![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
File: U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa (raw, json)
Hash identifier: 5Mszw/GQRlEqO4/uuwKh4nuSQ2MosyEWl0cFLH/s6TE=
Subject key identifier: 53:E2:14:78:20:F2:4F:EC:69:BC:C3:03:CB:CB:45:45:D4:5F:15:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1417
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
Signing time: Sun 07 Feb 2021 11:57:22 +0000
ROA not before: Sun 07 Feb 2021 11:57:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5143 (0x1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=53E2147820F24FEC69BCC303CBCB4545D45F154A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:8b:af:0b:0a:c4:46:ea:ed:87:dc:49:98:
38:4b:22:ff:a2:19:69:77:b7:ed:8a:6d:1e:91:34:
d5:6d:10:cb:38:da:63:52:19:98:98:20:c5:89:a8:
ac:5f:b6:f4:b8:3f:c5:a8:b0:eb:d9:a8:1e:3f:c5:
c5:ba:65:c2:e3:a9:7b:80:02:ae:55:f4:11:c4:43:
d5:ca:7e:24:ad:52:fa:42:2c:a5:1f:e8:47:73:6f:
3c:ef:83:c8:16:25:22:1a:68:f9:c6:e7:97:92:3f:
da:ae:4c:57:75:41:dc:57:e5:f5:10:d7:77:29:37:
60:4e:ce:90:65:a7:29:33:3f:e1:ff:cb:d1:0b:53:
a0:20:95:99:08:e9:a4:dc:ad:40:6f:93:d1:b4:c2:
4e:63:6d:67:df:13:cd:b1:08:77:16:4d:dd:c3:05:
c0:09:fe:6b:4c:1e:25:bb:ec:70:f4:c6:07:32:46:
1d:5e:2b:90:67:83:ff:79:b9:23:15:18:99:b0:4f:
22:3e:f3:6f:03:24:1f:1c:79:68:f9:44:08:21:23:
73:1a:84:d2:49:3e:67:3f:6e:ca:a3:98:b6:b0:ef:
46:f3:b0:ae:e4:93:55:9c:04:50:5d:d1:d3:28:bf:
89:fd:ae:08:e2:7c:8e:ec:5e:41:2b:73:e3:a9:98:
5b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:14:78:20:F2:4F:EC:69:BC:C3:03:CB:CB:45:45:D4:5F:15:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U-IUeCDyT-xpvMMDy8tFRdRfFUo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/22
Signature Algorithm: sha256WithRSAEncryption
08:eb:9f:b5:25:e9:b9:7d:ad:e6:90:9e:25:00:0f:bb:7d:ef:
91:97:24:f5:22:e6:79:74:68:8a:b5:ba:c2:98:19:cd:c5:25:
d5:ab:3c:31:eb:4f:d8:0d:c8:42:0f:65:9a:06:f4:c7:d0:94:
17:03:ee:f4:b4:8a:97:63:5c:b8:21:39:b9:69:bb:ad:06:f8:
e8:d1:a0:70:89:3e:35:cd:fa:3d:05:01:9c:7e:5b:f8:c3:a7:
2e:5b:e6:52:63:fa:0d:12:00:e5:81:06:2a:ad:70:a9:2d:9a:
ce:dc:95:c2:6e:07:c9:12:06:5f:02:27:ff:80:93:42:68:f6:
15:a7:14:b6:81:70:60:8e:e9:4d:5e:ab:d7:5b:b9:89:1a:0f:
a9:9e:c4:6a:2c:b4:77:19:e3:17:18:f9:a9:00:9b:0d:4f:d5:
8d:05:51:dc:1e:b2:8b:d8:02:0f:20:65:7a:56:3b:bc:c7:ff:
8b:d9:9d:13:df:d2:73:5c:4e:4d:78:84:9a:8e:cd:ed:2a:70:
f2:eb:b7:4e:3c:7c:8f:9b:56:2c:cb:66:44:1a:9c:13:26:4d:
be:54:60:b7:3f:44:e2:69:39:fb:9e:e0:0d:1e:29:80:fb:3b:
c4:93:68:81:8d:68:29:4d:17:70:c7:7b:73:0f:41:58:23:97:
53:fb:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:37 2025 by rpki-client