![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
File: McdI2dtE7kfUZxeuOvObUuVQPDo.roa (raw, json)
Hash identifier: EXWmJTXM3MTMWVqCgYN7U7ty3PxZYLnbACZo4AL60LY=
Subject key identifier: 31:C7:48:D9:DB:44:EE:47:D4:67:17:AE:3A:F3:9B:52:E5:50:3C:3A
Certificate issuer: /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
Certificate serial: 016C
Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
Signing time: Mon 13 Apr 2020 02:54:26 +0000
ROA not before: Mon 13 Apr 2020 02:54:26 +0000
ROA not after: Tue 02 Feb 2021 02:23:50 +0000
asID: 131667
IP address blocks: 103.146.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
Validity
Not Before: Apr 13 02:54:26 2020 GMT
Not After : Feb 2 02:23:50 2021 GMT
Subject: CN=31C748D9DB44EE47D46717AE3AF39B52E5503C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:96:17:97:ae:b4:ec:97:53:9f:8a:ec:67:
aa:f3:a2:2f:e4:f0:99:ba:b0:0e:dc:50:9a:93:05:
ce:1a:ff:4c:4f:6d:1b:ad:8a:72:8f:56:95:c7:c7:
dc:a9:4b:db:c0:b6:24:56:55:8d:6d:64:e2:4b:45:
10:15:ad:dd:96:9b:e9:9d:a5:4d:1d:7f:a6:b1:99:
17:ec:d3:18:fb:45:7f:de:10:61:12:4d:51:78:31:
3c:da:34:26:7d:cb:1f:4c:18:71:6b:02:8e:6b:b5:
ef:b9:6f:ab:20:d8:b7:4a:8b:e9:d8:a7:6b:58:b5:
ed:24:a8:15:41:50:8a:be:e5:e2:c6:65:75:9a:77:
7d:01:7d:50:3a:d5:11:c4:77:88:50:85:80:e6:66:
dc:98:79:90:3f:6e:1e:27:7a:c9:ec:0f:8a:db:b2:
66:20:ea:35:51:c7:3f:97:81:d1:20:71:5c:40:0a:
a6:79:37:df:6f:db:3f:c6:6d:41:4d:17:f3:cc:6a:
a1:ee:9f:ca:e1:ae:85:91:b7:e7:c0:16:05:c8:3b:
57:67:54:b9:63:79:2b:cf:8d:42:db:b8:cf:84:95:
e9:cf:f9:85:09:11:21:32:44:eb:d0:eb:29:e1:87:
da:eb:39:15:9e:f0:0d:82:c7:be:d2:16:64:2e:3d:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C7:48:D9:DB:44:EE:47:D4:67:17:AE:3A:F3:9B:52:E5:50:3C:3A
X509v3 Authority Key Identifier:
keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/McdI2dtE7kfUZxeuOvObUuVQPDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.210.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:7e:61:59:7a:96:bd:f9:84:b0:58:16:f1:c4:fc:ba:3e:ea:
b3:8d:80:59:8c:69:52:11:4c:50:b0:2f:2f:cf:e4:14:77:41:
d4:dd:ac:01:8e:81:b9:f7:1e:18:0d:36:19:e5:ee:56:f7:94:
22:72:a8:73:57:1b:18:a1:e5:84:9c:18:e0:69:07:59:cd:4e:
3d:4a:08:d3:10:bc:2d:de:de:62:a2:d7:92:41:99:75:40:b2:
9b:0f:07:4e:0c:b0:9b:d7:09:92:5d:e1:ca:72:0f:29:4e:5c:
a6:bb:1c:f1:fe:10:7f:89:32:dd:22:be:89:0d:59:90:30:dd:
a8:bf:08:a4:62:35:96:ad:cc:19:be:83:ee:94:92:39:9f:ee:
aa:83:93:54:89:92:eb:8a:1b:f6:3e:71:e0:73:ff:4e:78:6c:
6c:cb:d4:63:98:73:82:19:33:50:69:45:e5:04:90:99:2f:50:
e0:24:b2:92:de:01:84:24:20:b7:39:f6:cf:0a:2b:2d:c6:51:
1a:d7:62:34:b7:de:8f:1a:cf:7d:cb:66:9c:09:d2:85:98:6b:
21:3a:9c:7f:67:55:06:4d:b7:58:8d:6e:05:7d:2e:2f:d3:92:
c2:c2:db:80:3a:8c:56:11:9b:61:0f:dc:ea:b7:f4:14:60:0f:
a1:3d:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:15 2025 by rpki-client