![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
File: 4eYH-soEOpIDS5yKWLvNDGNSU_4.roa (raw, json)
Hash identifier: Ej5GF3Hx8DJZXRO2BT9oT+6dxFgPRiqMgXfblDrQmBY=
Subject key identifier: E1:E6:07:FA:CA:04:3A:92:03:4B:9C:8A:58:BB:CD:0C:63:52:53:FE
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0DA5
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
Signing time: Thu 28 Jul 2022 09:35:05 +0000
ROA not before: Thu 28 Jul 2022 09:35:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24158
IP address blocks: 203.105.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3493 (0xda5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Jul 28 09:35:05 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E1E607FACA043A92034B9C8A58BBCD0C635253FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:0d:1b:d3:a2:0e:e8:bc:58:96:92:50:61:
6a:13:65:e8:0a:63:30:cd:72:83:57:58:e4:86:90:
61:8b:2d:19:b6:72:1b:60:fc:73:fb:48:76:e0:85:
03:b9:44:90:fe:92:41:c0:ac:26:c5:5a:ee:9d:84:
3c:12:64:9f:0e:22:90:73:3e:88:e8:4a:e2:74:0d:
94:b5:9a:91:c0:2e:61:3f:bd:23:75:33:c0:40:ae:
c7:d7:20:73:20:0d:8e:60:96:fa:f6:79:da:0d:fc:
c6:98:f7:45:65:cb:a0:c4:49:42:f9:06:f8:3c:c7:
95:d7:15:d5:80:ca:24:b8:85:2b:30:ff:84:27:f8:
09:46:18:86:72:05:99:56:11:d2:80:a7:c2:0b:03:
a9:23:6d:93:e3:93:8f:ee:6d:df:9d:2f:28:29:9d:
8d:e3:0b:9a:ac:50:d9:c7:71:34:3f:e3:b7:ed:c1:
77:7f:70:f2:ae:9b:7b:44:c1:69:2c:0e:3e:c8:7f:
81:99:93:b7:0c:76:f5:29:59:9c:ae:0a:dc:52:e7:
e1:e5:d3:aa:6b:e6:98:b5:9f:ec:ba:87:5e:f3:0d:
e5:25:3d:69:02:69:3e:8b:62:5b:36:5b:95:13:fe:
c8:c3:c8:74:58:71:22:aa:0d:6a:be:c1:57:0d:6a:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:07:FA:CA:04:3A:92:03:4B:9C:8A:58:BB:CD:0C:63:52:53:FE
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4eYH-soEOpIDS5yKWLvNDGNSU_4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.105.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:90:b8:fe:5a:1b:8d:42:2c:72:1d:36:7c:26:44:0f:1b:5e:
d7:22:04:d6:1c:ff:b3:7a:1a:00:5f:b4:ff:8d:cd:58:93:eb:
c3:6a:69:e4:83:21:05:7d:20:cb:9b:36:14:55:68:e5:7c:97:
cd:f8:06:7d:f5:48:89:dd:6e:f6:8d:b0:6d:b7:56:ed:d8:79:
eb:be:b0:ba:d0:d2:f4:15:82:8f:dd:a4:a0:a2:d2:8a:cc:52:
25:1d:82:cc:7c:81:35:8f:82:ed:e7:1f:61:8c:a3:53:b0:af:
ab:d5:fc:de:db:47:0b:8d:af:fe:a8:d6:61:a9:44:19:84:fd:
de:88:23:80:8f:a0:f6:d0:2e:48:db:8c:75:84:0f:b6:5c:22:
63:af:0c:90:73:e9:54:e5:19:d0:ad:64:35:59:f2:fc:b4:cd:
8a:68:bf:14:31:da:67:12:23:ac:df:c3:a4:79:44:dd:41:4a:
23:4f:c7:31:57:ce:81:50:0f:b5:fd:f6:d2:b0:b5:7e:0f:aa:
44:23:e7:5a:8c:56:06:2d:5b:51:db:c9:22:e7:b5:56:8f:00:
1d:e6:cd:89:54:ed:85:15:2a:d1:e4:ed:78:30:65:4f:33:d6:
5b:95:3a:a7:f1:63:d4:32:ce:20:fc:94:e3:8d:8f:b5:2c:e3:
8e:40:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:07 2025 by rpki-client