![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6xXNvpB5hq43sgQXsXWQqsczaok.roa
File: 6xXNvpB5hq43sgQXsXWQqsczaok.roa (raw, json)
Hash identifier: v3ykUz2tste/EnO3rUrie4S7C5f0QpMRtVtjr/7y4lo=
Subject key identifier: EB:15:CD:BE:90:79:86:AE:37:B2:04:17:B1:75:90:AA:C7:33:6A:89
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0854
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6xXNvpB5hq43sgQXsXWQqsczaok.roa
Signing time: Tue 29 Sep 2020 10:02:20 +0000
ROA not before: Tue 29 Sep 2020 10:02:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 150.117.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 29 10:02:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EB15CDBE907986AE37B20417B17590AAC7336A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:99:b0:6e:80:01:e6:01:63:0b:25:9a:a4:
52:a2:d3:82:2b:7a:1c:a0:48:0e:53:1c:fb:5f:d7:
10:84:6f:c2:ca:87:3a:f4:f1:8c:88:98:67:37:5a:
b7:56:58:5d:bb:b2:53:29:30:06:2b:ca:3f:63:34:
37:02:a6:2d:1b:de:af:f9:87:3e:42:06:82:12:71:
c9:4d:00:8a:04:8d:12:17:33:f6:bd:56:ec:b3:29:
87:21:e6:51:43:6b:17:bc:5c:eb:c9:b1:e0:82:1c:
bb:53:63:5d:85:74:9a:e2:eb:eb:98:7e:4d:6a:4a:
8b:fd:7d:b1:2c:d6:f8:b6:0c:70:f7:8e:06:b1:62:
77:cc:0c:57:4a:af:57:6a:12:de:41:13:40:1c:7f:
8f:f3:12:a5:77:49:2b:9b:2b:91:52:bc:f2:e4:a2:
bb:c8:69:f2:79:9a:8f:d7:9d:88:30:8a:95:ef:c2:
7d:cf:b8:a2:78:7e:de:83:52:3f:fa:9f:c7:96:2c:
09:1f:94:40:4f:ac:88:dc:b7:e2:bd:f0:bb:65:d2:
13:4e:4f:e3:c3:3e:1f:ba:93:09:8a:66:48:1c:57:
7e:b1:f3:fe:8c:d0:c0:27:d2:b5:9d:92:a2:5f:06:
88:62:fa:e5:96:48:15:d6:ea:c3:98:72:cd:1a:81:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:15:CD:BE:90:79:86:AE:37:B2:04:17:B1:75:90:AA:C7:33:6A:89
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6xXNvpB5hq43sgQXsXWQqsczaok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:97:e8:54:a0:99:38:c4:36:b2:26:ae:03:8e:75:c1:21:6a:
d8:8b:25:b3:3d:ba:05:36:3c:4a:48:17:b5:0d:86:09:53:48:
83:e8:88:6b:24:c0:68:67:8f:d0:51:5b:2a:2d:83:7f:af:40:
c9:61:82:c9:bd:d0:40:d3:58:bd:5c:36:4a:d2:39:48:b1:43:
4b:6d:77:00:f5:79:6a:69:f4:5b:90:7d:9e:1d:13:bf:81:62:
86:60:18:62:f7:9e:1b:45:aa:fd:99:cc:ca:d0:73:5b:67:e3:
0b:85:ec:77:3f:ed:ba:47:4e:bb:51:e7:fc:91:79:b4:e5:c2:
30:2c:50:08:59:37:aa:6a:18:70:0e:0b:0b:6f:d0:d6:51:e8:
8c:6e:5b:dd:7a:19:7f:56:f8:d7:a4:cb:d5:0e:e1:94:3b:6c:
3d:34:1d:64:af:99:44:cf:af:d7:36:f2:5d:61:b3:47:33:e9:
23:ab:02:b1:60:a1:48:94:86:ab:db:b3:7f:df:c6:fb:7b:c0:
02:37:4f:71:13:5b:78:66:68:7a:32:05:22:2c:3d:02:a2:22:
d3:38:db:6c:3e:e3:68:b5:f6:62:f9:8f:0e:34:36:d6:af:09:
72:e1:29:d4:ad:3a:1d:75:4c:86:b6:09:22:24:56:86:57:e3:
14:19:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:34 2025 by rpki-client