![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/yaRZ3TTxp6C_Be2RgLrajwWjdK4.roa
File: yaRZ3TTxp6C_Be2RgLrajwWjdK4.roa (raw, json)
Hash identifier: Uk+fDqQ9s1Wk5RyRnsa/uliGkovy6rUF6r+J/pYNQpg=
Subject key identifier: C9:A4:59:DD:34:F1:A7:A0:BF:05:ED:91:80:BA:DA:8F:05:A3:74:AE
Certificate issuer: /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial: 08BE
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/yaRZ3TTxp6C_Be2RgLrajwWjdK4.roa
Signing time: Sun 07 Feb 2021 12:48:21 +0000
ROA not before: Sun 07 Feb 2021 12:48:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131593
IP address blocks: 43.251.62.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238 (0x8be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Validity
Not Before: Feb 7 12:48:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C9A459DD34F1A7A0BF05ED9180BADA8F05A374AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:bb:bc:b7:8c:f6:45:eb:a9:8a:1d:36:f1:
f3:9f:ab:17:7d:f8:ad:a9:c0:a2:ff:da:74:19:b2:
8f:cf:e8:d6:57:13:d0:13:5f:c1:38:4b:0f:0c:17:
9e:60:98:97:1c:ff:c4:e6:0c:54:b2:0b:8f:e7:7c:
94:f5:f8:ca:16:04:53:82:de:98:18:02:66:d9:8e:
fc:ce:c6:3e:92:fc:07:d2:2b:24:2c:c0:88:4c:1b:
e5:f2:47:5f:6e:ee:d5:00:94:61:16:b2:47:ca:e5:
de:9b:99:1a:e8:94:88:55:34:ee:52:1a:df:48:68:
8c:6e:be:d8:65:b2:ce:1e:b6:38:e7:f1:9d:aa:ec:
46:55:78:ae:31:63:58:67:86:88:a7:27:eb:85:7f:
33:e4:8e:21:f5:67:47:75:52:01:00:2e:63:eb:f7:
f5:07:86:48:c4:76:58:76:d4:f7:87:40:48:d4:50:
98:f9:ee:fc:a2:97:ed:64:f2:2a:a3:04:f3:72:85:
b6:bb:6a:c8:cf:d2:a2:34:76:05:dd:f4:25:45:d3:
35:a2:86:2d:d3:48:df:15:97:e8:0d:70:79:d6:28:
5d:9f:75:9e:d4:65:27:fd:09:12:56:7b:57:c5:79:
cb:3f:51:51:0a:39:0a:df:f6:34:26:ed:d5:42:43:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A4:59:DD:34:F1:A7:A0:BF:05:ED:91:80:BA:DA:8F:05:A3:74:AE
X509v3 Authority Key Identifier:
keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/yaRZ3TTxp6C_Be2RgLrajwWjdK4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:1d:f0:ac:f9:6f:c0:f3:c7:75:f5:2e:37:08:3d:02:15:bc:
aa:5f:ba:18:50:a5:54:f5:cf:b6:8e:f6:82:53:18:ef:bd:b6:
7b:a0:25:72:95:40:13:33:dd:5d:f2:c3:6c:69:fc:2b:44:ed:
27:f0:ea:e3:5a:2f:bb:81:9d:c5:43:1f:30:46:1c:08:af:88:
d3:ce:cc:8c:05:13:ba:5b:75:2d:43:1c:b2:84:f6:26:cc:3a:
45:ab:b2:f7:ed:8b:f2:a1:02:a3:33:c0:e4:34:88:13:15:7d:
65:54:64:5e:f1:3b:3c:b1:66:ba:95:5e:33:9c:84:1e:72:b8:
14:88:8d:55:45:03:b7:09:12:c3:43:16:f5:8e:6b:2a:ff:de:
4b:1e:8d:b3:e6:43:2f:c2:e7:59:51:b1:e9:62:ca:c0:ab:0c:
bb:4b:c9:70:22:e2:4f:8b:fe:3f:93:11:a1:96:80:a8:3a:54:
07:08:ec:12:c8:6a:09:a2:f8:66:35:b0:09:1b:fe:e6:c2:1d:
0b:14:9c:0c:3a:23:34:d2:2c:b6:77:e1:c0:ee:24:3b:d3:cc:
35:9f:f3:bf:92:14:b8:1b:1b:83:5e:02:7a:53:47:7b:51:28:
11:fb:c3:98:d4:43:5e:02:b2:93:ef:f6:65:4c:37:d4:df:e6:
1c:1c:7f:58
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMERG
OTRBQjA3MjhDN0EzOEM1MEYwRDYxNTU0RDQ5RDY1MUYzM0FBMjAeFw0yMTAyMDcx
MjQ4MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEM5QTQ1OUREMzRGMUE3
QTBCRjA1RUQ5MTgwQkFEQThGMDVBMzc0QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSYbu8t4z2Reupih028fOfqxd9+K2pwKL/2nQZso/P6NZXE9AT
X8E4Sw8MF55gmJcc/8TmDFSyC4/nfJT1+MoWBFOC3pgYAmbZjvzOxj6S/AfSKyQs
wIhMG+XyR19u7tUAlGEWskfK5d6bmRrolIhVNO5SGt9IaIxuvthlss4etjjn8Z2q
7EZVeK4xY1hnhoinJ+uFfzPkjiH1Z0d1UgEALmPr9/UHhkjEdlh21PeHQEjUUJj5
7vyil+1k8iqjBPNyhba7asjP0qI0dgXd9CVF0zWihi3TSN8Vl+gNcHnWKF2fdZ7U
ZSf9CRJWe1fFecs/UVEKOQrf9jQm7dVCQ5EvAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUyaRZ3TTxp6C/Be2RgLrajwWjdK4wHwYDVR0jBBgwFoAUDflKsHKMejjFDw1h
VU1J1lHzOqIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUEVHQVRS
T04vRGZsS3NIS01lampGRHcxaFZVMUoxbEh6T3FJLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9EZmxLc0hLTWVqakZEdzFoVlUxSjFsSHpPcUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9QRUdBVFJPTi95YVJaM1RUeHA2Q19C
ZTJSZ0xyYWp3V2pkSzQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAK/s+MA0GCSqGSIb3DQEBCwUAA4IBAQAfHfCs+W/A88d19S43CD0CFbyqX7oY
UKVU9c+2jvaCUxjvvbZ7oCVylUATM91d8sNsafwrRO0n8OrjWi+7gZ3FQx8wRhwI
r4jTzsyMBRO6W3UtQxyyhPYmzDpFq7L37YvyoQKjM8DkNIgTFX1lVGRe8Ts8sWa6
lV4znIQecrgUiI1VRQO3CRLDQxb1jmsq/95LHo2z5kMvwudZUbHpYsrAqwy7S8lw
IuJPi/4/kxGhloCoOlQHCOwSyGoJovhmNbAJG/7mwh0LFJwMOiM00iy2d+HA7iQ7
08w1n/O/khS4GxuDXgJ6U0d7USgR+8OY1ENeArKT7/ZlTDfU3+YcHH9Y
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:30 2025 by rpki-client