![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
File: 0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa (raw, json)
Hash identifier: bOeV6Tw11w2h5dsKTtG/sTrJ8tPS7+GYNqYTCmjaoSc=
Subject key identifier: D1:81:61:E5:DF:F5:A7:47:52:41:D3:C5:59:63:D2:32:C9:F5:CB:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
Signing time: Thu 15 Sep 2022 02:53:47 +0000
ROA not before: Thu 15 Sep 2022 02:53:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D18161E5DFF5A7475241D3C55963D232C9F5CB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:a7:d5:b9:9f:cd:ca:09:14:bd:33:e7:31:
8f:a9:f4:1d:eb:be:bd:5c:8b:d3:2a:b1:87:79:62:
a0:dd:10:ab:bd:70:ea:44:5a:e9:13:21:8c:1e:be:
f8:6d:43:b1:85:cf:1b:80:ba:df:08:cc:10:75:eb:
a5:31:91:2a:e9:de:00:a6:0e:fd:16:b8:d4:f7:f8:
ae:d7:87:ca:cf:2d:25:11:7f:2a:dd:f1:50:87:27:
81:cb:7b:96:e3:9c:2a:1e:b7:b9:25:68:1a:75:29:
ef:58:54:12:4a:4e:c4:88:d8:2a:c2:69:02:e9:ac:
3e:5d:e2:f3:4b:c4:95:e8:53:9b:ab:3d:b7:99:c3:
76:b5:25:90:72:3b:88:03:0c:d0:dd:f9:80:d1:b7:
1a:71:a9:cc:13:d8:7e:5b:ca:63:55:62:92:94:e2:
91:3d:17:e0:11:ed:43:8f:2b:cc:50:77:ab:27:91:
87:c7:3d:c4:e1:b4:30:cb:34:4b:fd:57:4b:df:23:
05:37:74:66:29:b0:20:14:cc:13:50:80:6b:b0:22:
7a:54:f3:fd:b4:34:ec:9d:eb:39:4e:88:fb:aa:f0:
ba:cc:5c:46:4f:17:48:a4:2d:9b:26:4a:7d:ab:ba:
ad:c7:c2:31:73:ac:93:76:37:b1:2c:04:d2:81:ff:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:61:E5:DF:F5:A7:47:52:41:D3:C5:59:63:D2:32:C9:F5:CB:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0YFh5d_1p0dSQdPFWWPSMsn1y3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.125.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8e:c2:e9:a3:55:6d:1b:17:4c:88:1c:b6:78:8c:18:8e:d6:
5d:0d:df:c9:e0:ac:5a:ea:0a:c7:99:97:78:01:75:11:c0:d6:
2a:1e:ad:99:e9:56:bc:b7:1a:ad:4d:ce:75:12:c2:f0:e0:6f:
9c:d5:05:b2:02:b6:5b:34:6c:39:67:75:6f:f4:8f:24:7b:56:
ce:f3:c1:8a:51:7c:a1:e6:c4:5f:f6:36:6b:39:07:dd:6e:ac:
78:7f:90:a8:de:45:f8:0a:e4:13:45:81:6f:0b:04:82:90:71:
44:cc:57:f9:df:9d:70:11:29:35:57:6b:0a:67:d4:18:11:db:
a1:e8:36:ec:94:4a:6e:31:f5:a4:21:22:46:14:60:25:5a:e7:
44:7d:4f:08:de:03:6e:69:51:5e:db:6f:8b:15:6f:a9:d3:2c:
05:7d:d3:65:09:cb:b0:be:65:89:5e:6b:cf:4e:ac:df:ab:ea:
cd:64:d6:e3:7c:0d:6a:1f:e5:65:61:08:b8:29:6f:35:f2:61:
6b:5e:fe:06:b9:1f:a5:01:3b:01:ec:0b:3a:b1:64:8c:47:8a:
18:c3:a7:71:bf:55:6d:cc:b1:4a:c0:af:90:0c:c1:a2:85:25:
89:8a:d8:24:28:a6:78:15:73:f3:a3:e2:bd:8c:a7:72:a2:53:
7b:25:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:00 2025 by rpki-client