![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
File: ecu-LGpoilB8dmERc6hjm-7qI0U.roa (raw, json)
Hash identifier: +mrPGsnR8E3Mh4veIJJ/bORK/R3sbvAAMyvPGGNXgOw=
Subject key identifier: 79:CB:BE:2C:6A:68:8A:50:7C:76:61:11:73:A8:63:9B:EE:EA:23:45
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C44
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
Signing time: Wed 29 Sep 2021 02:49:37 +0000
ROA not before: Wed 29 Sep 2021 02:49:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 43.240.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3140 (0xc44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=79CBBE2C6A688A507C76611173A8639BEEEA2345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:35:4b:9b:fc:da:70:61:d1:92:32:c2:14:
9f:90:8a:f3:39:e9:67:b2:e6:e5:80:bb:d4:dd:aa:
b0:31:19:2d:80:dd:6b:9c:de:5a:6c:42:89:0e:bf:
05:74:fd:d0:9d:6a:37:63:3b:01:6c:56:d5:e9:bd:
27:ad:2a:ce:e4:81:ce:0e:99:21:12:25:0d:53:5b:
1e:26:b7:c1:80:8f:f8:46:c6:6c:d7:5a:f0:fe:ab:
f3:ae:3e:db:82:99:ae:06:82:1d:96:79:a6:b5:c3:
ed:51:b1:73:80:ff:95:f8:33:21:c8:9b:7d:18:81:
3e:20:c9:6c:92:14:99:85:87:29:91:d5:5a:a2:b3:
41:10:81:48:48:67:4e:cf:21:de:a1:e1:e4:ab:c9:
8e:f8:e1:31:91:73:7b:fe:d8:1e:f1:00:dc:36:5c:
db:ce:45:98:7d:d1:cb:48:8d:e4:76:8d:5a:c8:1b:
a1:bd:ed:4e:a9:78:e5:2e:c6:36:69:61:ae:c6:ee:
c5:65:25:1d:9b:1e:32:33:e2:54:ba:4f:d3:1b:64:
72:1f:75:ce:f6:ef:c4:44:3c:7f:ff:e9:c7:05:3d:
48:01:84:de:6d:1c:c9:cc:46:42:81:d1:fe:14:2c:
9d:f7:da:9b:a2:79:39:22:a1:f2:ce:1b:66:e9:8b:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:BE:2C:6A:68:8A:50:7C:76:61:11:73:A8:63:9B:EE:EA:23:45
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ecu-LGpoilB8dmERc6hjm-7qI0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.24.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a2:66:e9:0a:4b:b2:fd:53:33:d6:c9:bf:ca:34:c1:f1:7c:
bb:8f:a8:34:89:51:fb:22:50:07:9b:3d:57:17:99:f0:14:1b:
fe:4f:0f:76:b4:8d:2e:ce:ee:47:bb:0e:a0:4d:a6:3c:0e:1e:
89:9a:a6:53:e8:44:0b:d0:ed:96:83:77:79:47:be:26:65:0a:
75:f5:fc:c0:67:35:57:06:34:27:16:2d:c6:36:ff:0b:68:93:
8b:cc:f7:1e:78:61:a5:f4:ef:ef:92:78:4e:02:90:bf:de:91:
27:21:fd:e0:fd:6c:f0:f6:c1:e1:1a:af:b7:02:5b:47:07:26:
54:7b:95:58:3a:2c:6f:3e:3c:77:64:07:1c:31:b0:3a:43:0c:
85:aa:da:c3:5d:8d:f9:0a:f9:a7:6c:71:4a:f3:7e:3a:75:58:
b5:e1:25:0d:ec:26:99:b6:49:7f:f4:50:ce:b0:9d:f4:d6:01:
ca:d4:be:00:5e:51:78:56:09:f7:a4:57:9d:48:f0:e5:0f:0a:
e5:a1:46:0b:f9:84:97:fb:58:b8:84:db:35:5e:3c:4d:bc:56:
d8:ff:15:45:de:72:88:24:a7:49:d6:d0:7f:1e:32:bb:08:a2:
14:e7:02:a8:0d:96:e1:e1:60:46:7c:40:b4:7d:c1:ab:2d:b0:
56:31:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:34 2025 by rpki-client