![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/03QwuOTaAH48xcoNT5s9kZBNwLM.roa
File: 03QwuOTaAH48xcoNT5s9kZBNwLM.roa (raw, json)
Hash identifier: Nm4SjhxqObGo8CFIStyvFmt1gH+Agn9L0hl2l1AK2KU=
Subject key identifier: D3:74:30:B8:E4:DA:00:7E:3C:C5:CA:0D:4F:9B:3D:91:90:4D:C0:B3
Certificate issuer: /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial: 030A
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/03QwuOTaAH48xcoNT5s9kZBNwLM.roa
Signing time: Mon 26 Aug 2024 05:17:26 +0000
ROA not before: Mon 26 Aug 2024 05:17:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38852
IP address blocks: 2407:a740::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 13:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Validity
Not Before: Aug 26 05:17:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D37430B8E4DA007E3CC5CA0D4F9B3D91904DC0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:b5:7b:7b:25:f3:c0:b3:4a:c9:25:b1:c1:
e0:e3:e6:32:c7:81:a6:48:d4:c7:64:cf:a6:ab:fa:
84:e4:c0:0a:47:42:c3:b4:ee:8b:1a:40:26:38:40:
32:71:71:37:4b:2b:b4:e8:c1:42:fa:d4:9a:28:66:
b6:a5:99:19:f8:9c:9f:7c:02:f9:94:ca:d1:ba:5f:
0f:d1:1e:9d:d8:5f:28:2e:cf:23:30:f1:91:28:9c:
c1:31:5b:cb:69:e7:bc:3e:1a:22:a6:d7:c5:6f:37:
64:2e:ea:70:41:35:98:1c:c0:3d:62:b4:10:bd:81:
a7:59:60:2d:f5:08:c2:eb:b9:3c:50:86:a4:32:f2:
a2:d7:63:ae:51:e7:d4:89:51:f0:4a:dd:31:ca:5c:
79:bd:41:ac:4c:77:99:cc:47:8a:04:fa:b4:1c:71:
90:ae:2b:c8:ba:08:d0:02:5f:49:46:8c:cb:df:0a:
f0:c4:a4:da:63:6f:1a:17:8c:db:85:1f:07:46:08:
34:da:06:d6:b8:a6:c2:eb:32:64:7e:b0:a8:95:bb:
8e:41:4d:1b:1c:b9:ff:90:69:99:f2:ee:f0:9f:47:
ac:8c:27:ab:db:1e:bc:2e:18:2c:6c:94:41:06:94:
a8:13:f9:ae:50:08:b1:01:b4:38:53:0b:43:c2:c3:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:30:B8:E4:DA:00:7E:3C:C5:CA:0D:4F:9B:3D:91:90:4D:C0:B3
X509v3 Authority Key Identifier:
keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/03QwuOTaAH48xcoNT5s9kZBNwLM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:a740::/32
Signature Algorithm: sha256WithRSAEncryption
2e:2d:3e:4d:26:8f:04:4a:af:05:5e:64:7e:03:b1:ca:e3:63:
76:32:6e:f2:0b:3e:86:c5:73:2f:b2:35:5e:4c:70:92:63:45:
11:08:ad:49:54:2e:19:63:88:25:9d:c6:08:de:b1:f9:dc:35:
c8:10:90:cf:a5:b4:fe:74:de:95:bf:49:b0:15:54:a4:8b:ff:
ea:55:86:2a:c0:e8:c8:c9:4c:a3:4d:9f:55:0d:fc:f0:c6:ca:
99:71:6a:c7:c2:61:cc:5c:3f:09:99:ef:2a:df:da:70:00:a8:
42:2b:c6:b9:8e:f8:9e:a6:c7:c5:fa:2f:73:2c:f7:a9:e0:b3:
2a:8b:52:8d:55:bf:b5:aa:40:0c:ab:79:1f:c0:d0:b0:2f:99:
01:13:22:9e:87:1c:84:25:26:b4:08:6f:79:14:77:7a:0b:03:
78:d9:35:ce:79:cf:4b:50:b8:9e:b4:e2:3b:9c:35:35:fa:fc:
43:05:7e:58:2f:f6:0e:82:69:7c:3e:ab:a2:73:8a:8d:76:16:
78:c0:fc:69:79:5b:37:a5:94:ee:a6:a2:02:bb:4e:5f:e6:e3:
12:8d:37:ea:73:96:f9:ed:b1:d9:4d:2d:32:b5:8f:95:b6:d4:
81:ab:61:53:a8:b3:ed:2d:9c:32:3f:9b:08:e6:21:d5:c2:75:
be:7b:16:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:21 2025 by rpki-client