![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
File: zDph0mkvD6An9l8bFpC9FCp11YE.roa (raw, json)
Hash identifier: 1seZFaDHRmGxuuIPn9wnUSSzG1FOvGPq4o/WBiUBml4=
Subject key identifier: CC:3A:61:D2:69:2F:0F:A0:27:F6:5F:1B:16:90:BD:14:2A:75:D5:81
Certificate issuer: /CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Certificate serial: 0F6D
Authority key identifier: 58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
Signing time: Thu 28 Oct 2021 06:05:23 +0000
ROA not before: Thu 28 Oct 2021 06:05:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 103.124.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3949 (0xf6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5818978B2D089A5F3DEAE0AF01E9335F4DD5D4BC
Validity
Not Before: Oct 28 06:05:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CC3A61D2692F0FA027F65F1B1690BD142A75D581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:84:a0:b6:da:47:18:04:c1:39:98:25:eb:
2d:54:73:89:ed:2e:28:08:f1:d9:12:e7:05:c0:c9:
93:98:e4:81:5b:b2:07:07:5f:b3:3a:82:f3:45:6a:
09:df:02:a4:1c:e5:a8:cb:7b:95:97:c6:7d:ff:71:
56:b4:4c:f8:90:b3:32:16:d5:c2:1f:20:dd:f4:38:
20:0d:ec:bd:09:56:3d:74:58:5f:5f:76:69:a2:39:
94:b4:7d:2d:23:18:4b:52:44:c5:92:d5:b2:3a:cf:
4e:49:f6:72:c1:28:79:80:4c:1e:57:77:09:9c:e8:
7b:6e:e6:ef:18:cc:0d:98:e8:95:1b:3d:94:e5:84:
1f:a7:cb:af:3c:6d:6b:25:98:d4:1e:81:36:2f:b2:
6f:56:78:82:89:75:38:81:a7:5b:04:93:b6:5e:6b:
06:de:07:ed:b4:54:d2:c1:09:64:a9:e8:9a:00:c6:
52:cd:ab:11:61:fb:8b:d9:99:8f:57:e0:ee:bf:69:
73:12:45:c2:00:92:34:3c:8d:a8:03:9b:32:9c:ea:
f3:c2:a9:5d:37:ab:74:0f:f8:0d:2c:1c:7b:be:3d:
17:df:bd:1b:9d:e3:5e:06:fc:bf:9a:56:b2:3e:d2:
0e:67:39:3b:82:61:c2:5b:65:7d:cf:33:18:2b:9f:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:61:D2:69:2F:0F:A0:27:F6:5F:1B:16:90:BD:14:2A:75:D5:81
X509v3 Authority Key Identifier:
keyid:58:18:97:8B:2D:08:9A:5F:3D:EA:E0:AF:01:E9:33:5F:4D:D5:D4:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/WBiXiy0Iml896uCvAekzX03V1Lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WBiXiy0Iml896uCvAekzX03V1Lw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LUHWA/zDph0mkvD6An9l8bFpC9FCp11YE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.176.0/22
Signature Algorithm: sha256WithRSAEncryption
57:45:17:bf:2e:6e:59:48:ea:e0:8b:00:02:e7:52:7c:d5:7e:
e6:3b:3f:e1:17:a9:98:ae:36:b7:45:43:d3:17:99:eb:45:8a:
29:20:f4:45:0d:95:5f:6e:b0:99:ef:60:07:9b:29:eb:85:a9:
43:39:39:04:96:b1:5e:44:38:af:79:1f:47:6b:88:c1:df:87:
c4:d5:4e:ed:9e:12:1c:28:8e:bc:0a:b1:f6:a5:7d:46:f5:ef:
21:ac:31:04:1a:f4:13:b5:f9:4e:9a:73:c1:fa:78:81:33:2c:
39:5e:8c:a4:ce:29:8e:07:22:0f:01:fa:c1:65:8c:e7:f5:17:
6e:ff:a6:9a:3b:e6:f4:d7:18:50:6d:03:75:de:08:25:79:b3:
a7:e3:fd:55:33:14:a5:f5:51:d0:ab:01:a4:6e:06:a2:1b:eb:
88:f1:98:7a:3c:1f:e0:9b:eb:be:b8:39:95:ec:7a:9c:aa:e6:
73:f2:67:e7:ad:68:d3:99:ed:1b:73:34:26:20:f6:5c:36:d1:
74:c7:7e:ee:cc:94:d0:3d:2a:7d:2b:53:a3:01:42:ef:d3:9b:
80:e2:ee:ee:8e:c5:9d:c0:3d:a1:68:9c:84:3f:34:70:42:ea:
b8:96:47:69:2c:4f:58:73:7c:31:ee:15:8a:e2:68:6c:c6:81:
62:48:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:47 2025 by rpki-client