![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/pUpV9CqPd9o8iTSjOqOoeQi0tf4.roa
File: pUpV9CqPd9o8iTSjOqOoeQi0tf4.roa (raw, json)
Hash identifier: dHbla7kh/znPBbh2v8l9V+X3EOXGeKgdXS+W7rYqR64=
Subject key identifier: A5:4A:55:F4:2A:8F:77:DA:3C:89:34:A3:3A:A3:A8:79:08:B4:B5:FE
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 08F4
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/pUpV9CqPd9o8iTSjOqOoeQi0tf4.roa
Signing time: Sun 07 Feb 2021 12:40:39 +0000
ROA not before: Sun 07 Feb 2021 12:40:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 61.65.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Feb 7 12:40:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A54A55F42A8F77DA3C8934A33AA3A87908B4B5FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:81:8e:fa:c0:f9:05:72:fe:0c:7c:61:f0:
1d:6d:1c:07:83:dc:91:f6:cc:f5:cf:6b:f8:59:58:
c1:e5:26:96:ac:f3:2e:ea:18:19:2d:9a:74:56:4a:
23:cd:38:d7:c8:b4:6a:ca:a0:5a:ac:1a:10:08:3f:
34:ae:64:16:3e:ad:a7:b6:e0:ac:b0:f8:22:a9:e0:
35:7a:e7:97:c2:8b:99:3a:27:8a:07:04:52:2c:03:
fd:bb:5f:dc:99:f0:d2:0a:80:8e:55:3c:75:84:fc:
0d:8f:0e:cd:9a:af:5e:ee:db:9e:b4:6d:fb:7c:43:
02:f2:d7:3c:9a:f3:ba:aa:16:79:09:b3:ab:11:84:
cd:3e:52:45:c3:04:42:04:53:dd:b2:e8:8d:c7:f4:
6b:ab:02:f3:b9:8a:3f:dc:69:22:5c:53:21:28:68:
ce:e9:2f:34:85:b9:33:d4:bd:fe:62:c6:b9:5e:b7:
28:e7:c9:2a:9b:7e:7e:35:30:97:8f:85:76:a3:ee:
93:96:36:fc:da:1b:66:81:70:ad:19:f5:4d:a6:66:
91:8f:85:bc:b2:07:15:ef:e6:f3:a6:5b:ea:d8:63:
9e:48:57:46:1b:89:0b:78:e1:33:74:be:77:c7:cb:
8d:4b:25:7f:73:6e:90:61:63:af:53:60:af:2a:11:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:55:F4:2A:8F:77:DA:3C:89:34:A3:3A:A3:A8:79:08:B4:B5:FE
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/pUpV9CqPd9o8iTSjOqOoeQi0tf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.240.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:a8:a8:29:ce:68:c3:2f:0e:0e:4c:7f:e7:4e:fb:cc:21:a6:
bb:23:a6:55:33:13:b1:73:05:2d:cc:36:b0:34:e4:c5:bc:38:
f8:09:c5:9a:0a:70:c2:1b:71:16:6a:33:47:e8:37:79:f0:eb:
ba:40:a6:db:74:ce:b4:de:57:38:7f:81:f5:b0:18:02:a9:93:
39:5a:4e:37:6c:cb:ec:0f:f2:06:cf:ec:c2:70:d1:cc:57:37:
cf:d1:5b:06:9b:ce:fa:8e:f8:99:fa:24:83:25:dc:51:a9:15:
91:ff:af:f1:7a:a5:51:3e:9d:af:a3:48:44:a7:3a:c3:e4:2e:
4c:b8:e9:0f:14:a4:03:03:f6:10:5b:c8:c4:b4:4b:1e:12:89:
80:64:c7:da:9d:57:e5:48:a1:1f:2d:96:35:44:e6:e4:8c:8f:
1f:98:83:89:19:b1:09:a3:28:e7:8b:38:e9:1a:e1:b4:42:d7:
0a:9d:b4:8c:0d:d3:b7:ad:c9:d0:b8:46:ff:0a:90:9a:f8:d5:
80:d9:2d:78:1f:b6:6e:24:2f:61:d5:34:70:88:c2:15:c2:17:
5a:35:33:00:92:83:99:23:f8:51:9c:79:fb:cb:1b:d2:37:87:
8c:bd:b7:84:8d:87:38:3c:5b:5a:c6:39:85:e4:0e:98:47:67:
8c:65:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:50 2025 by rpki-client