![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/TboboULGjRqxZw50fV0r5ThHpl0.roa
File: TboboULGjRqxZw50fV0r5ThHpl0.roa (raw, json)
Hash identifier: s2TA6rn6Joyosx43MtSDVbgguuwHoLytpTu7lPp8Z8Q=
Subject key identifier: 4D:BA:1B:A1:42:C6:8D:1A:B1:67:0E:74:7D:5D:2B:E5:38:47:A6:5D
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 07A2
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/TboboULGjRqxZw50fV0r5ThHpl0.roa
Signing time: Tue 29 Sep 2020 10:05:48 +0000
ROA not before: Tue 29 Sep 2020 10:05:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9676
IP address blocks: 60.245.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954 (0x7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 29 10:05:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4DBA1BA142C68D1AB1670E747D5D2BE53847A65D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:43:7d:29:87:60:3e:10:b2:b7:50:af:89:18:
03:59:98:e1:91:64:f5:dc:e7:bb:f4:02:eb:f1:47:
8f:03:c4:d3:46:c5:36:e5:28:98:08:b2:54:a5:fb:
ae:c7:55:71:17:67:61:92:51:41:5e:34:cc:ce:2e:
e0:5d:ae:f8:2c:c3:55:05:4e:c5:79:3c:2f:e5:81:
39:07:54:ba:1a:e7:2c:79:8c:f9:1f:39:2e:9a:e0:
bc:1a:ec:a4:cf:26:82:a0:ae:63:8f:1f:e8:a2:2d:
3f:3c:90:2d:5a:02:1b:b7:02:11:6f:a2:61:9d:25:
3d:1a:4a:87:c2:18:9f:02:e8:3f:d6:4e:35:6a:68:
76:d5:63:81:2a:6a:a0:4b:ca:e3:80:39:a6:b0:bc:
9d:03:05:de:bc:b4:88:0c:13:4e:e1:d6:25:62:58:
62:15:ec:3f:cb:6f:16:70:fc:4e:d5:de:a4:38:3f:
96:fa:37:16:67:f8:58:0c:a0:5c:62:74:9c:04:90:
63:1d:5f:17:bf:8b:f4:b7:d0:bf:fe:b2:84:0f:ab:
28:ef:4e:f5:ea:c4:8d:09:03:77:ba:4e:5a:1d:a8:
bd:96:be:eb:d7:e4:95:78:60:b8:11:69:88:3c:cf:
08:dd:2b:77:69:61:65:f1:7e:39:fe:3d:25:5d:53:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:1B:A1:42:C6:8D:1A:B1:67:0E:74:7D:5D:2B:E5:38:47:A6:5D
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/TboboULGjRqxZw50fV0r5ThHpl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.0.0/18
Signature Algorithm: sha256WithRSAEncryption
60:cb:bf:57:b7:de:bd:f9:bb:6b:24:59:90:f3:b3:1b:9e:2e:
de:03:5f:ce:e3:b9:5f:0c:81:dd:e5:9d:da:99:74:92:03:7b:
96:76:bc:d4:16:b6:44:fc:e8:65:86:a1:29:8e:b4:4b:4a:db:
92:be:f2:57:67:00:8d:b3:28:27:a7:05:a8:e5:d0:c2:a6:53:
9e:5a:a1:e1:c7:77:d2:8c:ce:11:88:ba:06:d4:96:39:9d:87:
45:ee:59:60:3f:ae:d6:f1:8e:50:19:d9:7a:8f:ec:3f:48:15:
ec:dd:1d:9e:c3:b4:01:4b:0a:82:41:f1:82:a9:58:44:3f:e0:
94:ac:61:9c:83:01:9a:2e:56:2b:bf:46:b5:00:cc:bd:ec:f9:
b8:12:29:fe:32:5d:d3:a4:ee:28:20:e4:d1:fe:24:9a:a0:d4:
9b:72:bc:b7:65:29:47:b7:1b:b3:9a:c7:a0:ce:d0:36:08:b0:
5e:c8:96:a3:d9:4e:26:03:01:d1:fd:82:b4:3e:1f:9c:ee:ad:
26:dd:73:1d:a5:e7:64:70:d0:53:03:7f:3a:b6:4b:11:eb:6b:
09:cd:4d:e7:f1:bc:9d:1f:b0:a9:b6:ff:c4:39:a2:49:4d:73:
d8:ae:d6:10:78:5d:2e:3f:ba:0a:83:9a:66:ec:f9:4b:e6:34:
a9:70:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:40 2025 by rpki-client