![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u61VHgihK_Wm0LIaB9j7pIZAP20.roa
File: u61VHgihK_Wm0LIaB9j7pIZAP20.roa (raw, json)
Hash identifier: yG+NnhFVW3PHWyhkC5aJVZxUJF/7rCnYbfzxEckDuD4=
Subject key identifier: BB:AD:55:1E:08:A1:2B:F5:A6:D0:B2:1A:07:D8:FB:A4:86:40:3F:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u61VHgihK_Wm0LIaB9j7pIZAP20.roa
Signing time: Fri 25 Nov 2022 04:39:06 +0000
ROA not before: Fri 25 Nov 2022 04:39:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8395 (0x20cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BBAD551E08A12BF5A6D0B21A07D8FBA486403F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:f2:a0:da:8d:ce:df:c1:9d:df:68:0f:dd:
8e:e9:94:70:74:68:4b:7e:b2:d2:e1:97:9c:db:5e:
1a:b5:3a:4a:b8:4f:d0:9c:4d:9a:37:33:39:8c:03:
5c:84:df:5d:3b:a5:b9:91:95:8a:e0:06:91:61:92:
e3:dd:0d:cc:38:f7:fc:86:59:19:5c:cf:30:64:14:
f9:fa:fd:e8:0d:42:7a:9b:bf:b7:31:25:22:63:c1:
c3:21:bb:8a:35:d1:03:2c:0a:ed:9d:0c:b1:08:8c:
ce:34:af:df:62:92:e6:ec:c9:64:6d:7c:54:99:58:
d6:a7:30:b3:e0:91:4b:80:02:80:6e:db:ae:d6:46:
52:7f:c4:e4:ae:52:7a:28:37:da:4a:41:f7:4b:5e:
22:b2:e0:0a:ac:8e:f3:84:5e:fa:76:37:67:1b:62:
6a:6e:85:d4:9e:0f:dc:05:84:61:e7:e3:db:62:f5:
40:11:ee:85:fe:2b:f0:0c:dd:ec:bf:27:6c:ba:80:
c7:03:9e:ad:3c:3f:27:fd:09:2f:30:34:c6:ba:8f:
65:4d:0f:18:dd:a3:a9:3c:c5:1d:f1:76:9d:ab:4c:
04:ed:11:4f:18:f1:49:03:27:26:e2:08:be:d9:49:
c2:55:48:b2:d5:b7:70:57:8e:12:93:a5:cb:e9:7c:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:55:1E:08:A1:2B:F5:A6:D0:B2:1A:07:D8:FB:A4:86:40:3F:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u61VHgihK_Wm0LIaB9j7pIZAP20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:96:8c:08:4b:fd:09:3a:d4:5f:a3:be:56:65:2a:4b:33:40:
07:89:5d:c9:fa:ba:71:a5:7f:80:c3:5f:40:8b:e1:0e:0d:70:
2c:af:b6:ce:a6:11:84:99:7d:32:85:c3:62:0a:04:7d:95:72:
92:b7:39:4c:28:2f:6c:82:98:e9:ca:ad:fe:2c:d5:c9:ac:12:
5f:a8:2a:16:f8:d2:c1:5f:28:37:d1:48:ef:95:66:dc:d1:ac:
21:b1:11:93:92:71:b4:dc:ba:c0:de:91:f4:17:a3:99:b7:67:
8e:1e:be:ef:6d:fa:7a:6d:5f:cf:28:59:a7:f6:2e:9f:54:43:
8f:cc:f3:7e:13:9a:b8:56:24:6f:2c:92:7c:9a:0f:59:c9:d6:
0e:a7:1f:b4:58:e0:42:74:9b:05:c9:71:be:cc:ab:3c:11:d2:
54:bd:c7:6b:aa:a7:42:ab:dc:ee:a1:2a:09:32:8b:3d:2b:f0:
e1:9f:e8:e6:e7:66:da:25:f3:74:88:2b:ec:40:40:ab:f0:ab:
66:1b:39:73:b9:b1:56:27:f3:25:7d:94:03:eb:b1:af:14:3c:
1a:af:d9:1d:8d:bf:0b:92:87:32:3c:d6:88:4b:70:38:2d:b7:
2e:cb:6c:63:a9:ff:36:ab:46:61:ff:2b:b8:1b:e1:25:a5:2e:
40:9a:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:27 2025 by rpki-client