![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
File: 8u2alJt03zRcHeTc1WFxprZhwkE.roa (raw, json)
Hash identifier: bAuoqQfw3gwo/ThDKmIefLf/fROvqN/VJlwJxrqiXeI=
Subject key identifier: F2:ED:9A:94:9B:74:DF:34:5C:1D:E4:DC:D5:61:71:A6:B6:61:C2:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
Signing time: Fri 25 Nov 2022 04:38:59 +0000
ROA not before: Fri 25 Nov 2022 04:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.160.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8367 (0x20af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F2ED9A949B74DF345C1DE4DCD56171A6B661C241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:46:98:eb:8d:6e:d4:23:4f:43:a1:6d:3e:
da:49:37:73:fc:26:a9:2c:5b:63:ad:cd:9a:58:cf:
06:8b:6f:32:1a:f2:9e:29:c0:99:74:5d:34:a1:16:
92:8b:8e:7b:91:1c:32:ee:02:52:8c:12:f0:f7:52:
a2:a5:ab:c8:81:9f:fa:82:85:36:f9:8e:54:7a:9e:
28:8c:23:b1:75:29:c0:08:f5:35:c2:50:33:31:40:
3f:88:cd:30:27:17:f0:e5:e0:f3:8a:18:a7:c0:97:
03:37:ce:80:42:0b:6b:17:bd:28:0f:02:94:ac:70:
85:74:a5:b2:ee:3a:2a:f7:e9:94:54:40:bd:ae:6c:
e3:1f:70:2f:d2:48:00:f5:cc:1b:60:0d:e3:e1:ea:
81:5c:0c:4c:54:71:f4:60:28:d4:c6:cd:57:e4:e5:
43:7a:01:9a:7b:29:f8:c0:d7:48:f8:07:ce:e7:c3:
4f:be:66:f7:8f:08:67:a8:76:fe:4f:de:e2:4d:87:
7a:64:35:f5:60:36:8a:56:35:40:59:e3:d8:f0:97:
e6:e7:4f:ad:f4:48:fb:5e:03:9e:0f:4b:9b:45:bc:
ff:3b:68:7c:11:c4:a1:ca:ce:9b:ff:98:27:f4:92:
1b:2f:35:73:ae:4a:63:25:46:fa:a1:3d:cf:19:c5:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:ED:9A:94:9B:74:DF:34:5C:1D:E4:DC:D5:61:71:A6:B6:61:C2:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8u2alJt03zRcHeTc1WFxprZhwkE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:db:f7:b0:f9:39:f2:84:37:6c:42:35:39:46:6c:0f:27:89:
a3:0c:31:72:8c:1e:85:c9:44:72:4d:19:e6:d8:1e:9e:e8:c6:
33:e3:cb:ef:5b:6b:10:99:e6:5f:91:ff:34:46:c7:72:34:b4:
89:9a:99:87:3d:39:f5:49:17:9b:f3:0f:d5:5b:a2:98:98:76:
53:21:d0:a1:73:b7:cd:a4:7c:74:d7:a9:77:45:87:05:39:97:
50:75:e1:37:43:06:40:6b:e7:2c:ef:97:b7:45:1d:a8:02:cc:
77:c2:94:ab:85:dd:93:e0:ce:8b:85:71:4a:0e:e3:15:20:a5:
9d:de:6c:be:62:c0:d7:5a:8e:6c:97:06:6a:42:08:c2:be:3d:
74:86:16:ae:e4:c0:78:1a:8b:21:a3:8d:2e:a2:62:fa:8b:15:
af:f3:4f:a8:3c:9e:1d:58:20:e8:c2:17:60:ef:e1:90:af:13:
16:79:db:ba:3e:b4:57:55:d1:be:ac:3c:72:67:3b:0a:28:8a:
dd:41:b9:6c:f3:cd:a8:8a:26:e0:09:35:a6:27:88:6c:37:5f:
ab:77:e8:dd:4c:57:37:a0:43:55:84:09:c7:6f:96:68:e2:72:
84:0e:fe:88:8e:09:b7:58:33:e7:a2:3b:10:94:36:a8:ff:25:
62:c2:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:13 2025 by rpki-client