![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dax5d8g000bK-GVetdmkHxbE1F4.roa
File: dax5d8g000bK-GVetdmkHxbE1F4.roa (raw, json)
Hash identifier: pSwT+nHo65hKFxHZiqFF7lhuaDs7WozemwMHqfs5tyw=
Subject key identifier: 75:AC:79:77:C8:34:D3:46:CA:F8:65:5E:B5:D9:A4:1F:16:C4:D4:5E
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C67
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dax5d8g000bK-GVetdmkHxbE1F4.roa
Signing time: Wed 29 Sep 2021 02:49:47 +0000
ROA not before: Wed 29 Sep 2021 02:49:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.208.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3175 (0xc67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=75AC7977C834D346CAF8655EB5D9A41F16C4D45E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:66:f2:0f:dc:d4:c6:fc:15:03:44:8f:04:
c1:16:78:53:1c:c1:cf:ea:13:cb:b4:c0:c8:7d:56:
dc:ac:e5:a4:38:e2:2d:20:dc:9f:4f:d9:7d:cc:68:
77:3b:f0:57:4b:67:9a:00:86:e1:e4:5e:25:97:d2:
97:94:73:ad:bf:08:ec:85:85:aa:18:b8:b7:1b:9c:
68:49:18:b5:b1:ae:93:93:47:7e:a1:d4:31:ca:2c:
ac:cc:3b:fd:dc:36:21:5b:c3:d6:d2:32:90:2c:ff:
ae:b4:eb:d7:2f:f3:99:52:d3:10:14:ec:4d:c2:08:
cc:cf:65:c6:df:a8:21:9c:9a:10:10:96:be:4d:3a:
82:24:2c:c0:68:06:52:d7:fd:f9:2d:eb:50:2c:83:
23:2c:68:a1:4e:8e:10:04:a4:dc:db:d7:89:b5:f2:
ae:3a:b9:21:d6:12:1c:9e:17:28:5e:3e:9d:18:27:
63:f9:de:1f:ab:bf:60:d0:d1:06:d0:a5:6b:75:d8:
f7:3e:5d:fc:68:d6:75:c7:1a:0d:e9:10:7f:ae:2c:
ce:fb:6e:d2:6d:3e:73:a1:a0:31:a6:bc:a1:0d:53:
5d:cd:5f:53:42:41:7e:d2:43:20:d8:2a:8d:ff:99:
ee:83:a8:af:c7:b7:a3:99:53:2d:f4:35:2e:2c:ab:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AC:79:77:C8:34:D3:46:CA:F8:65:5E:B5:D9:A4:1F:16:C4:D4:5E
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/dax5d8g000bK-GVetdmkHxbE1F4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.208.192.0/18
Signature Algorithm: sha256WithRSAEncryption
24:18:f1:9e:cc:50:8d:9f:4a:3a:05:d1:e3:ac:71:5f:35:9f:
2f:c1:6e:29:74:c6:bc:18:6c:fe:ae:47:bd:bc:9d:b7:60:89:
5c:93:39:43:14:4e:8f:47:01:9a:2d:9f:6c:1b:47:92:07:2f:
9d:10:d7:8b:ab:71:46:e3:f7:c9:0e:7e:a4:19:65:ae:2e:66:
78:66:6b:40:c1:0c:77:de:b2:93:e5:8a:d8:4f:fc:75:39:47:
ec:2e:c8:37:c1:31:dd:85:09:10:58:c3:78:83:e5:36:14:67:
36:50:34:c1:c5:66:31:53:8b:c5:27:fc:a1:60:04:55:e1:a5:
fe:fc:f5:39:be:61:82:d9:b1:e0:c6:4e:2a:e8:d8:1a:2f:00:
c4:54:40:6b:8b:0a:cc:54:b8:f9:98:de:be:38:dd:f5:7c:db:
b4:1e:bb:7e:2f:b1:f7:bc:38:a7:d4:e1:e0:e2:7e:9e:40:19:
64:fe:98:bb:1a:92:30:9e:fa:ba:c9:78:3f:16:e3:cf:41:64:
5b:57:40:cd:ba:37:bd:e7:78:78:e2:43:09:7b:da:b4:09:6e:
a4:cd:32:a8:2e:7a:1d:26:95:4a:ec:85:4a:16:fd:09:02:32:
e1:8b:b1:fd:6e:5b:f6:c7:76:23:26:03:be:8a:3a:75:8f:72:
5b:d5:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:09 2025 by rpki-client