![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/V9fk3S4640z0DdtpnOTwjmGJ5cE.roa
File: V9fk3S4640z0DdtpnOTwjmGJ5cE.roa (raw, json)
Hash identifier: 9dm8OBgnwJPZrK66TqoO6RtpgNMD9czCIze1ZkVxAUg=
Subject key identifier: 57:D7:E4:DD:2E:3A:E3:4C:F4:0D:DB:69:9C:E4:F0:8E:61:89:E5:C1
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 08BA
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/V9fk3S4640z0DdtpnOTwjmGJ5cE.roa
Signing time: Sun 07 Feb 2021 12:48:18 +0000
ROA not before: Sun 07 Feb 2021 12:48:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131593
IP address blocks: 43.251.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Feb 7 12:48:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=57D7E4DD2E3AE34CF40DDB699CE4F08E6189E5C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:b1:43:87:9a:c5:33:7c:b6:d0:3c:97:e7:
8a:00:4f:38:95:30:4e:08:1a:23:be:26:de:e5:e6:
d8:69:5b:82:62:bc:66:cc:f1:a3:7a:95:f6:b6:c1:
14:5f:0f:62:13:31:ee:09:f2:cc:9f:ee:4e:c9:d8:
76:91:59:c0:ea:1d:35:42:b5:6b:16:2b:ca:2d:6e:
9e:97:d7:4e:7b:99:06:13:c7:62:c2:02:36:79:df:
f1:69:33:b7:fd:9e:03:9b:96:3f:7a:d2:fc:25:02:
3b:bc:8e:b7:67:47:1a:07:fa:2b:79:d1:2b:97:41:
cb:f9:b3:b6:92:39:50:75:e8:90:db:84:d2:05:2d:
16:f5:0c:60:2b:1f:ae:51:e2:24:83:bb:15:0f:0f:
5a:57:98:fd:72:9d:fe:ac:9e:04:0e:21:e2:04:e0:
f8:54:6d:44:10:f7:c6:77:37:97:2e:77:a9:f3:92:
f9:94:5f:2e:5d:ff:fa:89:17:8b:7a:53:e2:be:de:
b7:09:ad:84:13:68:1a:60:20:11:d7:91:2b:3c:59:
5c:1d:85:8e:ad:51:75:9f:db:6e:22:2f:cb:58:94:
66:d5:56:bb:73:8f:11:e0:ca:2c:d8:08:fd:8f:c4:
46:1c:f8:4a:d6:98:4a:91:3c:78:55:60:c3:b9:18:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D7:E4:DD:2E:3A:E3:4C:F4:0D:DB:69:9C:E4:F0:8E:61:89:E5:C1
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/V9fk3S4640z0DdtpnOTwjmGJ5cE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:25:e9:2c:11:b0:9a:26:12:9d:c1:35:5b:ba:4c:1d:3c:79:
5f:49:65:5a:55:62:f6:64:04:de:43:72:0b:8f:06:8e:27:01:
0f:0a:c0:ef:07:92:60:17:c0:45:82:b7:bc:ee:e5:f9:79:4a:
0f:fb:a0:9b:7c:83:f3:99:46:f1:e0:bd:ea:e9:12:2b:c7:24:
2b:bb:ab:89:22:60:70:58:e1:cd:c6:de:cb:db:d7:0e:1a:c0:
0a:64:a4:d7:88:95:07:a5:9d:80:f3:5c:55:b8:fd:4e:86:9c:
13:79:62:b3:16:f9:59:0f:a5:71:79:6e:01:b6:89:0f:17:d9:
fa:fe:35:77:97:f1:be:ce:b1:8f:0d:b3:f9:df:8e:1a:75:82:
60:7c:82:97:ba:47:ad:ec:91:ef:68:71:c3:1d:6f:39:6c:61:
be:88:8b:49:dd:e7:73:a3:42:5e:4e:0c:84:07:cc:35:55:e3:
b4:42:97:14:a5:99:e9:02:25:8e:08:06:80:bf:b1:1a:57:90:
a8:a5:6b:fd:90:99:c2:45:a0:f8:fc:b0:33:13:1a:ef:1d:45:
a9:96:80:b9:56:51:ff:3f:df:a5:e2:4b:a5:41:78:55:c8:2d:
ff:f5:aa:fd:f4:a1:eb:dc:19:10:aa:01:29:01:96:26:88:22:
a6:fa:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:17 2025 by rpki-client