![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
File: BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa (raw, json)
Hash identifier: jYWM2v7f+6ucLqaLysIyDtnH9QEfp/Q2YgJoe0m8/5A=
Subject key identifier: 05:82:04:AA:D8:CF:43:3B:B4:BF:40:0A:45:48:50:63:4C:15:34:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E72
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
Signing time: Tue 29 Sep 2020 09:55:44 +0000
ROA not before: Tue 29 Sep 2020 09:55:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3698 (0xe72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=058204AAD8CF433BB4BF400A454850634C15346A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:ba:65:d8:09:e9:42:19:5a:f5:0c:22:e9:
42:8d:25:e6:da:6f:c6:ac:8d:b6:f2:37:57:7e:26:
87:58:df:9e:3f:84:c9:18:14:2c:4f:20:7a:50:77:
f4:64:26:1b:22:9d:4f:69:11:88:5b:30:31:d7:78:
19:25:d3:71:44:6e:68:e2:3a:cd:36:3a:dd:bf:5e:
70:c4:24:17:09:7e:83:af:0f:99:71:70:26:95:db:
5c:c7:32:aa:f9:b6:96:92:0d:ed:27:00:55:16:91:
cf:bb:ec:b5:b5:78:51:7b:05:dd:fc:f3:e8:b2:60:
40:b2:9c:5b:d5:63:fe:23:5e:97:52:6f:2c:c6:67:
01:a6:c5:7f:d1:45:e5:31:37:bd:36:42:77:78:0d:
59:f6:5c:6f:71:e3:b5:77:52:66:2d:31:d3:7b:36:
74:93:bf:41:56:0a:a7:eb:a3:43:58:2d:30:e8:7d:
0a:4e:a9:0c:fe:f0:0e:f0:15:99:55:46:03:1c:8a:
29:33:7d:1e:da:fc:ac:2b:c2:bb:eb:e6:11:50:8c:
04:0a:01:c2:c9:bc:14:f0:de:4a:84:7a:3b:e8:97:
56:b5:fb:3d:bc:70:e0:6e:2b:2a:3b:24:60:d3:be:
be:d4:09:2d:54:db:d0:3c:46:0f:e8:5c:b0:6b:3b:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:04:AA:D8:CF:43:3B:B4:BF:40:0A:45:48:50:63:4C:15:34:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BYIEqtjPQzu0v0AKRUhQY0wVNGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:b9:28:7a:c3:be:5a:8f:a7:59:da:00:87:a1:d6:8b:87:25:
48:87:0b:c7:53:55:9c:ec:f8:d4:28:d0:e7:64:b9:6c:f9:d1:
58:b8:2e:3a:07:e8:92:2f:29:60:b2:89:12:6a:ee:96:a8:59:
34:c3:13:18:c1:98:fd:e9:2f:d1:88:76:60:89:2d:00:25:6e:
ee:d8:ec:d4:16:48:b6:07:20:53:87:78:a8:6a:97:f7:95:e1:
2b:87:b8:5c:96:1e:97:61:1d:cc:43:1f:e1:9f:3a:52:07:9a:
d5:5c:90:1f:97:27:43:a7:81:14:a4:3a:5d:8b:5a:a1:0b:24:
83:5d:54:5d:6e:a8:7e:79:94:aa:19:1c:38:af:5c:04:0f:80:
86:fa:a9:10:c4:a2:65:42:ff:6e:2f:52:e7:9a:d3:7e:d9:fa:
49:1f:9e:87:1d:9a:ea:cb:0c:72:77:3c:3e:a2:74:b4:34:cc:
4d:76:be:b5:71:36:4d:64:92:89:91:01:0c:05:12:eb:32:30:
65:95:3c:fe:0b:72:2c:23:cc:a3:e8:99:97:ad:8a:ce:a8:f0:
5f:64:bb:48:96:39:b3:b2:22:c7:34:73:bd:72:2c:ff:7e:9d:
1b:08:4d:9c:d7:14:0f:63:ec:50:a4:64:09:57:38:5a:7b:50:
ca:74:3c:70
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDnIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1NDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA1ODIwNEFBRDhDRjQz
M0JCNEJGNDAwQTQ1NDg1MDYzNEMxNTM0NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPrrpl2AnpQhla9Qwi6UKNJebab8asjbbyN1d+JodY354/hMkY
FCxPIHpQd/RkJhsinU9pEYhbMDHXeBkl03FEbmjiOs02Ot2/XnDEJBcJfoOvD5lx
cCaV21zHMqr5tpaSDe0nAFUWkc+77LW1eFF7Bd388+iyYECynFvVY/4jXpdSbyzG
ZwGmxX/RReUxN702Qnd4DVn2XG9x47V3UmYtMdN7NnSTv0FWCqfro0NYLTDofQpO
qQz+8A7wFZlVRgMciikzfR7a/Kwrwrvr5hFQjAQKAcLJvBTw3kqEejvol1a1+z28
cOBuKyo7JGDTvr7UCS1U29A8Rg/oXLBrOwmTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBYIEqtjPQzu0v0AKRUhQY0wVNGowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JZSUVxdGpQUXp1MHYwQUtS
VWhRWTB3Vk5Hby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sOAwDQYJKoZIhvcNAQELBQADggEBAKS5KHrDvlqPp1naAIeh1ouHJUiHC8dTVZzs
+NQo0OdkuWz50Vi4LjoH6JIvKWCyiRJq7paoWTTDExjBmP3pL9GIdmCJLQAlbu7Y
7NQWSLYHIFOHeKhql/eV4SuHuFyWHpdhHcxDH+GfOlIHmtVckB+XJ0OngRSkOl2L
WqELJINdVF1uqH55lKoZHDivXAQPgIb6qRDEomVC/24vUuea037Z+kkfnocdmurL
DHJ3PD6idLQ0zE12vrVxNk1kkomRAQwFEusyMGWVPP4LciwjzKPomZetis6o8F9k
u0iWObOyIsc0c71yLP9+nRsITZzXFA9j7FCkZAlXOFp7UMp0PHA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:36 2025 by rpki-client