![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
File: y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa (raw, json)
Hash identifier: Vw2cQqu5gn3iVnPqOB5eu100q2LNV4fm9XQDynYxbOo=
Subject key identifier: CB:B2:BB:CD:10:4D:C4:F1:1A:5F:B6:62:65:3F:A1:8D:E6:F8:76:92
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 075F
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
Signing time: Tue 29 Sep 2020 10:05:28 +0000
ROA not before: Tue 29 Sep 2020 10:05:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131593
IP address blocks: 43.251.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1887 (0x75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Sep 29 10:05:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CBB2BBCD104DC4F11A5FB662653FA18DE6F87692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:ed:b8:ad:94:f7:29:45:c3:e0:89:0a:fb:
cd:1d:ad:3d:24:cb:40:ea:95:2a:5f:ea:56:87:de:
fe:c9:3c:ae:5d:a7:30:70:83:97:1d:6f:a3:08:06:
5d:db:e1:ef:e4:2c:34:d8:08:ca:69:1c:63:c6:cc:
52:f1:03:88:c9:b7:17:99:5d:2e:b6:5f:f8:de:0b:
96:f6:31:53:f1:5b:d9:68:31:b2:70:04:27:3e:15:
28:de:76:66:b7:69:62:2e:06:72:a6:a9:5c:d3:ea:
ed:c0:84:11:45:d5:b9:1b:f3:03:24:2e:9c:80:4b:
43:f2:51:93:cb:c4:e8:16:e4:ec:4a:af:1d:35:37:
54:75:fe:6a:89:03:7d:60:3e:ed:fc:4f:86:be:dc:
8c:0d:65:09:65:02:d1:8f:30:28:0c:ae:f2:75:c5:
10:58:da:52:22:62:b1:d9:e5:df:77:c8:14:df:8d:
72:da:1b:11:7b:9f:b5:a4:aa:4f:c2:d4:61:c6:b0:
9b:3d:8f:6a:f3:37:68:2f:ec:92:7d:da:0e:0a:c6:
31:b6:0e:7c:70:d0:1d:34:74:31:a1:ac:4e:7d:bf:
15:65:e8:e9:21:74:9f:c0:b6:bd:67:d9:a6:8b:f9:
52:35:32:64:91:2c:ba:32:12:f1:3d:7e:40:24:73:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:BB:CD:10:4D:C4:F1:1A:5F:B6:62:65:3F:A1:8D:E6:F8:76:92
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/y7K7zRBNxPEaX7ZiZT-hjeb4dpI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
47:73:cc:15:9d:51:8f:db:49:6c:97:05:27:92:ed:84:4a:92:
b5:e0:f3:6d:e3:3c:68:dc:4d:0d:e0:2d:77:c3:fc:1b:49:0f:
01:ac:e6:b8:31:46:05:27:2c:19:49:f7:ea:64:d7:68:7c:ff:
b9:6c:54:59:d9:21:fd:47:70:2d:bf:1c:eb:cd:08:8e:bd:e2:
e3:f6:64:01:cb:19:ed:e5:5c:24:e3:15:3d:f5:eb:3b:70:d8:
5f:32:59:b8:ec:c5:ea:69:0f:56:94:54:01:de:8d:08:9f:6f:
87:d9:a0:88:75:ab:43:68:09:0d:86:7f:0c:90:ba:13:21:fc:
df:55:b3:04:73:3a:a9:5b:7e:c1:f1:4f:c0:74:fa:bc:9f:59:
be:cc:0d:3f:d1:0d:33:96:85:16:69:a0:e7:bf:eb:87:a6:7c:
18:c1:5c:90:e0:75:29:18:ed:ef:96:49:26:58:ab:ea:50:c1:
e2:5a:41:d7:6c:34:47:2c:e7:57:55:85:64:9a:60:d7:75:af:
92:19:15:3f:82:83:b0:df:82:01:1b:08:99:d1:10:40:58:6f:
01:8d:86:fe:14:b5:15:03:e8:f8:ba:87:ca:96:d5:97:9e:f0:
1f:a9:b3:51:1b:77:fd:dd:66:9d:64:b3:2d:2e:61:e5:74:42:
10:61:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:56 2025 by rpki-client