![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X6gxGXoq_h4Lz3lyg9Y1HoSolc4.roa
File: X6gxGXoq_h4Lz3lyg9Y1HoSolc4.roa (raw, json)
Hash identifier: DJ6XvhXriBc5r6a/SPwLKS8M1CGzRrZPB073hnCzmmQ=
Subject key identifier: 5F:A8:31:19:7A:2A:FE:1E:0B:CF:79:72:83:D6:35:1E:84:A8:95:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X6gxGXoq_h4Lz3lyg9Y1HoSolc4.roa
Signing time: Tue 29 Sep 2020 09:55:45 +0000
ROA not before: Tue 29 Sep 2020 09:55:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3704 (0xe78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5FA831197A2AFE1E0BCF797283D6351E84A895CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:48:a4:73:a9:1a:dd:5f:63:54:eb:50:b3:
02:5a:7c:ef:11:15:2e:3d:1d:5d:c9:d8:cf:fb:d7:
cd:c7:55:51:26:fc:d0:b9:a0:1d:c4:17:9a:71:17:
74:ef:bf:d5:de:8f:a7:cf:0a:be:58:8c:52:b4:0f:
96:b9:65:aa:c2:25:f1:99:48:1e:f8:a9:aa:c0:84:
8b:3c:a5:a2:2b:c2:fb:bf:1b:8b:d9:07:f1:e7:dc:
6d:b5:45:79:46:3a:26:38:3c:bf:58:98:00:fb:d8:
3b:85:02:3f:d5:65:a4:45:7d:8b:b2:8b:2c:6c:9e:
4d:1b:15:b3:8e:9e:8e:c1:8d:74:51:41:a5:26:ab:
32:de:aa:64:6a:64:5b:ba:c3:5b:1e:ef:74:1f:d5:
ef:bf:1d:42:8e:1f:1e:0c:ec:d4:d1:fc:e0:5e:38:
18:e9:55:14:50:30:05:db:c2:10:19:47:3b:c6:f9:
78:d5:38:2e:50:26:96:7b:5a:ed:22:b3:d3:fd:b8:
ed:fc:93:f9:00:2f:44:77:df:2c:41:e2:34:c2:dc:
9c:3d:0e:61:6f:0f:8a:a0:58:76:44:23:38:5d:19:
4a:b5:00:90:14:f5:3e:69:c0:f6:3a:7f:44:ae:3b:
a0:19:c1:54:6d:c2:17:d6:d9:96:44:19:23:ce:e7:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:31:19:7A:2A:FE:1E:0B:CF:79:72:83:D6:35:1E:84:A8:95:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X6gxGXoq_h4Lz3lyg9Y1HoSolc4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:e6:47:64:25:33:00:6f:b6:48:75:ec:e9:53:24:1e:38:37:
e5:fc:ff:d8:3f:89:c8:be:ea:20:d9:b2:98:11:b7:d0:10:91:
9c:01:ec:9b:07:85:39:f6:62:ff:59:70:0e:ef:b5:5b:b5:6d:
47:78:01:b3:99:3f:f8:8d:c4:55:57:11:cc:4b:8d:04:93:6d:
87:78:07:41:54:54:7d:19:40:63:18:9b:12:5f:52:3b:60:a2:
44:1f:b6:e2:05:70:2e:3a:77:71:c7:58:9e:00:95:f4:9f:89:
cf:e6:43:ae:db:ca:17:fb:58:e5:9f:89:1f:7e:0b:b7:d2:9c:
3b:d0:f1:11:df:a7:a7:42:f6:25:ce:6b:b7:8e:c6:09:63:ad:
7f:22:0e:07:a9:ab:c2:2e:19:4c:a4:bd:72:42:a9:14:db:43:
cf:f9:c7:8f:96:bc:a0:0b:eb:80:f7:1a:6e:47:ba:bf:0e:97:
34:d1:54:ed:4b:0f:7d:2e:b8:68:b5:5e:8b:a0:1b:42:66:66:
c8:5f:7d:7d:df:09:af:d3:14:9c:a3:8e:a8:75:05:94:6e:3a:
40:33:a1:3d:01:3b:fc:43:a4:e9:01:27:b1:16:78:a9:f6:9f:
19:7f:30:99:a5:28:1d:ad:fd:cb:c3:63:58:9d:11:9a:44:ea:
fa:41:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:11 2025 by rpki-client