Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/_KfEfhyxQ5mfeQgY38YO9W9thtU.roa
File: _KfEfhyxQ5mfeQgY38YO9W9thtU.roa (raw, json)
Hash identifier: 4cqRVAO0yRwV9Dhd4Fw+ZExQYwvy3vkJqAX0ASG2G5o=
Subject key identifier: FC:A7:C4:7E:1C:B1:43:99:9F:79:08:18:DF:C6:0E:F5:6F:6D:86:D5
Certificate issuer: /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial: 0C22
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/_KfEfhyxQ5mfeQgY38YO9W9thtU.roa
Signing time: Mon 26 Aug 2024 05:20:08 +0000
ROA not before: Mon 26 Aug 2024 05:20:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 3462
IP address blocks: 103.24.100.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Validity
Not Before: Aug 26 05:20:08 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FCA7C47E1CB143999F790818DFC60EF56F6D86D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:a2:1b:bb:d9:6d:92:b3:a6:dd:80:66:01:
7a:8c:18:ea:7d:0a:b7:31:21:61:2e:cc:9b:6d:1a:
3f:9c:91:bc:b2:74:c9:ef:41:05:36:12:5e:32:98:
58:4d:f3:a6:3c:7e:3d:6f:bf:58:f2:67:97:62:01:
72:56:7b:c0:65:47:6a:03:5e:f5:d1:74:96:e1:07:
eb:f8:a2:e2:b6:31:f1:2f:c0:61:cb:e9:df:35:ca:
9a:bc:3a:53:73:7f:7e:bd:9b:3a:4a:eb:79:dc:a1:
1a:a2:29:9d:83:e7:37:c7:de:f7:c9:77:24:ae:d6:
2c:1b:ab:19:4a:f4:3a:a7:cd:c9:8c:b4:76:13:27:
c2:34:8c:72:74:f2:f7:ae:2c:4b:37:f6:2b:13:54:
26:65:00:a7:7b:2e:6a:84:5c:25:33:26:af:88:49:
e4:94:9d:24:67:62:9b:0f:8b:3f:e9:70:69:9f:87:
38:67:a0:c0:ed:15:9e:58:b1:3f:a0:c6:7e:aa:2f:
24:1a:97:f5:39:73:68:77:2b:57:c7:14:87:ee:98:
b4:bc:68:bb:bd:5b:33:c2:3a:07:be:95:7e:bd:18:
51:bc:86:05:9f:8c:ca:06:ed:79:8b:67:49:8c:51:
53:1f:d2:3b:08:3f:12:8c:5d:bd:bd:49:07:53:fd:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A7:C4:7E:1C:B1:43:99:9F:79:08:18:DF:C6:0E:F5:6F:6D:86:D5
X509v3 Authority Key Identifier:
keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/_KfEfhyxQ5mfeQgY38YO9W9thtU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.100.0/22
Signature Algorithm: sha256WithRSAEncryption
56:8c:e4:ab:21:c0:5d:22:f3:46:d5:26:54:6a:7b:34:87:f2:
5f:6c:cd:f3:bf:84:5d:9d:9e:6c:0b:d9:2f:99:41:bb:6f:01:
d5:f3:d7:25:06:cf:a1:b3:01:f2:f4:fe:65:af:58:2c:a8:d7:
97:3a:bd:9f:27:52:c7:eb:a1:40:3e:b0:56:a4:a2:8d:0a:aa:
8e:5c:7d:cb:a6:ce:52:f8:a1:b5:0d:82:12:f0:fc:dd:6f:50:
06:b4:eb:5e:33:16:78:8b:ed:37:c7:1f:8a:e4:51:a9:95:89:
35:9c:05:f9:15:81:fc:64:e6:43:60:aa:da:83:62:61:4e:03:
93:17:21:b8:b9:13:7f:1b:9f:77:bb:4a:c3:2d:74:43:f3:92:
af:15:b9:fa:2f:ed:79:99:28:85:48:d9:88:ff:06:a1:bb:42:
9c:10:45:ad:16:e3:b5:d4:de:88:e1:be:e3:9f:a9:9b:ea:26:
07:f5:75:a5:bb:f6:92:47:bd:bd:23:9f:de:ac:21:1c:f7:eb:
d3:1c:28:72:fb:02:2e:21:38:b6:c3:8d:eb:b1:7c:04:3b:38:
22:2c:fa:ce:89:59:07:b9:01:e7:80:b1:e1:0c:6b:6c:4d:3d:
15:95:04:36:6f:74:a8:57:5b:d9:0f:91:bf:69:7b:d3:14:85:
9a:a6:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:13 2025 by rpki-client