![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/X82eGLKUoYRQV4J97oDvqmr2duY.roa
File: X82eGLKUoYRQV4J97oDvqmr2duY.roa (raw, json)
Hash identifier: JvfgNQ7cbVb44yolZ+DKEGrJnDT9VL3wALK0YecKr34=
Subject key identifier: 5F:CD:9E:18:B2:94:A1:84:50:57:82:7D:EE:80:EF:AA:6A:F6:76:E6
Certificate issuer: /CN=0CE68958C4074750F9B01967C18F50F9CB112212
Certificate serial: 0909
Authority key identifier: 0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/X82eGLKUoYRQV4J97oDvqmr2duY.roa
Signing time: Wed 29 Sep 2021 02:51:27 +0000
ROA not before: Wed 29 Sep 2021 02:51:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131620
IP address blocks: 103.116.68.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CE68958C4074750F9B01967C18F50F9CB112212
Validity
Not Before: Sep 29 02:51:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5FCD9E18B294A1845057827DEE80EFAA6AF676E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:ab:5c:5a:70:a9:2c:9a:8c:fc:fb:32:2a:
54:a5:b2:ff:c0:b3:85:d1:23:96:27:b2:36:6d:87:
04:f9:3f:d5:82:a1:9a:41:8e:00:ba:8b:98:3e:b1:
e8:49:cd:d1:d8:a5:8f:42:fe:5e:73:62:61:56:a0:
bd:c9:78:15:58:96:8d:ad:5d:cc:01:76:d6:b8:c4:
a1:03:97:21:28:44:59:5c:36:af:0d:70:46:d9:81:
30:d2:58:7d:0d:c8:bd:e0:30:71:35:b1:0c:d0:e9:
de:d1:0e:62:ce:9d:c8:07:c4:da:88:c0:ea:78:86:
34:e5:c2:48:e2:8e:14:a9:9f:40:90:49:61:03:a9:
d1:ae:2a:4b:a8:bd:24:e1:91:44:2e:c3:d2:ba:35:
90:20:19:dd:95:6b:41:22:99:4f:e6:ae:a4:84:91:
bb:78:94:d5:d4:0d:ce:d0:97:0d:49:24:5f:1d:a2:
ba:a4:6d:38:78:20:9d:6d:91:9f:30:65:d6:e9:cc:
14:97:82:39:bf:6f:32:f6:1e:8c:89:20:75:b8:a1:
be:3e:2a:af:e8:80:1c:63:69:ae:63:8e:ee:ae:fe:
9d:bb:9a:3a:a2:68:30:5e:77:6d:3b:bf:1b:07:72:
eb:44:69:29:45:f8:1d:9e:d8:85:be:b2:bc:cf:52:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CD:9E:18:B2:94:A1:84:50:57:82:7D:EE:80:EF:AA:6A:F6:76:E6
X509v3 Authority Key Identifier:
keyid:0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/X82eGLKUoYRQV4J97oDvqmr2duY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.68.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c4:11:68:60:3b:7e:38:49:53:04:47:a3:4d:99:ed:ec:d3:
8b:e8:9c:81:c8:d6:51:ed:e6:1c:4d:e3:a3:c7:81:35:cf:43:
9c:20:5c:f5:00:49:6c:be:96:71:33:b9:76:be:69:7d:6c:85:
74:77:ec:5b:c1:fc:7b:c7:44:7f:dd:62:13:84:4a:19:7c:4b:
c7:d2:80:b7:3d:83:8b:98:2f:63:ee:ce:2c:0d:cc:53:8d:3d:
6c:15:aa:5d:f1:cf:ab:c4:88:cb:93:71:57:e0:2d:f4:03:c5:
ff:4a:a8:6a:a1:e4:16:10:32:00:db:d9:ec:35:bf:43:4f:0b:
c8:a2:b5:e5:d5:44:8f:1f:15:17:af:6c:63:de:76:4c:61:83:
30:f4:a3:28:53:b3:91:1c:55:a8:16:2c:8e:28:83:c5:33:d3:
a6:64:87:54:43:05:68:a5:89:8b:ab:db:a5:95:d0:d3:04:64:
d1:fb:fb:a9:ae:d6:2b:dc:a4:e8:f9:2b:12:eb:48:b7:17:dd:
98:dd:15:64:f9:10:f5:5f:b8:9c:b2:ee:d3:7d:5a:e6:e7:91:
d7:50:af:86:9b:5b:37:1d:8f:e5:d1:93:46:07:5e:d4:53:14:
47:7a:8d:de:99:b5:77:a8:42:8f:a5:1c:ed:c9:35:a8:37:4d:
a1:d7:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:54 2025 by rpki-client