Offset 03h
is the entrypoint, not the address of the entrypoint. That means that the BIOS actually jumps to offset 03h
and begins executing code there.
Note, your ROM looks something like:
aa 55 xx e9 cf 06 ...
You shouldn't notate those bytes as 0x_e9_cf_06
- that's interpreting the multiple bytes as an integer, (which you don't mean to do), and as this is Intel, it's in the wrong order (Intel is little endian).
You could drop this ROM into a decompiler to understand more.
As you found out, E9 CF 06
is a JMP 0x06CF
which means (jump 0x6CF bytes from the next instruction). Always remember to consult the Intel Instruction Set Reference (Vol. 2).