![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
File: TJ-x749CV1onfAiH5pdDbAFfLdQ.roa (raw, json)
Hash identifier: AjDzNLW5xH1DNqkSX8nKFg0RgtOdMUG/vsHv/zON2ew=
Subject key identifier: 4C:9F:B1:EF:8F:42:57:5A:27:7C:08:87:E6:97:43:6C:01:5F:2D:D4
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0884
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
Signing time: Tue 29 Sep 2020 09:58:50 +0000
ROA not before: Tue 29 Sep 2020 09:58:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9680
IP address blocks: 2001:b000:591::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180 (0x884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4C9FB1EF8F42575A277C0887E697436C015F2DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:2a:d0:4f:66:ea:5e:63:26:83:58:00:44:
e6:24:5b:2e:33:55:df:ae:02:9e:89:68:74:e9:dc:
8b:8e:88:2e:a1:a8:02:f4:3a:27:17:5b:2a:68:9b:
0d:cc:98:60:2b:7d:cc:ea:eb:e5:46:65:5e:d8:f7:
86:4d:e4:85:2f:7b:cc:6b:91:b6:ad:d6:bc:95:6b:
62:31:bd:18:42:75:1b:7b:e9:5a:d1:82:2c:bb:dc:
e8:f0:70:11:e0:55:d6:b2:69:26:64:b8:2d:21:3a:
5e:3d:4b:27:a0:13:e5:a0:1f:2a:04:8b:73:f7:45:
65:17:a5:cc:8d:15:f8:16:8c:ba:79:dd:9b:fe:1c:
5e:b4:46:f7:67:c5:9f:ca:92:5b:1a:74:fd:be:c6:
96:09:28:5e:e6:7b:ac:08:1e:60:a5:3f:62:d5:76:
10:87:cf:92:be:7b:05:28:37:db:60:d9:cb:76:00:
36:11:6a:fc:03:0f:c0:e1:d0:88:55:6e:3d:ad:c0:
49:5a:a7:dc:3e:7f:fe:e3:29:3e:7a:da:ab:f0:9b:
ee:2a:72:f2:b4:9b:76:25:59:43:80:2c:0c:be:b9:
e1:8b:10:75:88:e8:15:f7:d3:1b:17:95:38:86:dd:
ac:c7:02:d0:99:a1:53:3b:08:b8:9b:80:f5:4f:83:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:B1:EF:8F:42:57:5A:27:7C:08:87:E6:97:43:6C:01:5F:2D:D4
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TJ-x749CV1onfAiH5pdDbAFfLdQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b000:591::/48
Signature Algorithm: sha256WithRSAEncryption
cf:39:d6:1d:e5:f6:c1:1e:11:ac:94:7e:b6:28:ac:9d:9c:4f:
38:27:c5:6a:e1:99:e8:4f:6f:52:7e:b1:92:15:45:07:1a:54:
0f:11:17:f5:42:28:85:03:f6:17:b4:a4:a6:7b:92:cb:2c:e4:
dd:87:a6:5d:1d:07:f6:8c:0e:2a:46:cd:26:67:7d:29:c1:12:
b1:a2:56:26:05:63:94:f8:56:d4:24:29:73:c0:47:d8:ab:fa:
8a:38:64:f0:3c:37:6f:ed:49:c2:42:04:85:a7:1e:f0:93:b9:
04:d1:6c:8d:b5:b7:87:b5:3a:bc:90:ee:13:c6:47:d3:37:25:
b3:79:fd:a2:fb:06:df:5c:fd:5b:48:9f:c3:b8:7d:24:06:5a:
bf:53:f1:e6:9a:d8:41:f6:6f:80:03:f6:e5:f1:05:25:18:b2:
f0:28:58:ca:fc:3b:b4:60:77:5a:8f:42:2f:f1:1d:b9:3d:e4:
f5:67:19:33:ea:d5:34:d4:05:e6:7a:1c:c3:1f:ac:8f:01:68:
13:06:0d:fd:b9:4b:55:ca:ca:2b:8e:26:29:c3:24:2e:82:48:
86:c5:ff:31:7e:ac:2a:fd:a7:fe:57:a3:d1:d4:72:22:f2:29:
77:19:9b:a9:a0:af:3a:c7:38:5a:7e:4c:d6:31:6b:08:e5:71:
0a:b9:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:15 2025 by rpki-client