![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
File: 6MzofTaCt2OniMHYTbQFXWrCjCQ.roa (raw, json)
Hash identifier: vrw8OKn1CFDzy5KPijlxFT0QBY7vWrR0t2GCBoqmA8w=
Subject key identifier: E8:CC:E8:7D:36:82:B7:63:A7:88:C1:D8:4D:B4:05:5D:6A:C2:8C:24
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 09
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
Signing time: Fri 24 Jul 2020 08:35:49 +0000
ROA not before: Fri 24 Jul 2020 08:35:49 +0000
ROA not after: Sat 24 Jul 2021 08:03:22 +0000
asID: 131657
IP address blocks: 103.153.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Jul 24 08:35:49 2020 GMT
Not After : Jul 24 08:03:22 2021 GMT
Subject: CN=E8CCE87D3682B763A788C1D84DB4055D6AC28C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:6c:9a:c0:e0:64:df:8e:47:f3:b0:6a:84:
d9:ab:4a:05:67:65:18:7c:aa:5b:a2:a7:4d:04:70:
8b:81:96:0a:3a:40:ed:b4:90:92:22:b9:41:52:40:
80:5e:d9:d4:df:10:cb:92:3f:65:26:48:6f:e5:50:
4c:a5:05:7c:87:56:6a:d3:da:ea:9f:ae:40:83:b7:
46:b9:28:11:d9:f8:bc:87:be:7d:a4:51:77:1d:cf:
aa:0e:24:b5:f5:f7:34:19:fb:4b:f5:43:7d:45:3e:
79:d2:48:df:73:6c:38:3d:1c:40:fc:61:53:80:7f:
89:3f:69:00:57:5c:e8:ea:d2:ee:9c:b2:59:8b:3b:
b9:62:5d:bc:f9:93:1e:a0:34:3f:94:bc:d1:ca:04:
35:68:ba:4e:ec:51:a8:d7:87:67:28:ca:f8:77:ba:
70:9e:cb:e7:3d:6c:06:ee:c3:b4:86:3a:6c:f2:ad:
19:ab:b2:a4:f1:13:52:fe:2b:f0:0b:85:10:17:e1:
cf:5e:43:45:8f:e7:4e:2e:cf:04:95:b0:5b:2e:07:
ad:62:e2:6c:53:a3:00:98:d8:e7:4b:9f:39:f6:0e:
45:07:ad:72:52:c5:a0:1d:73:93:69:f0:16:25:e8:
a8:fc:a4:ef:a4:fe:7c:54:4e:86:9c:b9:4c:9f:5f:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:E8:7D:36:82:B7:63:A7:88:C1:D8:4D:B4:05:5D:6A:C2:8C:24
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6MzofTaCt2OniMHYTbQFXWrCjCQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:26:4d:2e:01:87:50:40:26:d5:2f:44:4a:10:1f:5c:c2:e0:
f1:7e:ff:d7:41:36:14:0a:15:53:c1:76:fd:a4:9b:8f:66:09:
fa:8b:4d:f5:ea:de:e7:93:8f:03:ac:9c:e7:f8:7b:12:64:9f:
10:25:55:03:f3:85:29:a7:e7:24:c3:e2:7e:d0:29:5c:60:04:
b2:c7:da:45:b4:b2:7e:25:c8:64:5f:2a:69:bb:dd:1f:55:93:
8e:dd:42:69:5d:7e:80:57:1b:e0:cb:df:66:cb:20:0e:f0:e7:
b7:b6:c0:43:50:9c:c5:3c:cb:24:19:2a:22:66:08:82:39:d3:
b5:02:1d:77:7e:b2:11:81:53:b2:11:35:c4:4e:f8:34:15:42:
e0:22:98:65:0f:9b:94:b2:1b:ae:37:72:d8:fc:de:81:e7:42:
5b:41:1e:be:2c:3a:ef:41:41:74:aa:39:a0:5e:ab:a9:f8:5a:
5f:6e:f5:e3:71:11:c4:ce:0a:3a:c4:59:56:c2:8a:89:d0:e2:
ff:f2:42:96:d0:7d:13:4d:c7:b2:ab:3e:9c:be:df:d4:5b:a0:
c3:3f:fb:7a:df:ba:39:2c:84:04:19:19:0c:c6:62:99:b0:e9:
93:dd:6f:cf:3f:ac:51:63:04:c5:3e:29:20:5c:fa:02:bb:02:
27:b4:db:79
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTdE
QjdCOTkxOTk3NTY5NzM2NkI3MDE0RjhDRkUyOEVGMzY0RTczMB4XDTIwMDcyNDA4
MzU0OVoXDTIxMDcyNDA4MDMyMlowMzExMC8GA1UEAxMoRThDQ0U4N0QzNjgyQjc2
M0E3ODhDMUQ4NERCNDA1NUQ2QUMyOEMyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMVqbJrA4GTfjkfzsGqE2atKBWdlGHyqW6KnTQRwi4GWCjpA7bSQ
kiK5QVJAgF7Z1N8Qy5I/ZSZIb+VQTKUFfIdWatPa6p+uQIO3RrkoEdn4vIe+faRR
dx3Pqg4ktfX3NBn7S/VDfUU+edJI33NsOD0cQPxhU4B/iT9pAFdc6OrS7pyyWYs7
uWJdvPmTHqA0P5S80coENWi6TuxRqNeHZyjK+He6cJ7L5z1sBu7DtIY6bPKtGauy
pPETUv4r8AuFEBfhz15DRY/nTi7PBJWwWy4HrWLibFOjAJjY50ufOfYORQetclLF
oB1zk2nwFiXoqPyk76T+fFROhpy5TJ9f2DMCAwEAAaOCAe4wggHqMB0GA1UdDgQW
BBTozOh9NoK3Y6eIwdhNtAVdasKMJDAfBgNVHSMEGDAWgBQlfbe5kZl1aXNmtwFP
jP4o7zZOczAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IT05HREEv
SlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9KWDIzdVpHWmRXbHpacmNCVDR6LUtPODJUbk0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9IT05HREEvNk16b2ZUYUN0Mk9uaU1IWVRi
UUZYV3JDakNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3
L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeZ
sTANBgkqhkiG9w0BAQsFAAOCAQEAwSZNLgGHUEAm1S9EShAfXMLg8X7/10E2FAoV
U8F2/aSbj2YJ+otN9ere55OPA6yc5/h7EmSfECVVA/OFKafnJMPiftApXGAEssfa
RbSyfiXIZF8qabvdH1WTjt1CaV1+gFcb4MvfZssgDvDnt7bAQ1CcxTzLJBkqImYI
gjnTtQIdd36yEYFTshE1xE74NBVC4CKYZQ+blLIbrjdy2PzegedCW0Eeviw670FB
dKo5oF6rqfhaX27143ERxM4KOsRZVsKKidDi//JCltB9E03Hsqs+nL7f1Fugwz/7
et+6OSyEBBkZDMZimbDpk91vzz+sUWMExT4pIFz6ArsCJ7TbeQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:45 2025 by rpki-client