![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa
File: DO2jx6JB91QqSgUjnkmcHXh0-pk.roa (raw, json)
Hash identifier: FBDu/at2krIVMJGC4xg3EiefxfnSSuE6r/C/60lGZGE=
Subject key identifier: 0C:ED:A3:C7:A2:41:F7:54:2A:4A:05:23:9E:49:9C:1D:78:74:FA:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 284B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa
Signing time: Fri 01 Sep 2023 10:05:10 +0000
ROA not before: Fri 01 Sep 2023 10:05:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10315 (0x284b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0CEDA3C7A241F7542A4A05239E499C1D7874FA99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:91:6d:b3:0c:df:15:d0:59:60:3a:81:f6:
04:b0:f1:dc:f7:c9:2e:59:d0:f5:cf:9d:c4:7e:e0:
f0:20:be:48:f3:9f:a9:75:e7:91:fd:e0:2f:10:38:
13:8b:9b:3c:33:63:93:2a:8d:91:3b:20:5c:e8:be:
e1:d2:0b:6c:76:5d:c4:6d:f3:87:8a:2f:af:3e:69:
72:1f:1c:87:7a:d5:84:fd:5e:f3:6c:e1:45:d2:1f:
dd:45:9f:7c:3d:de:20:6d:98:d5:e5:19:3a:83:6c:
79:72:5b:40:a8:74:cc:7e:75:96:fe:8c:e3:27:6d:
9f:a0:21:40:29:14:16:57:ae:57:46:2d:ed:11:6d:
6b:76:07:19:59:c1:65:76:bc:a4:c5:ae:d9:07:2f:
4b:0e:27:93:2f:05:3e:0d:3e:b1:80:9a:aa:70:7b:
31:63:9e:ee:2e:92:55:79:9a:3c:0a:13:d7:09:3c:
03:cd:c9:0a:ad:92:87:2e:90:7c:0c:ce:2b:98:7d:
ac:b6:58:a9:65:e5:de:f2:be:28:2e:3e:6c:e0:58:
8a:4a:a0:43:84:26:34:4b:01:3a:f4:5b:b3:49:c4:
ad:04:7f:05:86:72:74:e6:b2:ed:b6:6d:89:9e:fc:
06:68:aa:ec:6a:bf:0c:6d:2e:ce:87:7c:e4:75:a5:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:A3:C7:A2:41:F7:54:2A:4A:05:23:9E:49:9C:1D:78:74:FA:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DO2jx6JB91QqSgUjnkmcHXh0-pk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.85.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a7:18:b0:a6:5c:1a:78:e2:4d:15:72:15:03:b8:85:9d:77:
a4:4f:b3:61:74:bf:74:98:87:0f:b1:21:59:7b:ea:b5:65:2d:
7c:1c:f0:aa:a5:eb:58:3b:51:22:6b:24:19:45:ea:22:8f:63:
e4:5b:40:3f:28:ef:f5:57:a7:4c:88:d1:12:d1:75:35:11:f7:
e5:d9:8b:82:73:ef:9c:b5:53:ea:a8:a6:46:ed:fe:c4:fa:a1:
e6:2b:38:2e:7d:14:44:24:9d:da:59:98:bc:09:a7:f6:cb:81:
b4:05:6c:f0:27:be:67:2f:33:3b:27:88:75:9d:7b:2a:a7:cd:
51:e8:a4:e7:19:90:33:e5:ae:1d:05:b4:fc:6b:4f:8d:76:77:
45:b6:9e:73:3d:d8:6d:d2:dd:95:30:2b:a2:68:56:c0:f1:56:
2d:1e:8a:38:37:7c:1a:de:8e:3f:3f:fc:b7:fe:14:58:54:7b:
c1:24:d6:3a:44:17:41:19:98:cc:45:64:b4:6b:0e:3b:a0:1e:
8c:61:71:09:e9:2e:aa:47:f8:ba:7a:bf:d6:c1:09:69:2b:87:
d8:25:7c:fc:17:27:ac:a7:ae:b7:d0:e0:79:57:f0:30:b3:f0:
70:e2:df:30:78:c2:a4:9c:bf:63:b3:88:4e:93:15:a8:d8:1a:
78:d6:ec:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MTBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDRURBM0M3QTI0MUY3
NTQyQTRBMDUyMzlFNDk5QzFENzg3NEZBOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYlJFtswzfFdBZYDqB9gSw8dz3yS5Z0PXPncR+4PAgvkjzn6l1
55H94C8QOBOLmzwzY5MqjZE7IFzovuHSC2x2XcRt84eKL68+aXIfHId61YT9XvNs
4UXSH91Fn3w93iBtmNXlGTqDbHlyW0CodMx+dZb+jOMnbZ+gIUApFBZXrldGLe0R
bWt2BxlZwWV2vKTFrtkHL0sOJ5MvBT4NPrGAmqpwezFjnu4uklV5mjwKE9cJPAPN
yQqtkocukHwMziuYfay2WKll5d7yviguPmzgWIpKoEOEJjRLATr0W7NJxK0EfwWG
cnTmsu22bYme/AZoquxqvwxtLs6HfOR1pWo5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDO2jx6JB91QqSgUjnkmcHXh0+pkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RPMmp4NkpCOTFRcVNnVWpu
a21jSFhoMC1way5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sFUwDQYJKoZIhvcNAQELBQADggEBAGOnGLCmXBp44k0VchUDuIWdd6RPs2F0v3SY
hw+xIVl76rVlLXwc8Kql61g7USJrJBlF6iKPY+RbQD8o7/VXp0yI0RLRdTUR9+XZ
i4Jz75y1U+qopkbt/sT6oeYrOC59FEQkndpZmLwJp/bLgbQFbPAnvmcvMzsniHWd
eyqnzVHopOcZkDPlrh0FtPxrT412d0W2nnM92G3S3ZUwK6JoVsDxVi0eijg3fBre
jj8//Lf+FFhUe8Ek1jpEF0EZmMxFZLRrDjugHoxhcQnpLqpH+Lp6v9bBCWkrh9gl
fPwXJ6ynrrfQ4HlX8DCz8HDi3zB4wqScv2OziE6TFajYGnjW7Eo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:25 2025 by rpki-client