![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
File: fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa (raw, json)
Hash identifier: HhWhpHBGL+DC79t3sqtR71bC7HvMNYCgpfn9Ev9ngnc=
Subject key identifier: 7C:22:34:B4:02:24:89:02:F9:1D:C0:27:A4:CF:EE:4D:67:20:A4:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ED1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
Signing time: Thu 26 May 2022 03:29:16 +0000
ROA not before: Thu 26 May 2022 03:29:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7889 (0x1ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 26 03:29:16 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7C2234B402248902F91DC027A4CFEE4D6720A4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:db:c8:3e:d4:8a:38:01:19:85:74:89:33:
46:66:61:1f:a3:d2:f5:79:e6:78:9e:f9:ba:77:c3:
03:ab:d6:9d:16:46:51:9b:c2:42:12:35:01:32:68:
f1:4c:57:d0:e3:af:05:7b:66:9f:3a:13:c6:db:1f:
4e:05:a7:bd:64:32:a9:c8:be:06:23:23:35:96:6a:
f4:de:6c:e1:40:f5:8a:f6:1e:0c:a3:24:c8:cf:54:
25:86:26:14:4f:f3:d1:c4:9b:e7:f6:1f:68:9a:6a:
a3:9f:70:95:57:c9:d0:cc:fd:f7:6c:b3:e2:5f:c9:
8d:af:3b:b1:9f:0c:a7:13:77:97:8d:31:e8:6a:31:
de:7a:5a:5b:01:08:bf:e8:7e:b6:7f:48:cb:a2:d6:
d7:61:69:42:85:ed:6b:6e:78:67:e5:a5:bd:4d:5e:
c4:25:55:af:09:a2:ea:7c:bc:07:30:01:7c:ea:aa:
89:f9:bc:b7:5b:09:2d:56:61:83:3a:59:73:18:37:
d3:f7:47:90:74:37:1d:61:cf:12:bb:22:a0:de:57:
07:d9:61:61:58:4e:77:b5:f6:5b:c4:82:59:04:cc:
91:a6:5a:67:aa:b9:2e:b0:81:aa:d9:50:f0:78:a8:
a1:db:1c:34:bb:de:4d:f7:3f:e9:6c:c3:91:6a:dc:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:22:34:B4:02:24:89:02:F9:1D:C0:27:A4:CF:EE:4D:67:20:A4:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fCI0tAIkiQL5HcAnpM_uTWcgpNk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/21
Signature Algorithm: sha256WithRSAEncryption
04:bd:18:3e:96:5f:79:49:a8:66:25:40:65:9a:e9:8e:1d:dd:
d6:bc:d5:0d:7a:ff:d4:d7:09:df:04:4f:f6:79:fe:e4:98:b7:
e6:f4:c4:e1:1b:67:cb:86:3c:fb:af:62:d8:60:55:10:b6:4e:
dd:44:61:09:6b:21:b9:92:53:0a:2f:a3:9d:bf:a4:e3:b6:da:
aa:9a:03:ad:b5:5c:fe:ca:1f:b7:7b:95:a0:6a:fd:4e:24:5c:
13:d8:2b:e3:30:f8:3d:2a:8b:29:5e:ae:8e:cb:c0:b5:df:62:
b5:b1:bd:31:9e:1e:16:ab:e7:2b:86:7a:68:02:e9:20:77:ed:
bf:04:87:b1:4b:aa:ec:57:9c:0b:34:5d:d3:ba:3d:7b:7b:f8:
2d:3d:f5:50:a6:8b:ea:8a:20:16:15:57:fc:8b:1b:ed:67:48:
2f:1a:00:85:5a:32:b9:91:c3:50:1d:ff:34:82:a6:5f:76:0b:
70:4a:2c:a1:c3:3e:a2:70:05:a2:c1:0c:9e:6c:f7:2d:d1:f8:
f9:62:32:c4:83:b2:0f:9c:f2:35:35:33:d0:9f:ae:d1:fb:d3:
6c:75:30:d6:65:69:28:5e:a6:6b:e6:09:1c:d2:7d:af:3f:e3:
6a:9f:54:e2:a3:e0:4e:ae:ef:91:77:f7:91:00:55:c6:33:5a:
f9:1d:42:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICHtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA1MjYw
MzI5MTZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdDMjIzNEI0MDIyNDg5
MDJGOTFEQzAyN0E0Q0ZFRTRENjcyMEE0RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmpNvIPtSKOAEZhXSJM0ZmYR+j0vV55nie+bp3wwOr1p0WRlGb
wkISNQEyaPFMV9DjrwV7Zp86E8bbH04Fp71kMqnIvgYjIzWWavTebOFA9Yr2Hgyj
JMjPVCWGJhRP89HEm+f2H2iaaqOfcJVXydDM/fdss+JfyY2vO7GfDKcTd5eNMehq
Md56WlsBCL/ofrZ/SMui1tdhaUKF7WtueGflpb1NXsQlVa8Joup8vAcwAXzqqon5
vLdbCS1WYYM6WXMYN9P3R5B0Nx1hzxK7IqDeVwfZYWFYTne19lvEglkEzJGmWmeq
uS6wgarZUPB4qKHbHDS73k33P+lsw5Fq3JuHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfCI0tAIkiQL5HcAnpM/uTWcgpNkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ZDSTB0QUlraVFMNUhjQW5w
TV91VFdjZ3BOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wkAwDQYJKoZIhvcNAQELBQADggEBAAS9GD6WX3lJqGYlQGWa6Y4d3da81Q16/9TX
Cd8ET/Z5/uSYt+b0xOEbZ8uGPPuvYthgVRC2Tt1EYQlrIbmSUwovo52/pOO22qqa
A621XP7KH7d7laBq/U4kXBPYK+Mw+D0qiylero7LwLXfYrWxvTGeHhar5yuGemgC
6SB37b8Eh7FLquxXnAs0XdO6PXt7+C099VCmi+qKIBYVV/yLG+1nSC8aAIVaMrmR
w1Ad/zSCpl92C3BKLKHDPqJwBaLBDJ5s9y3R+PliMsSDsg+c8jU1M9CfrtH702x1
MNZlaShepmvmCRzSfa8/42qfVOKj4E6u75F395EAVcYzWvkdQqc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:52 2025 by rpki-client