Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/_7S2teTP4Jvw_X5xo6CiyhfKwEo.roa
File: _7S2teTP4Jvw_X5xo6CiyhfKwEo.roa (raw, json)
Hash identifier: BiwFdVFiE43QkjrzaKTVqb7ILW6vDm5uAJQgxPL7e4A=
Subject key identifier: FF:B4:B6:B5:E4:CF:E0:9B:F0:FD:7E:71:A3:A0:A2:CA:17:CA:C0:4A
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0C7D
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/_7S2teTP4Jvw_X5xo6CiyhfKwEo.roa
Signing time: Wed 04 Dec 2024 05:56:06 +0000
ROA not before: Wed 04 Dec 2024 05:56:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 4 05:56:06 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FFB4B6B5E4CFE09BF0FD7E71A3A0A2CA17CAC04A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:c0:49:eb:b0:c9:36:f9:8d:09:78:ca:63:
c2:a1:9e:1c:39:4f:d4:63:90:fb:3b:2c:69:49:7d:
53:4f:2b:2d:e3:18:30:fd:c3:b8:1d:89:b6:cb:9d:
01:6b:ca:3e:a1:ae:be:2b:4c:b6:ce:24:e5:6e:2f:
e2:fb:f4:bf:1c:9c:53:65:6c:f8:bf:15:e4:66:34:
d0:af:a1:1e:81:e0:42:b8:55:8d:2c:22:e1:d3:0c:
f6:73:30:bc:61:53:1d:17:06:67:b3:3a:92:2b:87:
af:4b:e3:83:c2:68:e9:5b:fb:94:c2:bd:7d:2a:c5:
77:31:a0:a6:3a:0a:95:a4:4b:ee:70:b8:42:c4:5e:
9a:19:e6:a1:0f:0d:7b:a0:e6:93:fe:35:8c:81:e2:
a6:a8:90:a2:b1:c9:e7:96:3b:a7:06:51:f9:cf:ef:
3a:6f:8c:40:ee:50:b4:06:a3:fe:4d:39:fb:0c:25:
7d:d3:96:48:37:15:8f:13:8f:19:c0:b8:65:82:9c:
c9:b4:6c:7f:2c:12:ce:3d:c5:58:b6:c1:f8:e6:b7:
98:94:25:db:20:b5:37:79:a3:1e:0b:07:d1:7a:3a:
be:de:7e:ec:31:ed:a9:c1:c3:12:57:1c:f6:b7:ea:
78:2c:1c:c8:cf:08:d2:4d:af:3e:ff:ca:19:31:7c:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:B6:B5:E4:CF:E0:9B:F0:FD:7E:71:A3:A0:A2:CA:17:CA:C0:4A
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/_7S2teTP4Jvw_X5xo6CiyhfKwEo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:70:50:d9:7f:65:b5:b8:a9:1d:cf:d3:09:c0:62:ad:ca:6c:
00:1b:48:b1:33:e1:e1:65:cd:0e:4f:c6:53:25:5e:9b:35:31:
8d:36:99:7f:1d:64:e3:16:1e:d5:70:9b:ac:de:75:62:96:23:
9f:65:19:62:6c:67:88:3f:1f:be:3a:f3:45:0e:db:2f:d5:2b:
d2:3f:84:16:f3:f5:bd:0b:42:2c:f8:1f:8f:87:3f:9b:1b:dd:
9b:bf:7e:a3:76:11:b9:50:1c:dd:e0:31:c5:cc:e2:6f:72:5f:
27:38:db:d3:ae:c0:f3:64:4a:37:5a:11:48:bb:09:17:7e:f2:
bb:92:24:a6:4f:e1:e2:fd:2b:98:46:ad:e2:33:20:54:f1:6c:
1c:90:1f:b0:cf:f5:fb:62:3c:16:ff:84:5b:c1:bb:04:30:64:
2c:f4:1a:77:ca:e8:85:4c:c6:33:c7:50:e0:2e:5c:51:28:37:
7b:74:d4:31:3e:a1:36:57:76:78:43:67:00:32:04:58:d3:52:
fa:63:b0:91:9d:8f:76:33:90:44:00:cc:3d:de:a4:72:59:1b:
f9:6e:0a:9d:05:7f:2e:38:1e:ae:db:10:4c:c0:2f:cf:91:6a:
33:b8:14:a4:75:0b:7f:ce:9e:46:3a:aa:fe:b7:3d:5a:06:76:
82:0d:ea:af
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 4 09:30:23 2024 by rpki-client on console.sobornost.net