![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ah6tkf8EZo1blTHQTlkbKcnrnZ0.roa
File: ah6tkf8EZo1blTHQTlkbKcnrnZ0.roa (raw, json)
Hash identifier: ebaFtwQGjkS8LsQRXVGwmUkZzPjOb8JvPyGtXVlC9zw=
Subject key identifier: 6A:1E:AD:91:FF:04:66:8D:5B:95:31:D0:4E:59:1B:29:C9:EB:9D:9D
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0945
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ah6tkf8EZo1blTHQTlkbKcnrnZ0.roa
Signing time: Wed 25 Nov 2020 03:32:21 +0000
ROA not before: Wed 25 Nov 2020 03:32:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 61.31.227.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Nov 25 03:32:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6A1EAD91FF04668D5B9531D04E591B29C9EB9D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:6f:2c:c9:2a:8b:c5:76:a0:74:e9:94:9a:
8b:bf:0d:44:f4:69:d1:53:3e:7b:ae:85:bc:b0:cd:
b0:28:82:69:b6:62:bb:86:39:48:4e:29:f2:d8:31:
ab:68:cd:cd:8d:ab:70:45:80:42:48:a7:d5:e7:00:
3c:b5:c4:70:b5:04:95:5f:8f:16:0f:45:10:6f:80:
2b:58:be:86:db:b4:c3:9b:51:b2:53:36:2e:55:85:
5f:9b:74:58:20:c8:2f:64:9c:e8:32:56:87:ad:e7:
95:d9:6f:ef:b1:48:b6:f8:af:16:4c:e7:84:a2:db:
00:aa:13:c0:81:3c:2c:9c:b7:4b:10:76:0c:50:56:
a2:ef:73:4f:e7:fd:89:87:0c:c1:08:de:5f:f2:70:
27:3c:62:80:7b:37:f0:53:a8:11:bd:3d:90:57:41:
12:b9:54:bf:c8:15:24:2d:25:d4:46:e3:68:c0:ba:
c7:b2:00:87:11:71:ca:99:e9:ab:c8:7f:02:3a:e5:
87:f2:06:5a:8d:3b:e9:01:56:a0:3e:4f:52:7e:24:
37:bf:7a:0c:93:fc:6a:27:d5:e5:b9:91:28:43:7c:
92:13:cc:b9:7d:13:dc:86:0d:a9:ec:2d:1c:38:9a:
16:48:00:19:de:bf:11:7c:4a:6f:5f:9c:73:ef:d3:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1E:AD:91:FF:04:66:8D:5B:95:31:D0:4E:59:1B:29:C9:EB:9D:9D
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ah6tkf8EZo1blTHQTlkbKcnrnZ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.31.227.0/24
Signature Algorithm: sha256WithRSAEncryption
90:44:5e:c8:df:1f:ea:0f:8b:d5:b7:b0:96:11:77:a5:91:23:
c7:ed:a6:43:ab:c5:63:b3:70:fe:49:61:ad:d6:55:89:96:60:
6f:51:68:bd:62:90:40:63:37:8f:0e:61:fb:05:a8:64:59:02:
1b:13:5d:a8:38:1a:4f:d0:fb:81:59:bf:27:e9:4f:6f:35:60:
cd:1e:e4:fa:46:23:07:22:a0:0e:99:2d:55:8b:60:d7:33:88:
e8:c4:d6:42:a3:b8:64:b2:74:54:cf:c6:9b:38:26:ba:8d:d2:
63:c7:4b:2b:e6:e4:c0:4e:43:43:3c:a3:75:f2:8e:36:43:06:
8f:ec:1d:ae:10:80:68:37:14:cc:34:25:07:d2:7b:58:0c:a4:
84:8a:59:2b:2e:83:7f:4f:ea:d1:5e:a5:eb:22:19:3f:dd:08:
7c:32:43:8f:12:c7:38:84:e7:f8:d9:ba:4a:a0:8f:29:87:35:
b1:d7:21:85:33:a7:56:9a:99:9e:b2:5f:44:5f:b7:97:f4:39:
80:47:d5:55:f8:f4:05:8f:b9:d7:d1:a5:a2:28:dd:12:32:1e:
2a:01:d2:ed:46:9c:26:dc:67:49:15:b3:ed:cc:a8:4e:0b:36:
4e:8e:f6:00:f5:5a:b8:1d:57:40:60:1c:e6:ef:ee:d0:c4:71:
64:6a:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:10 2025 by rpki-client