![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/UT57wx1Vp1K8hCO_RM6gmtXkeh4.roa
File: UT57wx1Vp1K8hCO_RM6gmtXkeh4.roa (raw, json)
Hash identifier: zNnsZ9PiKLDJkxMe0M2rw4CgF1sEkE5U9RiA5ANcEhk=
Subject key identifier: 51:3E:7B:C3:1D:55:A7:52:BC:84:23:BF:44:CE:A0:9A:D5:E4:7A:1E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0C18
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UT57wx1Vp1K8hCO_RM6gmtXkeh4.roa
Signing time: Wed 29 Sep 2021 02:50:52 +0000
ROA not before: Wed 29 Sep 2021 02:50:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 3462
IP address blocks: 203.69.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 02:50:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=513E7BC31D55A752BC8423BF44CEA09AD5E47A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:d5:39:4c:ab:1c:b6:c1:d4:ab:d6:c5:57:
78:9a:a2:5a:83:28:0f:5b:62:2c:e2:39:04:99:11:
2a:75:14:eb:ca:a6:d7:d9:f6:32:9a:d5:33:d4:9a:
21:ea:e5:5e:70:f5:15:90:59:f7:1c:b7:1f:1f:d8:
91:56:33:f3:c5:19:41:61:e9:7b:0b:c6:33:40:08:
8d:47:5b:a2:9c:c2:af:fb:96:a5:7d:6a:08:95:d5:
44:9b:2b:5d:f7:d3:19:82:d2:74:fc:1f:e1:bc:fa:
22:c4:ee:97:33:91:11:59:db:b2:59:27:c2:52:1a:
74:29:f9:31:96:06:a7:ee:f9:fc:2e:44:50:0a:6d:
de:d1:be:10:7b:00:22:f4:88:ae:87:c3:28:27:d7:
33:af:ee:f8:45:3a:0c:db:bd:82:4d:1c:21:9a:f7:
ef:40:df:3e:4f:a5:80:13:9c:8b:27:e6:6e:a0:d7:
d9:f5:d9:6a:0f:44:36:a0:7a:d3:9c:50:8b:32:f3:
22:96:0b:16:48:c4:0a:31:08:5f:a4:e6:41:a6:f5:
ac:0e:3d:d2:24:91:a8:3f:a5:fe:f1:29:f9:ae:1c:
05:80:8b:4f:d1:40:70:50:8f:15:ef:f8:69:20:0b:
18:43:0a:10:ec:3e:61:47:59:9c:1a:41:e5:3f:bf:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3E:7B:C3:1D:55:A7:52:BC:84:23:BF:44:CE:A0:9A:D5:E4:7A:1E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/UT57wx1Vp1K8hCO_RM6gmtXkeh4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:a9:70:dd:cf:3d:db:0a:a5:a5:e5:50:15:eb:0c:63:1f:57:
9f:8f:6f:bb:5f:dc:50:33:eb:58:bc:f2:29:d3:e0:18:26:8d:
5c:ee:e4:e9:b8:51:43:70:d5:02:a4:9f:70:ab:68:2d:82:96:
16:00:1a:81:09:58:a3:e6:27:fc:50:c1:ff:92:ee:68:2d:de:
4e:24:3a:39:ac:e1:59:c4:bc:6b:87:46:b8:2a:e1:ed:44:09:
3d:6c:11:0d:85:8c:2e:f7:54:91:0d:15:e5:2f:9f:47:ad:a6:
22:05:7b:da:1b:b4:bc:ee:95:87:f5:df:22:84:86:b2:fc:48:
83:ea:77:37:ca:22:b1:89:13:b1:84:1d:c7:84:75:fd:d8:ad:
ae:fa:e1:48:5e:ec:a0:71:f9:35:f6:36:80:43:0c:95:75:b6:
de:a2:75:00:cb:27:38:e5:71:ee:ca:b3:62:23:43:4c:91:0d:
b9:87:13:9b:60:3c:7b:10:15:a3:8f:5a:97:56:2c:94:6f:bb:
2d:2c:bd:a8:26:cf:2b:4f:b6:44:31:f1:2d:e1:f9:75:0f:b1:
93:c7:e3:90:73:b7:b7:99:22:2d:19:a4:83:ed:1e:a6:0b:3c:
34:14:ad:70:8e:43:8f:b8:85:86:f3:e4:31:69:71:fb:53:f5:
20:be:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:55 2025 by rpki-client