![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
File: RoANIRENqPNHSmaU--Piea8_0Ws.roa (raw, json)
Hash identifier: l+I+C6RMtconMUVpj6/AFbh/gkdOIESRRabXiqGZxS4=
Subject key identifier: 46:80:0D:21:11:0D:A8:F3:47:4A:66:94:FB:E3:E2:79:AF:3F:D1:6B
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0B1E
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
Signing time: Sun 07 Feb 2021 13:10:24 +0000
ROA not before: Sun 07 Feb 2021 13:10:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 60.199.162.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 13:10:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=46800D21110DA8F3474A6694FBE3E279AF3FD16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:35:90:70:ec:e7:23:e7:6b:05:ad:f1:dc:
6d:8f:ce:15:db:9e:58:a3:f7:f7:ca:da:d1:f2:4d:
4c:2f:5b:1e:05:53:ce:54:32:66:79:9c:b7:1d:81:
fe:9d:5c:a9:ad:56:5a:36:bb:30:5b:85:6f:7f:83:
65:30:a2:11:10:2c:ff:67:bf:1c:3f:80:8c:30:14:
8a:7a:86:73:c0:40:63:4f:36:69:f5:da:75:c2:72:
10:2c:ec:c5:0e:42:ad:e1:02:5f:c4:50:6f:da:50:
7a:ac:89:5b:e2:47:92:47:06:54:76:20:c4:a5:eb:
83:e7:0f:67:63:e3:00:a3:53:21:91:44:8f:79:44:
53:13:a1:d9:95:84:02:f4:68:19:be:34:5d:9c:88:
db:08:93:44:ae:dd:72:73:7c:a8:9a:b3:44:27:e3:
95:f9:0f:67:ad:00:62:35:38:05:86:6c:7d:07:15:
02:33:00:78:3d:0b:b8:7a:f7:e0:75:28:76:6c:50:
47:40:27:61:27:19:a3:18:37:8c:e9:d4:7a:7f:2c:
5f:5d:41:f7:ac:a8:8d:12:1a:86:e5:cf:e0:aa:02:
1b:8d:d5:83:1d:1b:8b:f6:3f:58:95:b9:7c:ee:7d:
f3:57:70:22:61:89:bc:75:94:6b:ce:6f:af:b0:6f:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:0D:21:11:0D:A8:F3:47:4A:66:94:FB:E3:E2:79:AF:3F:D1:6B
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RoANIRENqPNHSmaU--Piea8_0Ws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.199.162.0/24
Signature Algorithm: sha256WithRSAEncryption
80:75:df:28:8a:d1:b5:5b:68:51:3e:38:ad:67:4a:5a:be:13:
38:5c:0a:3e:8f:12:51:ec:b3:8f:91:bc:dc:27:3a:eb:ba:25:
e1:fa:ee:72:05:0e:24:b7:a0:82:d1:e7:9b:6d:74:09:eb:36:
74:63:90:0b:23:a6:bf:b9:93:74:e4:eb:f7:20:89:07:d8:c7:
20:a8:2d:b2:2c:50:e3:a9:23:98:31:e9:5d:c6:ce:89:dc:7e:
d7:de:39:de:c1:c1:7b:af:46:d0:1b:a2:4f:ad:52:df:51:12:
10:ea:d0:d2:71:fb:9a:d0:5e:f1:25:99:71:eb:bf:44:e0:4b:
56:0b:dc:42:45:8e:83:4e:ce:90:6b:5f:07:25:a3:ed:60:fa:
fc:70:ba:f9:88:e6:3f:5a:02:dd:bb:12:89:64:00:5a:0c:a9:
6a:85:a0:91:00:ec:0a:78:db:18:07:c3:48:14:7a:38:e9:dc:
04:a7:f5:fc:1f:3f:59:79:04:a7:84:7e:9b:ac:a3:4a:f9:35:
32:ac:b1:8f:c0:8b:fe:34:46:96:e5:dc:e1:ab:d6:f9:97:56:
71:b2:ae:61:a4:35:3d:40:69:9d:38:c2:7d:6c:58:f8:a4:04:
0f:08:04:bf:ae:9c:86:09:52:02:a6:ec:ce:b2:31:74:18:61:
5b:ea:f0:54
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MzEwMjRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDQ2ODAwRDIxMTEwREE4
RjM0NzRBNjY5NEZCRTNFMjc5QUYzRkQxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG+jWQcOznI+drBa3x3G2PzhXbnlij9/fK2tHyTUwvWx4FU85U
MmZ5nLcdgf6dXKmtVlo2uzBbhW9/g2UwohEQLP9nvxw/gIwwFIp6hnPAQGNPNmn1
2nXCchAs7MUOQq3hAl/EUG/aUHqsiVviR5JHBlR2IMSl64PnD2dj4wCjUyGRRI95
RFMTodmVhAL0aBm+NF2ciNsIk0Su3XJzfKias0Qn45X5D2etAGI1OAWGbH0HFQIz
AHg9C7h69+B1KHZsUEdAJ2EnGaMYN4zp1Hp/LF9dQfesqI0SGoblz+CqAhuN1YMd
G4v2P1iVuXzuffNXcCJhibx1lGvOb6+wb3WpAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQURoANIRENqPNHSmaU++Piea8/0WswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUm9BTklSRU5xUE5IU21h
VS0tUGllYThfMFdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ADzHojANBgkqhkiG9w0BAQsFAAOCAQEAgHXfKIrRtVtoUT44rWdKWr4TOFwKPo8S
Ueyzj5G83Cc667ol4frucgUOJLeggtHnm210Ces2dGOQCyOmv7mTdOTr9yCJB9jH
IKgtsixQ46kjmDHpXcbOidx+19453sHBe69G0BuiT61S31ESEOrQ0nH7mtBe8SWZ
ceu/ROBLVgvcQkWOg07OkGtfByWj7WD6/HC6+YjmP1oC3bsSiWQAWgypaoWgkQDs
CnjbGAfDSBR6OOncBKf1/B8/WXkEp4R+m6yjSvk1Mqyxj8CL/jRGluXc4avW+ZdW
cbKuYaQ1PUBpnTjCfWxY+KQEDwgEv66chglSAqbszrIxdBhhW+rwVA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:38 2025 by rpki-client