d:1e:30:84:a1:17:45:0e:
c1:9a:75:93:3f:64:82:97:a3:29:78:da:80:10:90:
be:2e:00:c3:1a:51:12:71:0e:2b:be:33:19:69:8b:
ca:d8:46:19:4e:0a:08:a9:aa:ab:cf:83:02:6b:98:
31:1f:57:b9:a5:59:b3:0b:34:26:58:cb:eb:7f:62:
3e:57:3a:fb:3a:af:ea:d5:a4:a8:98:3e:6b:40:28:
79:d5:94:0e:b2:93:eb:1b:ae:27:9f:aa:cf:83:58:
d4:05:e4:45:2a:2c:b0:ac:70:97:ab:f3:aa:a2:c0:
b7:7b:98:9f:c6:db:22:a4:36:49:e6:6e:5f:aa:52:
2e:c4:ab:ef:28:7f:a5:ca:af:cc:00:7f:54:eb:00:
f1:63:06:9c:ae:56:06:fc:82:4f:ca:15:4a:51:4a:
59:8b:38:d1:c4:d0:50:39:76:9a:ac:95:a6:39:5e:
84:2c:66:b8:d7:5b:8c:63:3b:22:ba:f2:6b:65:d8:
fe:74:e3:b4:44:fd:0e:d1:e4:b0:35:f0:2e:cd:d9:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:28:2F:F9:9B:AE:92:25:2E:30:FA:EB:91:6C:FD:24:1C:ED:66
X509v3 Authority Key Identifier:
keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/ticoL_mbrpIlLjD665Fs_SQc7WY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.254.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6f:a9:25:17:40:e1:69:47:b5:88:82:91:83:15:cc:ca:3c:
c5:68:4c:78:a5:40:bb:6b:be:d1:b7:2c:c1:be:d8:cb:0b:6f:
01:a3:43:e1:fb:03:35:5e:f6:03:2d:5f:56:ea:54:fe:f4:e9:
95:11:89:1f:fa:3a:aa:09:3a:57:b3:43:c3:25:00:95:d5:c6:
73:c7:3f:d8:77:32:e1:fa:84:10:85:f5:a4:80:7d:c2:84:a4:
be:3c:7f:68:d2:60:97:fa:0f:14:c6:16:67:75:18:c6:5b:7a:
51:c2:52:89:cd:cb:48:4e:2c:ce:59:a2:32:65:f6:65:11:48:
52:3e:3a:0e:4e:17:6a:0e:fb:99:da:e2:b1:a1:15:83:ed:a3:
17:7e:73:31:83:7e:0f:0f:eb:41:1c:db:bf:15:7b:c4:31:18:
32:02:2a:c4:ab:38:7e:7b:1f:54:cb:2b:83:33:ef:1a:3e:66:
ef:03:04:ce:40:e7:cd:cb:6e:85:3c:3e:c9:d3:53:a7:30:1b:
da:23:e1:4f:ba:12:98:27:c6:e3:a0:3c:e4:8b:07:f6:98:53:
68:44:81:b7:eb:f2:60:2c:e7:b6:35:96:4d:5e:d3:b2:dd:82:
6b:b9:b0:f1:19:25:a9:14:91:c6:f4:9e:7e:9a:ef:90:c3:78:
b5:2e:8f:b8
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUM4
RjQ4NkI2OEU5RUJBNjUxQjE0QkMwMDhGNUE5REQ2ODNFQ0U3NzAeFw0yMTAyMDcx
MTU0MjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEI2MjcyODJGRjk5QkFF
OTIyNTJFMzBGQUVCOTE2Q0ZEMjQxQ0VENjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnInQPGvtPLxz3crZAs03JvCfwRB20Tk5wm5NFvW6Jc4Zidrnp
DQUorQH6EDEtWRt8KI49HjCEoRdFDsGadZM/ZIKXoyl42oAQkL4uAMMaURJxDiu+
Mxlpi8rYRhlOCgipqqvPgwJrmDEfV7mlWbMLNCZYy+t/Yj5XOvs6r+rVpKiYPmtA
KHnVlA6yk+sbriefqs+DWNQF5EUqLLCscJer86qiwLd7mJ/G2yKkNknmbl+qUi7E
q+8of6XKr8wAf1TrAPFjBpyuVgb8gk/KFUpRSlmLONHE0FA5dpqslaY5XoQsZrjX
W4xjOyK68mtl2P5047RE/Q7R5LA18C7N2XZDAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUticoL/mbrpIlLjD665Fs/SQc7WYwHwYDVR0jBBgwFoAUXI9Ia2jp66ZRsUvA
CPWp3Wg+zncwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkVORE9O
SU5GTy9YSTlJYTJqcDY2WlJzVXZBQ1BXcDNXZy16bmMuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1hJOUlhMmpwNjZaUnNVdkFDUFdwM1dnLXpuYy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1pFTkRPTklORk8vdGljb0xfbWJy
cElsTGpENjY1RnNfU1FjN1dZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGeK/jANBgkqhkiG9w0BAQsFAAOCAQEAAW+pJRdA4WlHtYiCkYMVzMo8
xWhMeKVAu2u+0bcswb7YywtvAaND4fsDNV72Ay1fVupU/vTplRGJH/o6qgk6V7ND
wyUAldXGc8c/2Hcy4fqEEIX1pIB9woSkvjx/aNJgl/oPFMYWZ3UYxlt6UcJSic3L
SE4szlmiMmX2ZRFIUj46Dk4Xag77mdrisaEVg+2jF35zMYN+Dw/rQRzbvxV7xDEY
MgIqxKs4fnsfVMsrgzPvGj5m7wMEzkDnzctuhTw+ydNTpzAb2iPhT7oSmCfG46A8
5IsH9phTaESBt+vyYCzntjWWTV7Tst2Ca7mw8RklqRSRxvSefprvkMN4tS6PuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:07 2024 by rpki-client on console-fra.rpki-client.org