![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
File: uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa (raw, json)
Hash identifier: tmNLN3zNXpHWRsrd0aICSsEn5rvv1Mq1YddtmfJO+xE=
Subject key identifier: BB:26:7B:C5:65:97:D6:82:BE:F4:88:29:B6:9D:0B:CC:DC:5C:53:E7
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 0988
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
Signing time: Wed 16 Dec 2020 02:19:36 +0000
ROA not before: Wed 16 Dec 2020 02:19:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 210.17.43.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440 (0x988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Dec 16 02:19:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB267BC56597D682BEF48829B69D0BCCDC5C53E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:c8:8a:b0:c1:3d:f3:49:b4:12:02:eb:cd:
42:c9:f4:4e:f9:61:b9:a6:19:0b:c8:a0:45:89:7b:
f3:28:23:2e:4c:9d:7f:d9:2d:df:45:a5:6a:28:21:
2a:4a:f8:bb:1a:da:10:c2:8d:98:ca:93:fb:88:2f:
40:69:13:7a:03:9f:5e:f6:c0:d4:d1:00:d6:ac:63:
d6:c1:cb:57:93:74:1c:2a:d2:0e:ff:35:ab:06:27:
3e:c0:c7:50:10:cb:77:d8:ed:e5:8d:42:a9:a9:73:
80:60:11:aa:87:34:74:a5:6e:88:86:40:e4:8a:0e:
92:cc:0a:d1:f3:83:7c:bd:fe:e0:60:8c:a0:1a:01:
85:10:5b:83:76:f8:eb:9d:ce:9f:7a:74:40:4e:3e:
f0:11:ef:32:ae:6e:24:25:e5:45:40:62:2b:d1:ac:
d5:02:c2:a0:af:b3:da:d7:7d:b3:3a:b9:8d:99:06:
11:e3:7a:f6:3e:45:f2:a4:2d:7c:b5:37:32:85:23:
ff:72:0e:30:46:78:3f:2e:f8:0d:ce:3a:a8:db:8b:
24:db:5f:3f:cb:eb:82:01:16:81:32:a1:e3:fe:09:
79:eb:e1:cf:79:ab:ed:07:83:c1:98:01:b9:49:b2:
6d:82:35:fc:59:8d:a5:a8:e2:74:e9:6d:3e:f6:b0:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:26:7B:C5:65:97:D6:82:BE:F4:88:29:B6:9D:0B:CC:DC:5C:53:E7
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/uyZ7xWWX1oK-9Igptp0LzNxcU-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.17.43.0/24
Signature Algorithm: sha256WithRSAEncryption
45:28:88:a6:52:c1:1f:6b:30:b9:cd:72:60:06:23:62:b3:74:
7f:b4:bc:80:3d:c4:a2:8f:0e:e2:91:62:ee:c2:53:cb:7d:12:
0f:e6:ef:16:5e:c6:1a:21:1c:69:b7:38:f9:a2:c5:7d:52:33:
2d:a2:22:c6:a2:bb:dc:1f:39:86:0e:7a:ed:8b:fb:cb:c5:82:
52:1e:4a:ec:74:a0:5a:97:87:1d:d5:b4:8d:f3:51:68:d8:97:
1a:94:07:ab:e4:1a:a7:7a:d9:6c:e2:52:7a:ff:b7:d5:b6:19:
ce:f6:df:97:01:00:7a:ab:7c:75:89:e7:61:0c:b9:ae:73:dc:
5f:62:85:5b:89:a6:ae:c6:4f:4f:f6:00:97:a7:03:a4:86:34:
71:ca:fb:95:75:c7:f6:71:0f:6c:7b:d6:99:84:c8:90:47:3f:
ed:81:a8:d9:5a:31:83:80:03:12:2d:27:23:b4:84:ea:7a:53:
11:81:bf:94:fd:cc:a0:ff:f0:79:1e:06:dd:a4:c3:b2:84:f6:
a0:eb:fe:d5:78:38:82:a2:1e:cc:78:bb:f8:1e:cd:0a:ae:2c:
7e:34:ed:8a:ae:1f:d5:82:af:ef:d6:31:59:e9:42:16:66:0e:
34:5c:91:cb:80:e8:cf:c7:e8:77:8a:5d:d0:1f:fd:bc:6a:8a:
b7:72:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:56 2025 by rpki-client