![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
File: fk9zqjk-oRbRsr4GPI_Lof_T448.roa (raw, json)
Hash identifier: 0vICI+TN4s7QvrYtEoQqoOHtS8034eAHyNjpBHEplvw=
Subject key identifier: 7E:4F:73:AA:39:3E:A1:16:D1:B2:BE:06:3C:8F:CB:A1:FF:D3:E3:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 217E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
Signing time: Fri 25 Nov 2022 04:39:59 +0000
ROA not before: Fri 25 Nov 2022 04:39:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8574 (0x217e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7E4F73AA393EA116D1B2BE063C8FCBA1FFD3E38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:5e:47:90:49:73:7a:10:9d:d7:9e:79:ce:
11:31:32:82:11:1c:d7:04:85:35:48:9c:98:97:87:
3f:72:ee:98:08:92:26:e7:f4:21:91:c8:70:f2:cb:
54:c5:b6:d4:51:a5:ed:dc:67:7f:f3:ce:d8:52:ff:
32:1e:87:7a:28:b2:2d:8c:cb:98:dc:57:f1:ff:d8:
87:fd:28:76:d4:6e:42:f4:c9:93:e4:cd:ef:70:4f:
0e:a5:12:d3:76:f2:dc:62:e0:bd:40:4b:44:2d:40:
c6:20:14:e0:51:f0:0a:f9:87:6a:21:62:b8:47:2f:
f3:82:de:16:40:cd:68:4f:17:07:75:33:c7:ab:ba:
15:0c:ff:a5:9e:d3:f7:c3:49:02:bf:58:23:56:f2:
8f:74:33:ca:52:a2:2f:f8:f9:d5:ca:d5:45:ac:3d:
c7:78:8d:dd:59:fc:80:aa:ec:d8:d6:d7:8a:73:16:
9a:4b:35:f1:99:3c:e2:36:80:1d:ca:fd:0a:65:d5:
ff:6c:19:ec:cd:83:65:ff:6d:78:16:21:73:68:50:
14:bf:8e:1d:f9:1e:23:3f:1c:49:b2:ea:ab:c4:c2:
63:47:80:85:ee:51:cf:2c:77:e4:50:c0:73:8c:75:
d5:b6:19:da:1a:e8:5f:e2:67:c6:ca:44:bf:fa:04:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4F:73:AA:39:3E:A1:16:D1:B2:BE:06:3C:8F:CB:A1:FF:D3:E3:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fk9zqjk-oRbRsr4GPI_Lof_T448.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:62:76:07:df:e0:74:06:07:36:8c:fa:03:6a:bf:4a:af:3a:
b7:f1:e7:9f:4b:ea:10:81:43:5f:39:de:10:e9:b4:17:63:db:
4f:1e:a9:04:31:13:bd:b2:d4:68:05:e9:e5:c4:b1:1d:4c:dc:
5c:ee:92:80:74:72:10:c9:25:67:99:25:98:87:14:0b:0a:76:
e9:07:79:fe:e3:24:40:2c:c7:d3:4d:1c:aa:bc:4b:57:e4:4b:
7f:c9:b8:cf:7a:84:95:a8:b5:9c:b3:dd:b4:89:60:17:ec:2c:
76:45:ae:a4:0f:ab:fa:55:e5:4d:cb:f8:d4:44:15:7a:74:71:
20:67:c5:90:de:56:6c:1a:9d:9b:dc:35:d8:02:56:89:23:3b:
33:37:84:e1:18:a6:a9:c9:ee:be:1c:ac:3c:9e:2f:d7:82:18:
b0:8f:a0:71:05:68:6e:3a:45:76:70:94:35:e6:53:74:14:28:
78:fc:73:ef:fc:92:37:2a:7e:1e:6e:fd:8b:d4:12:b9:b1:93:
1a:37:35:f0:a3:17:9e:77:7b:5b:ff:b3:8a:45:22:88:da:98:
54:31:59:12:f6:6a:c2:17:57:f1:8e:b6:6c:4d:71:5a:12:4b:
50:14:9a:ad:f8:98:14:b1:af:ec:33:dd:c9:aa:1e:75:59:e9:
87:7b:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:12 2025 by rpki-client