![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
File: DT7Se74aaKE_qLW9VPTN1vx6l54.roa (raw, json)
Hash identifier: 6/lOU17idK6/Bn2Qvi37o3UWirAuCd+bYFkjFLDRnAE=
Subject key identifier: 0D:3E:D2:7B:BE:1A:68:A1:3F:A8:B5:BD:54:F4:CD:D6:FC:7A:97:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 213D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
Signing time: Fri 25 Nov 2022 04:39:41 +0000
ROA not before: Fri 25 Nov 2022 04:39:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.192.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8509 (0x213d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D3ED27BBE1A68A13FA8B5BD54F4CDD6FC7A979E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:90:d1:e6:86:64:0d:31:0f:76:ee:51:f0:
db:72:33:d7:b4:c6:4a:8a:4d:cc:a7:f5:a9:06:07:
dc:de:c9:7d:4c:6e:07:65:90:b7:57:d1:2f:c5:12:
79:6b:05:d9:34:10:46:58:85:c0:03:c1:9c:8a:68:
61:dd:53:01:b5:a1:84:dd:36:08:ce:2d:ed:0f:71:
45:94:bf:47:97:88:5d:33:12:29:42:92:0b:4b:08:
32:74:20:28:e6:04:db:bd:2d:27:8a:3a:d8:9e:f7:
1f:0e:32:29:96:8a:aa:0d:0c:dd:cb:07:f8:6e:07:
3e:8a:21:fd:af:ed:07:0c:87:87:73:61:5e:11:34:
71:5a:8d:30:de:97:14:67:dc:9a:8a:8a:27:8a:d3:
0a:60:10:f6:db:14:11:ad:b2:b9:a1:87:65:bf:f3:
fd:dd:88:eb:ce:e2:5c:e0:bb:d5:c3:0a:ff:63:3c:
c3:0d:d5:b8:ec:ae:ab:73:a0:30:70:0e:c2:c4:12:
83:63:e8:df:b7:66:88:57:e5:ff:8a:85:bd:ed:2f:
a4:d0:88:35:94:4c:e2:56:a3:5c:6f:9f:52:82:91:
71:15:93:56:ad:85:d0:73:47:47:6e:fe:c5:a1:67:
48:8f:ef:f5:49:21:28:76:a4:4a:46:a5:5d:e4:73:
4a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3E:D2:7B:BE:1A:68:A1:3F:A8:B5:BD:54:F4:CD:D6:FC:7A:97:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DT7Se74aaKE_qLW9VPTN1vx6l54.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
55:86:df:7a:41:80:2d:23:8e:af:a3:ce:59:e8:75:f1:ef:57:
44:79:3d:5e:11:8d:64:a0:85:62:6a:3b:b6:a6:7c:34:30:c9:
f5:74:15:02:3d:83:c5:ef:7b:ad:45:e2:03:16:0b:53:eb:f0:
6f:2e:a0:de:45:9f:4a:0c:0e:ce:4f:99:9a:f2:4a:e8:c1:04:
52:b9:db:27:d8:c8:50:c6:56:d5:ab:f1:7f:1d:aa:cb:21:85:
ec:d2:88:58:7e:eb:f6:52:74:d2:98:10:6f:c1:b6:57:dc:a2:
58:78:53:96:e5:9f:05:6e:78:a7:c0:93:84:8e:78:65:d9:fd:
50:39:a2:ce:59:44:bc:bb:08:20:28:37:3c:95:a8:a1:34:48:
fa:ad:9f:4b:2b:a3:b3:c8:31:db:08:b6:0d:f5:a4:60:b6:91:
57:b7:82:8a:ca:5c:b3:5a:a7:7b:88:ca:c4:c3:ac:9d:60:61:
45:49:2e:0d:f7:97:d7:90:cc:4e:24:ce:28:15:a2:93:e0:07:
5f:2c:62:98:a5:c2:05:dc:ee:b9:74:ce:7f:2d:a4:25:f0:cd:
05:42:62:a6:57:25:d6:4e:29:0b:5f:85:2d:26:b4:4d:07:32:
c8:47:9b:b5:45:83:e9:48:ca:d0:ab:20:bd:9d:5d:b2:37:a0:
e0:d7:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:32 2025 by rpki-client