Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/pxPq_m-45DSfytO9pA8FzuORn6k.roa
File: pxPq_m-45DSfytO9pA8FzuORn6k.roa (raw, json)
Hash identifier: ybRJKG65Q8B5z/Pjnyd/ecb0hDJekYSUQhkAPtCA41A=
Subject key identifier: A7:13:EA:FE:6F:B8:E4:34:9F:CA:D3:BD:A4:0F:05:CE:E3:91:9F:A9
Certificate issuer: /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial: 0CDD
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/pxPq_m-45DSfytO9pA8FzuORn6k.roa
Signing time: Thu 05 Dec 2024 05:56:19 +0000
ROA not before: Thu 05 Dec 2024 05:56:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131609
IP address blocks: 103.99.88.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3293 (0xcdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Validity
Not Before: Dec 5 05:56:19 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A713EAFE6FB8E4349FCAD3BDA40F05CEE3919FA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:9c:a6:c6:b1:90:d5:36:b3:fc:ed:c9:1f:
d2:5b:5e:86:99:af:4e:83:6e:6a:b2:1b:f3:d0:20:
88:e1:5b:d6:7d:b2:dc:87:01:0f:9f:43:5c:57:e2:
13:20:cf:47:9b:94:94:c5:67:81:61:e1:18:15:ad:
67:c0:81:b3:e1:40:6d:8d:a1:61:5a:0c:28:2f:11:
b7:c9:62:7a:94:83:ea:83:62:df:08:3f:1e:bd:71:
2e:73:2f:12:07:fb:75:40:c4:25:58:b9:94:4a:03:
7e:e0:f8:ed:a2:e2:ad:a8:c9:61:db:8c:9e:a7:a4:
65:9b:9b:dd:ad:c6:6e:df:13:3d:62:24:a0:dc:3b:
29:8b:d2:79:23:62:c3:2a:b3:5a:50:19:0d:9f:de:
8f:e0:09:2e:15:b6:24:0c:1a:00:55:c6:83:68:74:
0e:4c:78:91:b0:42:83:32:34:ee:d1:48:5e:a8:28:
ba:8d:1e:5a:42:48:f1:e8:b6:b3:fd:bc:07:44:47:
f1:37:8c:af:c5:0c:b6:79:31:b5:b1:5f:b0:3d:33:
50:4b:ce:51:8b:59:8e:40:80:9f:94:d7:85:13:5b:
4c:fa:fc:5d:31:06:4d:62:10:bb:df:63:9e:35:12:
33:bb:5e:20:df:a3:cf:e0:ef:b4:54:72:bf:56:60:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:13:EA:FE:6F:B8:E4:34:9F:CA:D3:BD:A4:0F:05:CE:E3:91:9F:A9
X509v3 Authority Key Identifier:
keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/pxPq_m-45DSfytO9pA8FzuORn6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.88.0/22
Signature Algorithm: sha256WithRSAEncryption
56:91:2b:cc:dd:fb:56:09:0f:39:b0:54:cc:8c:84:35:31:36:
0f:9d:be:95:4f:28:3f:cb:77:25:0f:13:42:8c:e0:29:24:28:
12:7a:b7:d6:09:a2:17:b8:a6:8b:ae:b3:6b:f1:e0:69:96:c0:
ee:73:af:c8:b6:ad:a9:ce:22:2e:7c:0e:58:88:42:6d:5a:70:
e6:88:3d:83:e6:3f:76:89:26:6c:9d:61:99:e0:3c:c6:47:04:
6a:b2:73:c2:57:f1:ab:81:2d:b4:5c:b7:d1:e3:cc:36:38:b6:
1b:e8:b1:15:f8:aa:b9:4f:be:f2:4d:f4:64:82:14:a8:9d:54:
7c:27:90:8a:62:03:62:55:17:b2:2c:74:0e:f6:dc:c7:28:b8:
1d:ea:c9:58:06:ac:ad:66:73:81:32:97:a8:77:f9:95:a8:86:
a9:1f:46:15:7f:33:7c:10:fc:5a:35:7c:b3:41:10:24:57:03:
73:9d:8f:9f:60:26:01:23:2e:47:6d:26:b1:58:c2:57:1d:6d:
4e:a5:9c:2c:ca:5e:c2:b6:c2:f0:61:82:3f:ea:33:b7:1e:8f:
f5:27:d9:bf:ad:90:e6:cd:bb:77:7b:bf:f0:03:2b:1c:1a:19:
d5:18:b4:11:a6:38:1b:37:1f:8d:59:38:38:02:28:e4:4f:f9:
66:90:ab:97
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 5 09:28:27 2024 by rpki-client on console.sobornost.net