![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/N1n_4XPV6lMLliNkfEAerqjMNLY.roa
File: N1n_4XPV6lMLliNkfEAerqjMNLY.roa (raw, json)
Hash identifier: rubZYLiTafG60+LaZPSy2dHV3CiVi0CduyAhOOrMgbk=
Subject key identifier: 37:59:FF:E1:73:D5:EA:53:0B:96:23:64:7C:40:1E:AE:A8:CC:34:B6
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0931
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/N1n_4XPV6lMLliNkfEAerqjMNLY.roa
Signing time: Wed 29 Sep 2021 02:53:01 +0000
ROA not before: Wed 29 Sep 2021 02:53:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17710
IP address blocks: 61.57.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353 (0x931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 29 02:53:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3759FFE173D5EA530B9623647C401EAEA8CC34B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:97:9e:73:55:72:52:7b:8a:92:89:4f:f8:
a0:b8:a3:21:d1:eb:34:eb:20:7b:59:e1:8c:4c:73:
4c:6a:80:42:6a:50:61:2e:18:67:f4:f9:a9:3f:34:
d5:5d:15:b2:fe:4a:5c:95:88:a2:f4:1e:cc:e2:39:
61:db:b0:9a:7e:c0:37:f9:82:58:40:fe:bf:d6:77:
9c:5a:80:be:47:de:ce:7b:c1:db:99:a8:a3:2a:a7:
06:9d:3f:2c:d8:91:d1:de:31:7b:bb:1d:89:76:49:
1c:20:bb:ae:e7:b8:2c:54:8c:ab:6b:02:22:6e:c0:
74:f4:1f:a0:a6:e9:3b:a0:46:24:b3:e3:69:d6:dd:
a0:a3:4a:70:45:fc:92:0d:bd:db:60:6f:b4:7c:2e:
30:9b:8f:30:79:43:0d:5e:4d:11:a3:5f:4f:77:c0:
8e:83:ee:40:3b:db:10:0d:8b:cc:72:65:b6:17:57:
e4:db:b0:aa:4b:02:05:fb:26:30:11:8f:04:ac:2d:
1d:b0:f5:70:e6:ce:fd:29:60:0b:a0:6e:64:57:f9:
2a:04:47:ae:d7:54:3a:7a:8e:6b:a3:b9:4a:5e:3c:
4f:97:b8:a2:8c:d9:de:d7:b2:12:d9:f7:4f:27:f9:
39:9f:f4:71:6d:fb:3d:c8:de:bc:78:16:fb:c7:c0:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:FF:E1:73:D5:EA:53:0B:96:23:64:7C:40:1E:AE:A8:CC:34:B6
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/N1n_4XPV6lMLliNkfEAerqjMNLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:f0:b4:d7:99:48:1a:b1:a1:e3:47:c5:22:35:9e:03:2a:3d:
bb:77:50:91:e5:e7:a8:c4:24:06:dc:2d:c4:4c:ed:69:9b:48:
88:f2:b5:45:2d:9e:e6:84:7e:f8:56:66:65:a8:26:b4:4e:0e:
e0:b8:d2:05:54:fb:95:91:4a:e9:4e:20:33:6b:2b:c5:09:19:
bf:70:5b:41:44:d0:25:2f:41:43:72:a3:3d:c0:46:b2:1d:56:
b3:3b:d7:9e:fc:e4:c2:17:b5:4b:67:70:94:3a:a3:2f:2b:7a:
c4:02:01:0d:3a:45:6d:37:af:ac:f8:9f:c3:d2:7a:b6:31:92:
1f:a3:9b:31:fa:a6:0b:56:54:3b:47:51:a1:b5:58:20:02:c3:
2f:fc:e0:33:42:7e:77:30:57:c8:6a:57:a5:c7:7e:15:1a:51:
3e:36:01:47:b6:46:70:4d:20:7b:d9:dd:41:bf:66:80:db:78:
a1:5c:a6:79:4c:d4:66:76:e4:e0:80:2a:65:95:e2:8e:20:55:
81:d9:4e:42:ea:ca:30:85:c5:9f:be:cd:b0:4d:0d:77:63:ca:
51:0a:4b:26:6d:7e:c0:ca:4e:15:55:8e:57:3e:ec:2b:4f:bb:
87:86:fb:d7:53:ff:8b:a0:91:f9:9c:1c:ad:3d:91:be:1b:e2:
69:e3:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:20 2025 by rpki-client