![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
File: wKcDV25rDAEm3p_z3NVHjdLvPWk.roa (raw, json)
Hash identifier: fdibmTx1cReDFL1lLq0MWV2n6ZkL4sPOH8Mgo0Wcxug=
Subject key identifier: C0:A7:03:57:6E:6B:0C:01:26:DE:9F:F3:DC:D5:47:8D:D2:EF:3D:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E9D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
Signing time: Tue 29 Sep 2020 09:55:57 +0000
ROA not before: Tue 29 Sep 2020 09:55:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C0A703576E6B0C0126DE9FF3DCD5478DD2EF3D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:ad:dc:dd:52:36:41:ad:52:e6:01:54:65:
ee:ea:a4:5d:4c:5e:80:f8:9b:16:fc:c9:21:7b:aa:
60:5f:d7:3f:84:ce:87:1e:d3:ef:ea:0a:28:5d:17:
dc:b3:fe:77:02:55:67:c2:ae:c8:dd:dd:f0:53:79:
cf:47:58:46:ef:aa:76:24:7c:c7:25:d0:83:d2:cc:
04:72:f4:9c:74:2d:62:cb:dc:80:2e:6e:9e:4e:76:
db:31:44:81:8c:c4:36:98:f8:bf:ae:e3:19:31:aa:
b8:0c:ae:d4:95:3c:23:86:25:e2:9c:02:e3:b2:d5:
7a:88:1b:4c:ed:61:71:08:1f:c6:76:8f:84:a9:6f:
47:20:fe:ee:21:b4:8a:c6:e8:74:07:27:7d:f8:23:
3b:4f:82:6d:e8:ad:7b:4c:46:5c:48:f8:c8:c0:b0:
a1:dc:a7:5f:0b:31:54:7a:d5:28:d0:bf:66:df:65:
29:c3:30:54:6e:bc:3d:5e:25:24:d6:88:a7:6b:36:
04:82:70:06:fd:c6:63:88:0a:32:31:d0:77:54:c3:
8a:db:e4:3f:87:15:a9:4e:3a:16:99:0c:3b:3b:61:
ef:9b:f0:52:cb:60:87:53:cb:29:37:f4:50:c8:7c:
9e:6f:de:d8:37:9c:31:aa:82:3e:31:3f:66:53:7c:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:03:57:6E:6B:0C:01:26:DE:9F:F3:DC:D5:47:8D:D2:EF:3D:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKcDV25rDAEm3p_z3NVHjdLvPWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:e0:e6:03:b9:47:1d:d9:71:a2:2c:91:5c:e7:35:db:98:e2:
f9:40:cd:ba:c7:f5:4e:82:9d:ae:c0:b9:ec:e4:71:3b:43:f6:
07:6f:24:d7:1f:d5:3d:f5:e2:3c:b3:66:f8:b9:76:31:d9:27:
9d:9d:f9:09:b2:21:c0:91:3d:1f:f6:42:d5:53:72:34:72:66:
05:fc:81:46:c4:29:d4:ae:95:79:19:fe:0e:e8:95:2e:d0:c3:
d4:44:ce:65:b0:b8:83:e7:f4:73:9c:73:43:0b:50:12:9a:10:
87:92:03:fc:c7:0a:ef:ab:13:e7:dd:51:02:86:d1:8f:dd:5e:
b6:df:3f:0b:60:17:cd:5c:73:72:0f:b1:c2:bd:a5:4c:13:e1:
52:8e:41:2d:39:07:59:1c:f7:1a:28:26:f5:d6:aa:b5:17:8a:
3d:02:1b:71:27:1f:c3:18:93:f5:1c:87:0f:1d:f8:30:c6:fc:
a6:94:65:81:2f:0a:21:11:46:4a:31:bf:e8:df:e4:95:85:c2:
44:54:b3:08:d1:d8:62:cf:61:40:f5:d3:90:61:cd:32:2b:4d:
f4:64:87:ef:89:6f:34:da:d9:99:05:40:0a:7a:17:1c:d2:15:
b0:e7:5d:3f:b2:5f:71:e6:85:15:f4:ec:31:35:7a:ca:c8:95:
55:de:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:33 2025 by rpki-client