![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zqw_kMJihDCTB5-0qWCD92820Yw.roa
File: zqw_kMJihDCTB5-0qWCD92820Yw.roa (raw, json)
Hash identifier: jkaT8C999SkzkYipaauNOxEuxle61mJWHrmpZdPvT1g=
Subject key identifier: CE:AC:3F:90:C2:62:84:30:93:07:9F:B4:A9:60:83:F7:6F:36:D1:8C
Certificate issuer: /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial: 08F0
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zqw_kMJihDCTB5-0qWCD92820Yw.roa
Signing time: Sun 07 Feb 2021 11:37:08 +0000
ROA not before: Sun 07 Feb 2021 11:37:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24158
IP address blocks: 117.19.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Validity
Not Before: Feb 7 11:37:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CEAC3F90C262843093079FB4A96083F76F36D18C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:a3:d8:2f:97:82:db:0c:04:dc:d3:58:d3:
4f:2c:96:17:34:89:28:20:0d:07:bd:c6:08:89:37:
34:1a:51:2b:d0:1f:58:1b:07:d9:32:1a:34:83:39:
24:50:31:72:b3:ba:fc:ae:3d:3d:af:3d:66:62:10:
63:14:81:67:08:51:b8:1e:97:6b:4d:2e:68:b0:df:
91:fe:57:d1:8c:52:27:e6:91:3a:6a:b7:96:3e:77:
22:01:e8:8a:41:e4:f9:f6:bf:13:3c:33:96:16:89:
26:cb:42:40:35:a5:1b:a1:99:b9:a8:32:70:0c:d6:
42:a1:39:c8:7a:72:03:8d:6d:4a:67:56:36:4c:ac:
2f:9a:25:d2:69:55:66:a4:90:b7:25:3d:b3:31:7b:
69:9e:d0:05:0b:87:9a:cd:b6:a3:20:3a:5d:f9:50:
30:3b:a0:da:87:c5:39:39:06:de:28:2a:cc:94:25:
58:01:ed:31:9c:9a:45:ea:ac:1e:2d:97:a0:15:58:
51:4a:3d:ed:e3:38:7b:81:25:8d:ac:2d:61:0f:b1:
5c:ce:07:82:5c:08:41:e7:9f:ca:77:0a:03:95:e2:
04:eb:4b:b9:aa:de:1a:ab:f6:22:a1:38:73:28:45:
ce:1d:40:02:d8:f8:b7:87:6b:f1:84:0f:f1:3d:42:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:3F:90:C2:62:84:30:93:07:9F:B4:A9:60:83:F7:6F:36:D1:8C
X509v3 Authority Key Identifier:
keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zqw_kMJihDCTB5-0qWCD92820Yw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
117.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:8a:08:95:05:ff:c4:f9:d0:e3:3f:54:72:d7:b3:31:e9:7c:
a2:96:3e:b8:49:4a:18:45:d0:ca:55:0e:f7:79:dd:6f:29:bd:
d1:e0:93:2b:35:c4:0f:c6:0e:10:6e:f4:40:e7:7e:14:a5:ea:
8a:97:41:4f:3a:83:17:da:3f:26:ba:4e:e9:5a:14:5f:be:ad:
23:6f:cb:04:7c:c8:bf:98:dd:2e:b0:fd:4b:6a:7d:26:52:9e:
71:62:33:49:88:20:50:b2:17:56:50:2c:2f:79:88:d6:ad:bf:
4e:46:80:04:bc:90:af:df:d0:2d:b5:42:2e:2d:4d:27:ae:53:
dc:e3:6c:92:e9:cf:f9:43:5e:ff:1c:b4:96:f8:26:1c:f0:e6:
5b:66:f7:f6:53:19:c1:7d:3c:49:1a:36:b6:e7:2e:b1:ea:65:
42:25:09:5d:b5:cb:7a:60:3a:43:79:3c:06:4e:62:81:af:4f:
f0:ce:1d:3e:ac:d3:77:6d:00:e8:94:93:37:34:b1:8e:e7:da:
64:63:ea:3f:e3:34:fe:8c:60:78:72:30:6d:fa:6c:28:fe:c9:
f3:1e:1a:92:64:e7:a4:73:de:50:40:48:be:d6:57:5f:51:15:
99:5a:b1:38:ed:9b:68:69:a4:54:19:78:15:54:1e:41:df:ea:
52:e8:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:53 2025 by rpki-client