![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/unxGM-X0kJgWst5Hy6CNBMGi7cM.roa
File: unxGM-X0kJgWst5Hy6CNBMGi7cM.roa (raw, json)
Hash identifier: YWRrb79PWeK9S9DiiihRRVJS+jRAZjLYa0Vgc0Seb10=
Subject key identifier: BA:7C:46:33:E5:F4:90:98:16:B2:DE:47:CB:A0:8D:04:C1:A2:ED:C3
Certificate issuer: /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial: 0779
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/unxGM-X0kJgWst5Hy6CNBMGi7cM.roa
Signing time: Tue 29 Sep 2020 10:03:35 +0000
ROA not before: Tue 29 Sep 2020 10:03:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131588
IP address blocks: 103.229.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1913 (0x779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Validity
Not Before: Sep 29 10:03:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BA7C4633E5F4909816B2DE47CBA08D04C1A2EDC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:39:ba:f4:0b:8f:c2:47:9e:04:f5:f8:13:
bd:a2:26:c4:7e:6d:ec:46:01:21:a2:31:6c:ad:af:
9b:55:76:fe:98:90:f8:be:ac:ca:66:3b:52:15:24:
65:78:9b:09:fd:c2:9b:93:47:9a:04:42:eb:f7:1c:
c1:38:78:3d:56:ab:bb:7a:3b:92:0f:39:93:d8:34:
78:aa:5a:ef:ce:27:d0:eb:da:63:59:b2:74:9b:2d:
52:13:2e:e1:ed:44:ad:e5:1d:d5:c6:72:a6:ee:21:
b9:45:e8:45:e5:ba:53:7a:ce:b2:48:09:d1:4b:ce:
63:b6:94:d1:92:0f:36:6f:71:33:5d:e2:22:9c:20:
40:bc:f3:ee:42:20:42:a6:c2:86:f2:1c:53:a1:2e:
cf:b1:a1:9f:e8:22:58:6c:fa:01:0f:4d:46:dd:0b:
17:7c:13:36:b7:aa:4c:4d:e8:b0:74:89:02:36:35:
61:9c:3a:63:32:6a:df:c7:24:88:1e:8b:26:7b:45:
bb:d7:30:cc:4e:35:6b:47:df:4d:f9:2c:58:14:e3:
a4:b5:ab:21:94:4a:4a:ea:59:83:cc:26:90:48:ad:
e3:a3:7a:f4:43:d5:56:d4:e4:41:9d:3a:ed:b4:ed:
a8:bf:9d:2b:81:a2:94:49:ad:87:c8:92:94:30:28:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:46:33:E5:F4:90:98:16:B2:DE:47:CB:A0:8D:04:C1:A2:ED:C3
X509v3 Authority Key Identifier:
keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/unxGM-X0kJgWst5Hy6CNBMGi7cM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.132.0/24
Signature Algorithm: sha256WithRSAEncryption
69:05:68:6b:5b:4b:b9:9b:2a:ee:5c:1b:b6:f7:59:28:76:f8:
69:38:f3:b4:5a:f8:b8:6b:5e:92:d6:aa:a7:2c:f7:0a:a8:af:
ce:dc:b8:c7:9c:b9:bb:32:91:13:f9:04:d5:e2:ef:62:21:cb:
d3:36:a4:a3:1e:32:e2:29:01:4f:3a:3b:5a:bf:36:ea:db:35:
01:f8:23:b8:e6:46:82:00:11:11:e2:00:38:05:fd:74:bf:72:
bb:97:2b:76:e2:fb:3f:fc:c0:27:c8:2e:b9:38:55:45:93:fe:
d1:08:04:4a:14:d1:b6:78:ef:92:a2:44:98:1e:30:a5:03:be:
8c:92:54:a1:c4:e1:74:bc:3f:12:db:75:80:32:17:3e:3c:33:
59:4f:27:14:05:16:17:10:f9:bb:c7:22:a7:be:45:f9:20:d6:
30:8d:a4:0d:5e:d2:0c:60:f2:30:a7:83:59:1c:fc:90:0b:e6:
18:5d:38:85:51:73:90:c1:64:8c:1b:38:ac:50:6f:75:1d:79:
24:6a:93:2e:2b:df:1e:39:b4:a3:43:d2:11:2a:42:82:63:1c:
74:fd:83:d8:d8:22:b7:a8:1c:a5:a4:b0:ba:51:05:e9:57:6e:
30:05:30:6f:78:8a:89:ef:08:00:66:2b:c1:f3:05:ee:00:88:
50:0e:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:52 2025 by rpki-client