![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
File: f-5DJxASEeGd7lU4mPXUt-XaDMc.roa (raw, json)
Hash identifier: RvUXKQkK+9JR9EDbRYGpNk3tumhkA2AHhwDW9bOYYEY=
Subject key identifier: 7F:EE:43:27:10:12:11:E1:9D:EE:55:38:98:F5:D4:B7:E5:DA:0C:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
Signing time: Fri 25 Nov 2022 04:38:56 +0000
ROA not before: Fri 25 Nov 2022 04:38:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8352 (0x20a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7FEE4327101211E19DEE553898F5D4B7E5DA0CC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:1a:2b:7f:1b:f9:bf:c7:32:3f:9e:fd:fc:
32:04:6d:56:45:55:35:e7:fc:a0:5f:50:5d:c2:a7:
0c:c8:6a:45:24:fb:31:2d:8f:75:2c:91:a3:02:6e:
4a:71:d5:8e:6e:fa:d4:e0:27:84:82:4b:c9:a5:04:
3e:09:66:ab:ea:6e:75:83:6f:71:b8:53:38:e7:c0:
a8:9b:00:68:ee:ed:11:2c:51:56:0f:44:62:6f:60:
9f:1d:38:87:58:a9:ee:94:af:85:44:dc:40:76:eb:
e6:3e:f7:d5:b0:64:ff:22:75:d3:73:63:f1:0b:e9:
d2:96:ba:c9:33:73:3a:cb:f8:de:b2:ab:c2:37:54:
f8:be:3f:f9:54:e7:c3:cf:da:5e:79:c7:e2:75:fe:
12:b1:21:3a:2c:84:0a:62:6a:a2:aa:3e:3e:a9:a6:
ce:41:b8:62:da:32:ca:b4:73:be:f1:82:34:2a:45:
e3:66:a2:a9:4f:b3:59:ac:29:89:4b:73:a0:dd:d3:
c0:d3:e7:ce:5a:5a:75:8d:bf:17:17:79:03:2d:96:
4d:c5:2e:26:37:d6:c0:5f:10:f2:de:8d:bb:8c:14:
5f:d4:18:04:59:0a:80:83:07:7d:6c:3b:2b:c7:25:
f2:c7:fa:97:05:d7:ad:c4:e0:d6:ca:c7:f5:a3:a8:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:43:27:10:12:11:E1:9D:EE:55:38:98:F5:D4:B7:E5:DA:0C:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f-5DJxASEeGd7lU4mPXUt-XaDMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.200.0/22
Signature Algorithm: sha256WithRSAEncryption
78:04:76:6d:a1:5a:94:49:45:7d:0a:6b:ab:29:5b:38:4d:0a:
fb:80:2a:0f:a7:7b:24:e2:49:5d:df:53:45:28:3b:48:32:a4:
9e:2c:e9:b5:e7:d9:6d:07:3e:64:3a:a5:5d:20:7f:6c:d4:07:
96:f9:f1:fa:5b:e1:c1:6e:80:8d:78:ea:c3:34:f4:ac:31:c7:
e3:86:91:c3:fa:e0:a4:bc:f1:64:19:eb:c8:6e:c2:0f:65:18:
4e:80:27:9e:56:dc:a2:8c:4d:a3:bd:1c:f1:e9:d4:55:a8:41:
df:b8:35:c8:70:c7:16:3a:1b:ba:c0:8d:0d:7f:09:85:c5:67:
88:c3:ff:a7:bb:77:ff:29:a3:02:de:81:ef:44:99:47:59:64:
1e:a5:07:5d:9c:40:24:45:df:6a:8d:38:51:f3:2f:fe:70:f6:
82:3d:eb:e3:49:95:27:61:1e:c2:c2:8d:73:ab:e6:69:41:fc:
91:50:a8:ea:f6:83:d1:e4:2a:6a:c5:33:f9:76:76:e6:e8:46:
bc:72:98:d1:c7:5c:f1:63:d4:04:e9:05:57:02:61:1d:3e:46:
85:7d:c7:a1:bd:91:13:d4:37:b7:aa:2b:4c:26:1b:c6:68:a8:
64:00:52:ca:ad:9e:c9:1d:69:51:cf:93:70:fd:74:d5:ad:fe:
c1:81:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:11 2025 by rpki-client