![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
File: 2n6EvR9AyN7tJnEFuXfQPCutSwo.roa (raw, json)
Hash identifier: SqELL1MKsuyqKm/6YJ8v1OwVJ4aQktx9YFZRaClYwAM=
Subject key identifier: DA:7E:84:BD:1F:40:C8:DE:ED:26:71:05:B9:77:D0:3C:2B:AD:4B:0A
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0BA8
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
Signing time: Fri 01 Sep 2023 09:44:06 +0000
ROA not before: Fri 01 Sep 2023 09:44:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38047
IP address blocks: 2402:c340:cacb::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 1 09:44:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA7E84BD1F40C8DEED267105B977D03C2BAD4B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:a8:28:0f:44:49:8b:c9:5c:82:67:59:50:
88:0a:68:7a:e5:f0:15:42:70:a6:33:d2:84:7c:01:
f6:dd:61:ca:b9:a6:71:1c:07:61:a5:61:c2:5d:3a:
6a:02:07:16:19:c5:fc:b1:c5:17:69:cb:01:b7:26:
02:a3:1e:cb:c4:92:c4:e5:22:ee:df:0e:8b:7c:d8:
6f:d7:38:69:5e:80:a7:7c:9b:53:79:9b:ce:66:0e:
14:9e:f2:13:03:ba:04:ec:d4:14:cb:39:7c:21:0a:
4d:32:69:19:1d:95:6e:87:0d:4b:3e:96:65:fc:f6:
03:ce:1e:d1:fa:32:04:8d:25:6a:04:0f:0b:d2:fa:
f9:af:0a:ff:93:c0:f4:fe:8b:b4:85:bf:3b:90:3a:
56:e2:af:6f:b7:d9:9b:33:ce:64:dc:67:d4:45:96:
57:02:c9:52:6a:c9:11:1a:28:42:66:fb:5c:28:4f:
17:1b:30:38:e1:7d:eb:d6:bf:7e:bf:0e:d9:25:1e:
8d:fd:c2:17:54:e4:fc:26:17:f2:48:c8:a0:9b:30:
63:34:c3:72:7d:6f:56:87:cd:17:74:c4:29:13:4a:
1e:5e:1c:54:21:95:1e:e6:8b:82:3c:10:1b:d8:58:
fd:1e:f4:a0:53:2a:11:b2:ab:88:d0:ce:98:50:64:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:84:BD:1F:40:C8:DE:ED:26:71:05:B9:77:D0:3C:2B:AD:4B:0A
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/2n6EvR9AyN7tJnEFuXfQPCutSwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340:cacb::/48
Signature Algorithm: sha256WithRSAEncryption
42:a5:86:1a:8d:9c:ba:a0:12:9c:00:3e:c0:0e:52:5d:1f:da:
2c:86:28:69:a5:21:ed:f2:f0:f7:65:6d:09:90:f8:92:f0:7f:
70:93:c7:c9:75:fe:df:a3:2f:b6:3e:40:f4:04:33:e7:49:c1:
b2:e0:0b:7a:bc:1e:1a:fe:d6:df:05:a7:7e:14:a7:c2:72:1f:
6a:c5:00:a7:ba:bd:49:27:6f:d8:86:24:38:03:12:72:31:c6:
61:a5:da:52:40:5a:9c:b2:78:f8:f9:cd:40:07:c3:43:04:b9:
b4:21:ab:4b:65:9f:6f:d7:7f:ef:4e:e8:c1:de:ee:ad:19:47:
c5:98:1d:b7:0d:91:a7:ee:a5:e1:c5:ff:53:dc:a5:83:d0:bb:
69:e7:c9:84:18:3c:e6:bc:16:1b:1a:2a:d9:d4:ba:8d:02:8c:
24:9e:8b:f4:ee:b4:16:15:3e:df:08:96:78:f2:28:e0:d2:65:
b7:55:92:9c:1c:69:ac:9d:b1:48:2f:b3:5f:82:d4:ec:6d:f6:
3e:d4:ad:45:70:92:c4:00:4c:54:e9:c4:f4:75:22:21:59:15:
32:10:db:2f:ac:a7:5d:4a:dd:8d:fb:1a:0b:92:c5:66:43:f4:
45:29:58:ea:66:e0:2a:e1:06:6d:f0:9a:e4:ec:fe:5d:43:cc:
78:7e:1e:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:04 2025 by rpki-client