![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
File: BfEaUjEJLm6ydzgZTfrAMkxThdM.roa (raw, json)
Hash identifier: 7/oRGxUGRrxucj9e1czV1oXCbCc/HKe+tV3xFWiuw+M=
Subject key identifier: 05:F1:1A:52:31:09:2E:6E:B2:77:38:19:4D:FA:C0:32:4C:53:85:D3
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 09BE
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
Signing time: Wed 29 Sep 2021 02:38:35 +0000
ROA not before: Wed 29 Sep 2021 02:38:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9676
IP address blocks: 61.60.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2494 (0x9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 29 02:38:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=05F11A5231092E6EB27738194DFAC0324C5385D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:3a:85:40:4d:ad:17:cf:2c:7e:f5:6a:2e:
d7:96:9a:37:40:f6:7b:6a:0e:f5:49:79:52:b5:0f:
77:da:2e:b1:0d:40:da:c6:74:32:22:8c:56:67:b4:
a6:9f:6f:cc:ad:b6:38:ee:db:5f:34:a3:7f:30:a9:
01:82:b1:08:db:b8:bd:d1:c2:a0:38:88:f9:dc:41:
91:f4:5a:10:96:85:a7:b7:61:b6:a1:bc:da:97:dd:
07:1a:27:a3:96:4d:17:a5:a1:84:84:f9:04:f9:3c:
57:0d:ec:1d:29:12:5f:93:dd:2b:94:f0:ec:fa:bd:
61:76:ec:df:ff:1e:48:1c:96:82:52:8a:5b:b6:6c:
05:e7:67:f5:0e:f9:c7:30:3d:33:5c:f4:0b:47:51:
85:1b:06:e5:71:e6:35:69:20:3c:0e:17:e5:10:2d:
6a:98:80:d3:11:8e:e5:55:ec:8a:c0:08:35:f2:d1:
17:14:dc:08:4e:8b:a8:d1:5e:0a:a9:38:fd:3e:82:
f0:50:c2:44:98:fe:4d:c1:84:48:9f:64:54:75:bb:
2b:65:ed:10:23:19:65:b9:4f:db:73:85:fa:41:0f:
6a:98:e0:43:d5:dd:4d:89:c2:32:51:9e:df:70:f4:
5c:60:bf:0f:2e:6f:19:13:73:16:3a:06:b7:31:d7:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F1:1A:52:31:09:2E:6E:B2:77:38:19:4D:FA:C0:32:4C:53:85:D3
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/BfEaUjEJLm6ydzgZTfrAMkxThdM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:bd:8a:2b:25:08:c0:bd:36:e1:4e:02:b7:75:bb:7f:b1:e2:
28:77:27:86:47:91:e5:72:bb:19:be:9f:a1:23:50:dc:08:48:
26:5a:eb:f7:dc:cf:fd:f1:c9:02:a8:e0:be:2c:fd:db:42:b8:
2b:db:f8:c8:ab:a3:15:62:44:64:70:a2:f6:26:f1:6f:d0:93:
97:45:83:bb:19:2e:26:76:6c:c1:70:46:48:af:51:5f:10:48:
c6:7b:af:86:9b:39:bc:4b:30:2e:89:b2:5d:3e:b7:32:91:56:
5a:5d:ff:c0:cf:9c:c4:e8:e6:07:2d:d6:5d:70:83:e0:1e:b8:
cf:ee:a4:bd:23:dd:b4:0a:f3:30:ef:5e:be:32:42:8a:a8:b0:
99:ac:32:36:3e:fa:14:7e:8f:1e:43:32:e2:9a:fd:1e:91:4e:
8c:26:c7:9e:3f:f5:87:7a:52:2f:bc:b0:b7:c6:66:21:1a:e1:
c9:85:72:6b:ec:ff:e9:57:d0:e2:cb:38:99:10:68:9f:b0:e4:
ec:15:55:39:07:a6:0c:da:cc:66:52:f5:f1:8e:34:86:63:ec:
f5:0c:18:ba:ec:65:c7:a0:14:39:9c:d6:93:5c:58:25:a1:05:
3b:d6:e9:a7:8d:48:d1:4b:c8:f5:32:45:3f:6c:95:b6:3f:b3:
ec:d5:2a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:07 2025 by rpki-client