![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
File: FeUBFIZ_tOCRczZKiGZh3zkS39k.roa (raw, json)
Hash identifier: MWOBpjIJ7IPGlSBy9VmTg+LZj+s0nOUoqXa4lbXtb2Y=
Subject key identifier: 15:E5:01:14:86:7F:B4:E0:91:73:36:4A:88:66:61:DF:39:12:DF:D9
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0ADB
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
Signing time: Wed 29 Sep 2021 02:41:10 +0000
ROA not before: Wed 29 Sep 2021 02:41:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131150
IP address blocks: 163.32.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2779 (0xadb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=15E50114867FB4E09173364A886661DF3912DFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:96:75:94:d4:0c:d1:f5:0e:cd:62:8b:6a:
be:38:24:b6:d0:71:bc:c9:99:8b:27:9c:81:5d:da:
d8:f4:4a:8c:70:12:9f:5e:a1:30:6d:5e:df:06:d2:
6b:89:52:c1:89:79:8d:95:d6:68:80:6d:3c:d7:ec:
ca:da:29:25:2d:25:4e:80:d6:e0:9a:db:8f:8b:23:
26:61:1d:3a:97:ae:5c:fa:80:34:4b:af:a3:96:5e:
e8:ea:38:95:41:7a:4b:e0:be:ec:00:c4:8a:b2:f8:
e0:84:66:1d:48:ec:b4:5d:8b:4b:88:48:51:4a:70:
44:52:57:c9:ca:ec:bf:35:70:bb:f3:8c:e9:ac:e9:
4e:43:e7:9c:24:7e:c9:d0:df:f2:ce:07:4e:ef:05:
01:89:98:19:69:a0:45:6f:2d:be:a0:2e:f2:85:da:
6e:1f:f5:e4:d4:7b:46:62:c9:d1:52:a0:69:33:64:
2f:8a:b5:4e:52:8e:77:03:b1:a6:73:fe:a0:ec:d9:
b3:ed:f7:f1:88:a6:42:42:54:cd:6e:62:10:10:92:
3e:49:02:1d:e0:87:54:5a:26:dd:c7:b2:52:10:a7:
d6:c0:8e:ee:45:bd:2f:62:0e:78:d9:9d:e5:fb:98:
cb:dd:86:de:71:aa:f1:c9:8b:6f:32:a6:cd:49:0b:
ef:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:01:14:86:7F:B4:E0:91:73:36:4A:88:66:61:DF:39:12:DF:D9
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/FeUBFIZ_tOCRczZKiGZh3zkS39k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.32.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:d6:73:45:bc:5e:9d:91:9d:d0:6d:91:85:e9:48:fe:c6:03:
e6:19:d0:de:d5:b7:82:0d:05:5a:8f:9d:91:de:e8:26:fe:5c:
2c:43:b6:cf:99:97:32:ba:31:ac:d2:31:04:b4:95:c0:60:7d:
de:2b:33:74:19:b1:e2:1c:6f:ca:05:12:a0:eb:ee:9b:89:4d:
89:ca:09:27:c4:c6:cb:34:78:51:46:e5:e9:af:9c:df:9f:f0:
08:d6:20:58:c4:8f:78:f9:f4:12:fc:de:3a:af:c2:4c:50:84:
a6:8e:3d:50:f2:9f:8b:46:84:cb:1a:30:d1:fb:24:22:e1:bb:
45:d4:6d:6c:5c:2b:35:bc:9a:b2:49:15:c9:a9:5b:cb:be:86:
1a:76:67:0f:22:8c:50:0d:a9:5c:02:97:7d:61:f9:6e:a4:6b:
aa:ea:ed:35:07:10:98:9c:bc:8a:08:a7:47:aa:22:f3:52:22:
e8:4b:68:83:f0:26:2f:8a:3a:0b:fd:05:43:75:ea:81:5b:42:
7f:6b:e6:d4:20:e5:7e:62:24:ad:56:28:1a:00:5f:3c:d7:9c:
38:ee:5f:87:15:45:ff:cd:d6:ba:8f:36:64:17:53:d4:67:69:
d1:4f:48:97:26:74:e0:a4:a4:bf:3d:fa:0c:f8:6f:ec:74:26:
5e:a3:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:33 2025 by rpki-client