![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yBB8MidVEYnR1V7Du9HApta8Yjo.roa
File: yBB8MidVEYnR1V7Du9HApta8Yjo.roa (raw, json)
Hash identifier: al8n0KbtP+B3J+n1zqI3SIin9levK4wNaYxEXoiHP2k=
Subject key identifier: C8:10:7C:32:27:55:11:89:D1:D5:5E:C3:BB:D1:C0:A6:D6:BC:62:3A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yBB8MidVEYnR1V7Du9HApta8Yjo.roa
Signing time: Thu 15 Sep 2022 02:37:25 +0000
ROA not before: Thu 15 Sep 2022 02:37:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C8107C3227551189D1D55EC3BBD1C0A6D6BC623A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:5e:01:49:9a:05:0d:d6:61:60:96:d5:9e:
45:bf:75:46:d3:a5:5a:b0:c8:a3:5e:d7:60:96:ce:
9a:91:01:f2:3e:ac:47:6e:5e:58:6e:fb:60:fc:52:
af:7c:e5:5f:76:c7:3d:df:9c:8e:5b:82:1a:e5:42:
5b:d2:30:51:d0:a8:1d:7f:20:8a:58:03:53:0b:48:
8d:2d:7a:e5:d4:5d:dd:38:4c:8b:27:0d:46:c9:03:
95:2b:7b:13:70:96:55:f6:16:93:c3:90:32:cc:cc:
b3:f3:f4:a0:6c:7d:20:d1:9d:53:cc:eb:7d:ca:40:
ac:99:ca:2e:50:d5:88:28:78:9e:6b:15:d2:34:51:
93:3d:d2:44:f0:70:08:f5:b6:c8:cd:08:44:cf:63:
f4:3b:d5:93:6f:ee:9d:d5:72:e5:1c:fc:d8:5e:7f:
09:d8:c5:e5:b9:1b:44:75:02:43:b1:ef:11:c2:24:
7b:a3:5e:c9:04:6e:9e:35:19:f9:4b:48:e7:a2:e1:
86:3d:ab:90:6a:3c:e5:86:ea:1e:50:68:30:94:90:
e0:27:b6:78:e5:04:84:68:fb:93:86:64:ba:fd:8e:
23:3e:52:3f:09:16:64:a8:cb:35:82:f4:c7:13:e4:
e2:5d:df:ad:89:28:a5:2f:e2:56:e3:30:a9:9b:41:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:7C:32:27:55:11:89:D1:D5:5E:C3:BB:D1:C0:A6:D6:BC:62:3A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yBB8MidVEYnR1V7Du9HApta8Yjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.240.0/20
Signature Algorithm: sha256WithRSAEncryption
73:74:aa:3a:30:5b:b4:7a:51:53:52:f8:bb:c9:4e:08:8a:e8:
6c:a3:fb:0f:b1:6c:e3:ee:d8:a4:dd:71:66:ab:95:da:13:4a:
f4:22:49:7d:d7:27:e7:4e:61:ac:2c:1e:6d:95:1c:c2:c1:8d:
04:16:68:7c:7f:d9:e3:83:38:14:3f:bf:7c:23:e0:b7:49:16:
4b:13:56:69:8a:e5:47:9c:b2:02:21:57:c7:95:f3:d1:9f:01:
fb:1e:01:cf:11:e7:c3:08:2f:08:dd:0c:bc:06:b2:ed:81:87:
e2:96:df:b6:23:21:c8:c1:86:cc:e5:0b:b5:7e:eb:e1:21:24:
38:9a:4a:35:d5:71:5d:64:b6:8b:92:9c:e0:63:a4:8a:dd:14:
44:78:91:b5:46:3f:0c:af:24:62:da:57:8a:e9:f3:fe:b4:a9:
0b:b9:a7:3c:43:44:9d:5d:c4:2b:3a:ee:24:35:07:30:bd:1a:
7b:54:5a:4e:50:5d:a1:39:e8:b2:20:a7:45:9e:f6:97:2e:ba:
02:cf:83:82:9b:8e:ff:75:39:2f:a0:5a:c2:6a:eb:61:66:68:
18:8b:60:c0:76:ff:e1:4c:18:37:a2:b9:0f:8d:82:f6:ea:29:
e1:a9:3d:db:ea:df:e5:24:19:77:8f:82:21:8e:56:79:b3:a7:
98:d3:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:38 2025 by rpki-client