![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sl7mukDu_pbwEP6wF3SjvQOHB6E.roa
File: sl7mukDu_pbwEP6wF3SjvQOHB6E.roa (raw, json)
Hash identifier: x9HQLH+JAl1FmvgCahtCz9YwM43RCOMxw3tf+pRFU4U=
Subject key identifier: B2:5E:E6:BA:40:EE:FE:96:F0:10:FE:B0:17:74:A3:BD:03:87:07:A1
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0C3C
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sl7mukDu_pbwEP6wF3SjvQOHB6E.roa
Signing time: Wed 29 Sep 2021 02:49:35 +0000
ROA not before: Wed 29 Sep 2021 02:49:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 210.17.7.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Sep 29 02:49:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B25EE6BA40EEFE96F010FEB01774A3BD038707A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:ac:08:ce:f6:16:e0:29:6c:2c:2f:44:3a:
ed:3a:76:ee:36:de:5c:37:76:10:e6:07:ce:44:6e:
c7:59:cc:03:ff:80:29:54:b9:89:9c:8e:08:11:1b:
aa:a2:58:aa:81:63:eb:79:2d:b5:56:59:7b:28:6a:
85:d3:58:10:d6:c8:66:95:3f:d2:55:e1:08:79:eb:
cb:21:32:8b:77:08:ab:02:b4:38:25:62:a2:78:cb:
86:9a:08:b4:f0:90:cc:43:be:bf:b9:69:f2:76:a8:
1f:ac:17:98:ef:c2:24:07:4f:62:eb:a8:43:33:46:
23:fd:95:17:72:a6:c1:87:24:ee:33:0f:95:d8:52:
19:2f:12:97:7c:81:4b:bc:85:58:8b:54:85:66:d8:
95:4a:59:9e:09:d8:82:08:64:32:31:b1:4e:04:77:
67:bc:46:a0:82:2b:ca:1a:24:8f:46:ca:90:5d:96:
4c:30:ac:1f:28:36:eb:e0:15:b8:5a:93:5d:7b:c4:
29:08:b9:6c:82:e1:89:3c:0a:3d:70:8b:37:19:cf:
96:6e:57:1c:38:2a:9f:13:a1:bd:a1:48:0b:90:b9:
1b:b9:56:27:36:64:05:35:1f:42:10:18:42:c8:92:
46:36:8a:a8:5d:27:92:69:17:dc:85:af:5f:45:e8:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:E6:BA:40:EE:FE:96:F0:10:FE:B0:17:74:A3:BD:03:87:07:A1
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sl7mukDu_pbwEP6wF3SjvQOHB6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2c:55:8d:c3:59:28:40:0b:c0:96:45:7b:13:19:25:cf:76:
e4:b2:0d:32:5d:17:52:41:a7:bb:89:4f:06:d6:6f:c5:3d:f9:
16:21:38:53:cc:5b:76:8d:05:bf:76:18:d7:59:5b:99:50:98:
bd:d5:cd:85:87:b8:82:44:96:37:7f:99:08:1b:3b:ab:d3:eb:
8c:e7:18:3b:02:1f:2a:c1:29:8e:b2:b8:73:8b:1f:3a:7a:52:
76:6a:24:5d:b7:3c:8d:e5:fe:fa:1c:01:c5:a5:8f:26:69:b4:
49:91:d8:6f:ab:5d:ee:25:11:94:b4:95:a4:78:1c:d8:f5:39:
f3:0f:f4:10:17:01:d9:bb:1a:93:7c:6c:b2:cc:e5:68:eb:84:
76:31:a6:d8:5b:fd:e8:da:99:ae:9f:76:d3:58:66:03:d2:7e:
7c:7c:8e:1e:21:f3:6d:b9:a2:53:fb:99:1e:e8:ee:2e:f0:5d:
65:0a:02:f1:46:f3:f1:81:fd:21:e6:ff:85:e7:9d:3c:ad:35:
0f:06:5e:65:b6:65:fa:21:41:e3:6c:00:09:87:50:af:2d:6a:
5b:fb:7a:e3:bb:18:ef:15:7c:a2:83:44:40:0b:70:b0:4f:02:
59:f3:a3:cb:f7:d5:bd:a3:e8:09:21:68:e2:49:04:0b:d3:b5:
10:5d:f3:ad
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMTA5Mjkw
MjQ5MzVaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEIyNUVFNkJBNDBFRUZF
OTZGMDEwRkVCMDE3NzRBM0JEMDM4NzA3QTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVvKwIzvYW4ClsLC9EOu06du423lw3dhDmB85EbsdZzAP/gClU
uYmcjggRG6qiWKqBY+t5LbVWWXsoaoXTWBDWyGaVP9JV4Qh568shMot3CKsCtDgl
YqJ4y4aaCLTwkMxDvr+5afJ2qB+sF5jvwiQHT2LrqEMzRiP9lRdypsGHJO4zD5XY
UhkvEpd8gUu8hViLVIVm2JVKWZ4J2IIIZDIxsU4Ed2e8RqCCK8oaJI9GypBdlkww
rB8oNuvgFbhak117xCkIuWyC4Yk8Cj1wizcZz5ZuVxw4Kp8Tob2hSAuQuRu5Vic2
ZAU1H0IQGELIkkY2iqhdJ5JpF9yFr19F6NO3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUsl7mukDu/pbwEP6wF3SjvQOHB6EwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvc2w3bXVrRHVfcGJ3RVA2
d0YzU2p2UU9IQjZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANIRBzANBgkqhkiG9w0BAQsFAAOCAQEAPixVjcNZKEALwJZFexMZJc925LINMl0X
UkGnu4lPBtZvxT35FiE4U8xbdo0Fv3YY11lbmVCYvdXNhYe4gkSWN3+ZCBs7q9Pr
jOcYOwIfKsEpjrK4c4sfOnpSdmokXbc8jeX++hwBxaWPJmm0SZHYb6td7iURlLSV
pHgc2PU58w/0EBcB2bsak3xssszlaOuEdjGm2Fv96NqZrp9201hmA9J+fHyOHiHz
bbmiU/uZHujuLvBdZQoC8Ubz8YH9Ieb/heedPK01DwZeZbZl+iFB42wACYdQry1q
W/t647sY7xV8ooNEQAtwsE8CWfOjy/fVvaPoCSFo4kkEC9O1EF3zrQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:10:40 2025 by rpki-client