![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/elhK7S6PSuSZ7eW0sBniuxf_MrY.roa
File: elhK7S6PSuSZ7eW0sBniuxf_MrY.roa (raw, json)
Hash identifier: xFk2dlFd4G8mfKgcoQIKeMHbcUWR0sylava4v0rRQ3g=
Subject key identifier: 7A:58:4A:ED:2E:8F:4A:E4:99:ED:E5:B4:B0:19:E2:BB:17:FF:32:B6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 07E4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/elhK7S6PSuSZ7eW0sBniuxf_MrY.roa
Signing time: Tue 29 Sep 2020 09:57:31 +0000
ROA not before: Tue 29 Sep 2020 09:57:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.67.144.0/20 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7A584AED2E8F4AE499EDE5B4B019E2BB17FF32B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:e2:d0:b6:ec:bc:45:24:0a:4a:c5:7a:24:
c0:19:29:19:b0:0b:69:27:71:7c:41:13:e2:67:c3:
e6:50:0b:37:e2:10:a0:11:27:a5:1b:35:ff:b3:ff:
f3:11:a6:55:a5:e4:a6:11:7a:f5:a3:c7:5e:b5:f1:
3b:71:ca:f7:1c:4c:37:ba:69:5e:36:06:39:30:31:
b6:5b:83:e5:c5:82:42:b4:18:ee:b1:96:c7:65:88:
f4:64:7a:b3:8e:29:0b:0c:ba:00:5f:fb:f6:4e:5c:
c7:bd:b6:4e:80:48:af:29:2d:1e:0e:4e:ae:b4:38:
ae:0f:97:86:14:ef:c1:b0:b9:c1:a8:ab:91:60:ee:
b6:23:fa:bf:b3:a5:46:cc:40:a7:77:e1:13:78:cc:
00:c7:f5:c1:a5:b1:fc:ac:f9:e1:e9:48:ac:74:ca:
4f:04:4e:2a:63:04:e0:95:6d:8d:48:9c:a7:29:32:
07:7a:a8:6e:4e:e1:0c:a6:e7:9f:45:ee:92:b0:c1:
6d:24:21:a8:b1:a5:2f:e5:e3:bf:0a:e1:f0:dd:66:
63:98:f9:46:5a:09:5e:59:d0:3f:5c:b1:77:70:9c:
66:6d:8b:1f:55:08:15:cf:2b:6d:29:c5:d8:8c:e9:
69:e9:29:92:70:b0:9a:97:dd:4e:11:82:3e:68:50:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:4A:ED:2E:8F:4A:E4:99:ED:E5:B4:B0:19:E2:BB:17:FF:32:B6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/elhK7S6PSuSZ7eW0sBniuxf_MrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.144.0/20
Signature Algorithm: sha256WithRSAEncryption
70:39:ba:04:30:b1:dc:f4:a3:0a:6d:eb:7d:c5:00:a0:ac:b1:
ba:38:16:6b:20:4e:b9:fc:6c:b6:d7:44:88:40:dd:49:aa:ba:
8a:48:7f:2a:c8:37:b5:07:43:0f:ce:37:3c:7f:95:67:bb:93:
bd:9d:6c:a3:65:59:8b:bf:3d:ee:03:cd:e4:ea:e6:50:78:b8:
3e:5d:45:b2:d6:97:67:30:fe:ae:fd:6a:15:b8:fe:03:33:a9:
26:45:fc:62:f7:b0:7d:99:84:5b:8e:fa:51:3e:0e:21:e9:ec:
45:07:a1:26:a5:fb:c7:7f:1f:ee:34:46:c6:2d:9f:0d:81:86:
3e:c8:99:28:52:a8:cd:96:70:b8:43:06:7b:2a:49:d3:6b:3a:
86:d5:12:8d:b5:48:2f:8b:76:0f:b9:ba:34:22:1b:83:55:e0:
16:76:d1:3a:3b:c9:a6:b5:01:e2:35:8d:9f:ab:bd:ee:af:c6:
dc:01:42:1c:ad:48:92:7a:ab:4c:69:2d:e0:79:35:c6:b4:b5:
ca:da:ea:3b:27:ff:fe:b5:9e:43:1c:2b:ab:b2:53:e7:46:ff:
8b:75:7e:6c:1e:05:e2:ed:55:86:37:ff:54:0f:f9:a4:d8:7e:
7f:2c:81:90:c7:89:6f:83:83:cb:bc:ec:8b:e5:73:0c:2d:8f:
e1:73:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:23 2025 by rpki-client