![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dcJYoaDPpnjln6T85TH_eMRWHgA.roa
File: dcJYoaDPpnjln6T85TH_eMRWHgA.roa (raw, json)
Hash identifier: HnkS6Xtccl85biqljD+IVzCCRAceDs8j1jGmqe/kRGE=
Subject key identifier: 75:C2:58:A1:A0:CF:A6:78:E5:9F:A4:FC:E5:31:FF:78:C4:56:1E:00
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0AE8
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dcJYoaDPpnjln6T85TH_eMRWHgA.roa
Signing time: Thu 15 Sep 2022 02:40:51 +0000
ROA not before: Thu 15 Sep 2022 02:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9416
IP address blocks: 119.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Sep 15 02:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=75C258A1A0CFA678E59FA4FCE531FF78C4561E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:a1:00:eb:a7:59:e5:c7:33:58:bd:30:9b:
b2:58:78:3d:ac:27:3c:bc:6b:9b:22:04:78:0b:ac:
cd:16:bc:08:99:5c:00:85:f3:87:ee:5d:1b:bc:73:
24:e7:8d:4b:d3:d6:a5:2a:36:73:36:74:9b:54:fb:
ce:c1:6c:10:da:0e:cd:0f:e2:6d:ef:11:8a:20:6c:
cf:66:73:64:c1:2e:f7:42:da:29:d5:6b:cc:7a:d8:
ba:f0:7b:4f:e4:78:1f:d1:d6:5c:b6:5d:65:11:15:
3b:84:e4:29:37:81:2b:22:44:9a:21:d3:ae:79:98:
86:f4:f0:82:f5:30:78:1a:87:cc:3f:93:b6:78:37:
21:18:ff:2e:d9:7a:0c:0d:5f:51:f0:92:12:35:cc:
26:df:37:2a:c5:fe:a7:c6:b9:78:82:6b:48:84:3f:
54:8e:eb:c1:ed:6e:6b:d8:ac:4e:59:8c:29:c1:e2:
03:40:3a:2c:65:83:50:1e:6c:91:3d:66:62:3b:cf:
dc:5d:a4:21:15:5b:f2:88:cc:1f:af:2d:32:3a:bd:
e5:0e:8a:b5:ad:b6:40:c7:03:93:0f:c5:0c:23:a5:
75:17:a3:11:5a:d4:ef:88:ca:fa:03:c2:b0:62:62:
7a:ab:aa:07:e5:da:61:36:6f:0b:6c:9e:04:a4:78:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C2:58:A1:A0:CF:A6:78:E5:9F:A4:FC:E5:31:FF:78:C4:56:1E:00
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/dcJYoaDPpnjln6T85TH_eMRWHgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
49:a0:c4:33:30:db:29:90:31:71:d0:05:73:c0:70:4c:ff:3e:
a6:49:ae:f8:45:14:e5:93:f4:47:fb:63:2c:2f:03:98:ce:b5:
df:a2:1b:2f:24:c9:62:06:22:9d:a9:31:d9:b0:24:e5:f8:79:
24:63:7d:04:7e:0c:35:e9:2d:92:34:43:8c:73:bd:f9:a8:55:
4b:44:b6:42:f8:b8:31:d7:03:fb:96:6a:6a:96:7d:a4:b1:9d:
54:b9:83:d9:97:aa:de:49:2a:63:0e:cd:cd:91:1c:49:c8:8b:
52:ec:92:c0:ec:43:b7:fc:23:c2:58:e3:52:40:f8:8a:c4:81:
ea:90:6d:9b:b3:8d:de:36:00:33:79:83:d6:83:0f:e9:ca:d8:
25:4c:c9:0e:f3:06:4e:93:9a:bc:39:29:d0:ce:c5:25:10:dc:
c6:2c:fd:50:3b:87:70:4f:3a:ac:b2:a3:a0:6c:5d:63:b7:cf:
19:48:3d:c9:1b:5e:fd:f1:e8:14:a7:a1:75:19:3d:77:96:7c:
9e:06:12:0e:72:17:98:18:18:3c:19:1e:81:59:9f:75:5c:7d:
a3:67:9a:29:06:f4:2c:a9:dd:70:12:9e:8d:a6:8c:fa:16:2c:
b1:c6:47:ed:98:c6:3b:d5:26:c0:54:4a:fc:56:b4:7a:72:64:
eb:c9:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:20 2025 by rpki-client