![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
File: 3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa (raw, json)
Hash identifier: smz2lUIsYObeFyViSQnsfT0ym6H9R29lC4hUvP8/gow=
Subject key identifier: DF:E9:94:C5:D2:78:A9:C5:54:7B:FA:9A:FD:00:DD:09:3D:C1:79:48
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0981
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
Signing time: Wed 29 Sep 2021 02:52:23 +0000
ROA not before: Wed 29 Sep 2021 02:52:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131611
IP address blocks: 121.50.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Sep 29 02:52:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DFE994C5D278A9C5547BFA9AFD00DD093DC17948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:1f:19:93:e1:fd:3b:23:d5:63:e5:fc:05:
70:8d:e2:3d:77:b0:6f:9c:aa:86:e4:00:1f:7a:34:
12:7c:7c:95:b6:8d:f4:2c:43:45:b2:e9:31:d9:89:
ec:8e:2e:e3:88:34:90:2d:43:28:3f:df:f6:ba:d6:
ce:a8:d3:76:40:da:ba:8f:db:38:c5:65:1b:a5:9d:
ea:b3:e5:19:d1:54:25:eb:46:53:ed:8e:fb:18:6e:
e1:a7:8f:b5:ad:d4:88:d0:08:51:8e:97:a9:f1:95:
4c:dd:69:8e:94:6f:0a:1a:90:5b:e3:d8:dd:25:91:
f5:34:34:82:15:93:ce:f6:1e:44:80:e9:2e:79:05:
c6:0a:25:b4:54:c8:47:cf:75:e5:49:31:6a:0a:db:
35:ff:22:cb:81:e4:e1:8a:1b:92:14:b4:51:ac:0a:
6c:88:fc:87:d3:36:83:7c:47:34:3b:6b:c0:48:40:
31:10:29:11:c6:13:36:a4:05:79:b5:87:6d:b9:17:
fd:1e:5f:93:64:02:be:da:63:94:64:97:7e:91:97:
7a:b3:8f:a1:d2:25:8d:a0:ea:d4:20:0f:4d:20:03:
f4:05:c0:0f:d0:80:46:f0:d0:8d:ae:a8:0a:f1:94:
93:be:49:1b:fa:a7:11:8d:83:ab:52:fd:43:7a:41:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:94:C5:D2:78:A9:C5:54:7B:FA:9A:FD:00:DD:09:3D:C1:79:48
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/3-mUxdJ4qcVUe_qa_QDdCT3BeUg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a0:0f:ae:ef:29:0d:50:91:91:7c:a5:f1:35:0e:0c:4d:29:
fd:ed:1f:3b:16:06:77:c6:6c:dc:2f:5e:23:47:e8:97:23:d2:
b2:f8:cf:3c:08:17:2a:ae:67:3d:b7:1f:24:7a:1e:f7:bd:69:
1f:8a:00:eb:a0:84:69:10:e1:c2:1e:a5:25:c3:7b:8c:37:2b:
a4:49:1d:e2:c1:43:72:8a:0c:f1:84:96:a9:f4:fa:32:de:73:
60:87:47:eb:55:19:dc:a9:f7:09:72:0a:32:5c:bc:ba:73:f8:
9a:f5:8e:c1:53:f4:f0:84:ab:3e:21:5f:02:e2:9a:07:27:0b:
58:86:a5:05:f8:b1:21:04:09:2f:91:f8:f4:6b:7c:f7:29:84:
26:27:1d:c5:13:f6:ad:fe:b8:2f:9a:d8:a1:80:42:66:99:4e:
ec:4a:ad:ef:26:e8:f0:30:d2:21:04:56:a9:bc:79:51:59:19:
02:1c:9e:d8:7d:64:11:c7:cb:34:54:4c:03:55:c4:82:b0:26:
16:35:59:6f:fe:2a:a7:c1:2d:14:fd:48:be:cb:54:12:12:ab:
d4:47:79:f8:11:fb:5b:e6:81:f7:4c:ad:d6:c5:4b:38:70:96:
98:b1:d8:48:2f:56:b8:52:7a:2f:68:64:20:5f:4b:41:6a:38:
8b:9e:50:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:00 2025 by rpki-client