Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/uVSyipuDi75fIf3LCHsd43DQuiM.roa
File:                     uVSyipuDi75fIf3LCHsd43DQuiM.roa (raw, json)
Hash identifier:          rhEOhB2oNwKxiZ8cb9rCAdSZImBd8QbReEEGf1xeuCw=
Subject key identifier:   B9:54:B2:8A:9B:83:8B:BE:5F:21:FD:CB:08:7B:1D:E3:70:D0:BA:23
Certificate issuer:       /CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
Certificate serial:       09B5
Authority key identifier: 5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/uVSyipuDi75fIf3LCHsd43DQuiM.roa
Signing time:             Tue 29 Sep 2020 10:09:27 +0000
ROA not before:           Tue 29 Sep 2020 10:09:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131644
IP address blocks:        2404:d740:1::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2485 (0x9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8F486B68E9EBA651B14BC008F5A9DD683ECE77
        Validity
            Not Before: Sep 29 10:09:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B954B28A9B838BBE5F21FDCB087B1DE370D0BA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:9e:2b:5e:d6:8c:88:76:29:44:0c:34:95:
                    0c:46:fe:c3:9a:6e:83:23:88:78:28:53:0c:60:48:
                    d9:bc:01:9f:8a:29:8a:b9:d9:69:39:63:23:3c:46:
                    fc:af:e5:4d:6b:81:7e:17:6c:9c:46:48:28:85:21:
                    83:11:e0:ca:6d:24:e1:46:c9:6f:86:9f:fc:04:8d:
                    20:6e:96:65:4f:33:59:93:1e:4a:df:8b:36:51:26:
                    15:b5:1b:00:b4:1a:9d:f2:9a:88:ff:04:a0:ee:53:
                    95:e5:da:3f:88:d2:a4:fd:89:f7:9f:bf:a1:c3:7a:
                    1b:b8:d4:a4:7e:d9:f4:4a:b0:6e:4a:15:f8:69:f9:
                    52:b1:31:c0:42:68:1c:73:7f:f3:26:91:f4:66:a1:
                    dc:c6:b7:98:2d:bc:c7:08:42:42:5b:86:ca:62:65:
                    6d:ca:c3:54:e2:b2:35:41:e5:1e:87:2c:5e:26:50:
                    ad:f9:10:1c:af:4d:18:f0:b0:2b:3a:dc:74:7b:fa:
                    b8:22:4f:0f:72:b2:d5:22:f0:cd:8a:a6:de:e0:0e:
                    a1:c0:95:f5:8e:1c:7c:92:85:42:05:d8:0b:96:78:
                    58:c5:b2:b3:4b:b4:9c:6d:88:0b:bf:5a:cd:21:c9:
                    df:75:a0:83:c1:63:cd:42:3c:71:34:19:13:7c:48:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:B2:8A:9B:83:8B:BE:5F:21:FD:CB:08:7B:1D:E3:70:D0:BA:23
            X509v3 Authority Key Identifier:
                keyid:5C:8F:48:6B:68:E9:EB:A6:51:B1:4B:C0:08:F5:A9:DD:68:3E:CE:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/XI9Ia2jp66ZRsUvACPWp3Wg-znc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XI9Ia2jp66ZRsUvACPWp3Wg-znc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZENDONINFO/uVSyipuDi75fIf3LCHsd43DQuiM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:d740:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:2d:ed:12:41:e0:ec:96:07:30:42:10:47:6b:ee:3b:bf:d2:
         c5:2e:50:ed:54:cb:fd:7b:08:8c:88:8c:43:10:00:18:4d:dc:
         d1:ac:47:89:a2:6f:89:b1:fd:fd:52:1d:ec:f9:a9:a8:98:7e:
         9e:c1:60:03:23:d7:89:90:d1:e0:7b:37:ad:19:1e:7c:30:43:
         d4:35:3f:8f:72:db:0a:2f:e4:b3:f9:8f:9e:cf:47:88:99:50:
         f1:86:c5:80:fe:d9:33:f7:6d:cc:ba:71:d4:04:39:d1:65:3c:
         ae:cb:30:d9:52:e8:eb:5d:aa:c7:59:98:c6:f7:67:a5:0d:b2:
         80:ab:b0:81:40:06:09:16:3f:36:ff:a5:9f:79:11:5f:de:a5:
         d8:0a:03:65:f3:a6:f1:a3:56:38:dd:4c:51:b2:fe:31:d3:9e:
         bc:1f:d6:75:cf:fd:0d:9e:ad:79:ab:08:66:b4:c3:bf:d0:d9:
         e5:cd:69:06:c4:be:3e:12:5b:91:bb:8b:a5:d3:e0:6e:09:21:
         8f:da:21:96:4e:9b:6e:28:02:70:db:24:0d:68:fc:77:d2:1b:
         55:86:ba:b7:6e:d6:65:68:d2:5c:98:b5:91:d2:30:e3:00:de:
         6b:44:ce:57:16:08:6e:a6:7c:f3:b5:3a:8b:5b:ab:cd:df:ba:
         00:3f:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:52 2024 by rpki-client on console-ams.rpki-client.org