![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/feOM2VecJHXgzPELnH-3zWvFalc.roa
File: feOM2VecJHXgzPELnH-3zWvFalc.roa (raw, json)
Hash identifier: aiKPFcDGp0iiThaT0GMbyvYjln1OuXCJjzS1cqZ23wk=
Subject key identifier: 7D:E3:8C:D9:57:9C:24:75:E0:CC:F1:0B:9C:7F:B7:CD:6B:C5:6A:57
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0AD2
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/feOM2VecJHXgzPELnH-3zWvFalc.roa
Signing time: Sun 07 Feb 2021 11:40:33 +0000
ROA not before: Sun 07 Feb 2021 11:40:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 203.77.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Feb 7 11:40:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7DE38CD9579C2475E0CCF10B9C7FB7CD6BC56A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:da:e6:cf:65:d2:f6:51:4c:1c:df:a4:82:2b:
9f:bf:aa:6c:5e:d4:3d:74:d5:b0:55:28:35:d6:08:
3f:df:05:80:c5:3b:06:74:ad:50:bd:47:23:c9:c9:
bc:2f:00:5f:81:2a:85:c0:a9:f0:d8:da:ab:5f:32:
75:de:22:29:b6:c7:90:8a:ee:85:14:30:b8:0a:b7:
1a:5e:66:d7:1e:7e:42:69:01:f9:03:39:df:ea:df:
86:0c:7e:29:96:c3:65:0c:02:12:cc:95:1d:d7:c3:
68:c6:1d:f6:a7:37:db:b7:24:9d:e1:0d:a8:d5:0b:
2d:06:e7:d5:8f:a7:b5:c9:29:fd:98:d7:15:7e:c1:
fb:78:ca:a7:f0:59:75:b4:98:1e:1a:83:de:f4:79:
7e:fb:f9:41:ca:4b:0d:77:d5:af:a5:a4:39:0e:56:
22:65:d7:cc:cb:4a:52:34:bb:82:f0:08:e7:e3:8d:
1e:21:2c:b8:15:20:3f:e5:ef:cb:00:80:c8:b5:ed:
02:15:9b:60:f9:0a:87:6a:74:78:4a:a4:cd:2c:26:
0a:69:36:b7:4a:9c:36:0e:f8:f0:a7:25:4f:48:c9:
22:ce:76:35:2e:a8:16:df:dd:8c:00:f7:0e:b6:98:
f5:00:cc:f2:18:a1:ff:b6:05:64:f3:0f:56:c8:f4:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:8C:D9:57:9C:24:75:E0:CC:F1:0B:9C:7F:B7:CD:6B:C5:6A:57
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/feOM2VecJHXgzPELnH-3zWvFalc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.40.0/21
Signature Algorithm: sha256WithRSAEncryption
96:fa:ef:32:6a:19:d3:c3:c1:4f:86:7f:e1:56:87:25:da:0f:
9a:2d:e8:a7:e0:b9:a2:2d:d6:26:84:e2:5f:c9:99:50:a8:3c:
b2:3f:7c:bf:fb:3a:90:f1:ef:80:b4:3b:63:6b:b0:35:35:c9:
be:fe:f0:5e:16:06:85:66:11:91:a0:2b:03:11:7f:45:6f:7d:
57:e1:3a:bf:ca:57:2b:99:9a:f8:b0:01:11:ad:0a:e0:15:1f:
e5:2d:9e:38:7c:2b:fc:d8:01:3c:b8:2c:cd:9b:85:fa:fd:a9:
61:73:35:d7:ed:7f:9f:dc:07:ef:d2:ab:5a:12:e9:30:0f:00:
05:c3:ca:12:bb:80:54:92:c5:48:f3:98:f4:72:4a:b1:64:84:
85:47:a7:7d:f3:9f:b4:1d:8a:19:51:99:f4:ad:78:c7:ec:4d:
f4:59:69:2c:1c:91:0e:a4:84:56:11:23:4f:90:b9:05:eb:0a:
65:03:f7:4d:f0:ae:5c:40:89:f1:eb:90:6c:25:b2:ae:fd:23:
f5:fa:e5:82:80:c4:50:83:af:ba:8f:dd:20:8b:82:b4:2b:30:
24:5c:3a:4e:ab:bf:12:f5:7d:63:0e:8c:ef:6a:d1:cd:41:40:
7b:f6:1d:6e:f4:bb:7a:0b:0a:71:f8:84:74:38:0b:5d:f0:83:
3b:b9:aa:f2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTAyMDcx
MTQwMzNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdERTM4Q0Q5NTc5QzI0
NzVFMENDRjEwQjlDN0ZCN0NENkJDNTZBNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD72ubPZdL2UUwc36SCK5+/qmxe1D101bBVKDXWCD/fBYDFOwZ0
rVC9RyPJybwvAF+BKoXAqfDY2qtfMnXeIim2x5CK7oUUMLgKtxpeZtcefkJpAfkD
Od/q34YMfimWw2UMAhLMlR3Xw2jGHfanN9u3JJ3hDajVCy0G59WPp7XJKf2Y1xV+
wft4yqfwWXW0mB4ag970eX77+UHKSw131a+lpDkOViJl18zLSlI0u4LwCOfjjR4h
LLgVID/l78sAgMi17QIVm2D5CodqdHhKpM0sJgppNrdKnDYO+PCnJU9IySLOdjUu
qBbf3YwA9w62mPUAzPIYof+2BWTzD1bI9IUfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUfeOM2VecJHXgzPELnH+3zWvFalcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZmVPTTJWZWNKSFhnelBF
TG5ILTN6V3ZGYWxjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A8tNKDANBgkqhkiG9w0BAQsFAAOCAQEAlvrvMmoZ08PBT4Z/4VaHJdoPmi3op+C5
oi3WJoTiX8mZUKg8sj98v/s6kPHvgLQ7Y2uwNTXJvv7wXhYGhWYRkaArAxF/RW99
V+E6v8pXK5ma+LABEa0K4BUf5S2eOHwr/NgBPLgszZuF+v2pYXM11+1/n9wH79Kr
WhLpMA8ABcPKEruAVJLFSPOY9HJKsWSEhUenffOftB2KGVGZ9K14x+xN9FlpLByR
DqSEVhEjT5C5BesKZQP3TfCuXECJ8euQbCWyrv0j9frlgoDEUIOvuo/dIIuCtCsw
JFw6Tqu/EvV9Yw6M72rRzUFAe/YdbvS7egsKcfiEdDgLXfCDO7mq8g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:30 2025 by rpki-client