![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
File: nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa (raw, json)
Hash identifier: b3de99xwMWoP+uYXLr/mR99fTRYeQB2PSowfZHNMDKc=
Subject key identifier: 9D:CE:D4:EF:1B:B6:71:72:5B:44:DD:6C:6D:74:BD:C0:5E:B2:3D:00
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 081C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
Signing time: Tue 29 Sep 2020 09:57:46 +0000
ROA not before: Tue 29 Sep 2020 09:57:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 49.214.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 09:57:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9DCED4EF1BB671725B44DD6C6D74BDC05EB23D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:aa:7f:18:cb:9e:88:d4:03:43:12:5a:b0:
75:37:77:31:5f:1e:2b:35:a5:05:83:9f:bf:66:ce:
fd:cc:ef:6b:b5:82:8e:c6:1f:f8:fd:30:e5:3d:7e:
e5:f5:f6:95:51:93:08:5f:af:19:e0:93:d8:3b:b3:
a4:5d:7e:7d:e4:dd:b6:f0:49:23:62:10:c0:d4:67:
0c:d5:55:e1:47:a5:0c:28:c8:27:ea:47:f3:c0:e1:
2f:f1:3d:96:82:b7:18:ec:01:5e:f8:30:6c:26:e2:
22:38:82:f2:00:cd:38:12:ac:ef:a2:5e:16:dc:40:
a4:e5:72:13:79:5b:7f:22:4a:01:25:28:a7:b8:a2:
6b:69:f9:28:53:7d:d1:94:ed:3d:7b:6c:19:13:b2:
d0:84:e6:71:ed:57:b2:bc:aa:dc:0c:8c:54:de:59:
ba:f5:a5:a3:36:cd:38:d4:13:fc:86:7f:6a:ec:f6:
fe:88:ad:4e:71:51:83:25:ce:bb:ca:82:9c:5c:05:
85:a5:81:54:e6:70:fb:72:df:4b:4c:39:e4:99:58:
b8:10:69:d1:33:c0:1d:22:c4:51:8e:ae:dc:dd:54:
5a:a0:66:cd:fb:a7:5d:5b:fb:e8:62:66:24:73:87:
8b:81:f8:82:6d:a2:a8:b2:4e:c6:43:e6:44:c5:aa:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CE:D4:EF:1B:B6:71:72:5B:44:DD:6C:6D:74:BD:C0:5E:B2:3D:00
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nc7U7xu2cXJbRN1sbXS9wF6yPQA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.214.0.0/15
Signature Algorithm: sha256WithRSAEncryption
5c:dc:cd:15:79:b3:7b:86:51:e6:26:14:3d:27:3e:98:73:41:
7f:6e:a8:7e:0d:3e:f7:b6:d7:d6:f8:d5:0f:a9:b1:38:48:27:
67:b9:a9:93:6f:cb:e5:db:8b:a0:60:d7:ff:3a:53:24:16:0b:
3b:e1:1a:58:2b:a4:5c:f3:ab:d7:9b:b6:dd:91:6f:bb:10:69:
a6:bb:f4:04:e1:9b:e2:c7:67:67:55:60:65:1f:7b:54:a1:30:
f2:b2:e0:52:bb:fe:55:07:ad:2e:5b:e6:be:f9:1f:6c:40:54:
b7:04:b0:1a:c7:b8:24:fb:93:ce:ab:ce:c5:a1:cf:48:42:f7:
5d:93:5e:b7:8b:c5:8c:c1:cc:29:2d:76:be:4b:a2:93:a5:76:
9d:cf:9f:3b:f0:61:5c:ba:3e:94:5f:d5:b3:84:7c:64:95:2a:
2a:97:af:40:19:3e:10:8f:2b:0c:36:6b:74:4c:99:f1:c7:96:
db:40:9f:b1:2a:c6:2b:69:f3:93:f3:ce:f0:36:e1:ca:2e:9c:
ad:e1:95:c5:37:e9:dc:85:f1:f6:18:d5:d8:c2:60:b1:ca:90:
0a:8d:77:f1:13:6c:54:da:95:64:73:93:8e:54:97:be:14:08:
a1:cf:e1:04:82:ee:09:cf:0b:54:3f:d1:56:12:37:ed:52:1f:
1a:04:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client