![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
File: YweDvkqS_Iucq1CQxLB85XL_PUQ.roa (raw, json)
Hash identifier: 6TRYiNaXs1bcbZ1yHNZfk+SWY+oN89UjK6mdQ6wfLCw=
Subject key identifier: 63:07:83:BE:4A:92:FC:8B:9C:AB:50:90:C4:B0:7C:E5:72:FF:3D:44
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 0789
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
Signing time: Tue 29 Sep 2020 10:06:25 +0000
ROA not before: Tue 29 Sep 2020 10:06:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 117.19.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1929 (0x789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Sep 29 10:06:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=630783BE4A92FC8B9CAB5090C4B07CE572FF3D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:bb:19:f3:cb:a0:30:9e:4e:66:14:46:5c:
e7:86:bd:61:a1:13:43:5b:5d:83:85:95:f8:84:3e:
90:c5:4b:a4:e0:59:2f:6d:7a:20:4b:18:2f:4a:bd:
65:fd:e1:a6:cf:fe:27:d6:64:a3:8a:35:7a:fd:3f:
9e:5c:ea:43:1b:00:1a:af:46:cf:70:94:1a:48:01:
10:33:32:d7:82:24:e3:a3:9f:d1:9a:f2:b8:ec:66:
ec:f1:52:34:11:1b:35:92:78:9a:87:98:33:18:8c:
47:55:fc:6f:3d:96:f3:36:5e:d7:d7:37:ca:65:38:
e4:fc:a3:0f:19:ad:61:7e:24:1a:e1:2c:16:57:28:
13:ab:56:24:6a:ec:7f:95:af:46:2f:75:66:da:e0:
ec:72:63:95:ce:ef:9d:8b:ac:a2:4e:9a:02:28:32:
e1:98:69:a9:dc:ca:a5:0b:6f:9c:e4:bd:57:3b:54:
b4:56:59:2f:56:ed:a4:6f:c5:8c:3b:cf:0f:a6:44:
55:47:57:ec:da:9e:0e:a0:17:aa:91:0f:b6:ac:da:
51:99:f5:29:35:16:16:32:53:67:48:d8:4f:94:7c:
cb:68:8a:d0:fe:44:21:38:49:02:e0:f9:cf:8c:8d:
d4:f6:ca:0b:29:18:70:3d:05:b0:78:f4:2d:7d:c1:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:07:83:BE:4A:92:FC:8B:9C:AB:50:90:C4:B0:7C:E5:72:FF:3D:44
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/YweDvkqS_Iucq1CQxLB85XL_PUQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:8f:e6:0d:8b:05:97:42:37:07:32:5a:ed:6f:d9:eb:66:e1:
e8:82:c5:ab:4f:ce:f6:0b:cd:57:1d:e0:a9:5a:10:0e:10:ca:
c3:8e:ae:4c:70:e9:75:92:5a:f4:b8:b5:97:4c:b2:f4:29:35:
b8:e5:ba:91:5a:8b:58:33:9f:b6:64:cf:23:23:06:40:44:6f:
df:3a:22:31:b8:ed:d6:b0:e0:b3:06:85:c9:61:a4:70:3e:51:
2b:e1:29:34:fb:b6:a9:af:20:07:32:c4:68:cf:b5:93:52:38:
33:19:31:c1:5d:75:e4:f9:c8:63:23:66:d6:7f:83:a6:41:8a:
35:27:b4:70:70:37:ad:46:7f:50:72:7a:4b:6a:43:9f:a9:97:
7b:2b:43:12:4e:3b:81:a3:09:11:79:3d:46:94:19:09:87:ef:
ae:10:8b:35:e9:e5:1b:f8:56:be:44:7e:19:25:72:06:d8:0e:
dc:47:c6:ae:94:b9:b4:ce:fd:3a:98:0d:12:cc:41:73:f6:d0:
cd:82:7e:98:61:ac:bc:3f:57:2e:f1:4b:ac:c8:ef:30:a0:e1:
91:32:ec:37:ea:05:86:58:43:53:44:15:b7:53:e9:e4:48:12:
0d:7a:bd:15:17:a9:a7:4e:75:40:8c:41:7e:98:38:74:4b:04:
26:68:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:54 2025 by rpki-client