![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
File: zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa (raw, json)
Hash identifier: 0g0ghF/kM0HtyXg3nP+YwnSybHPWyRG7878NzZ48Kmk=
Subject key identifier: CE:F0:58:9C:9C:53:C5:F0:5D:01:20:B5:4F:45:FF:37:17:3F:A5:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
Signing time: Tue 29 Sep 2020 09:54:10 +0000
ROA not before: Tue 29 Sep 2020 09:54:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CEF0589C9C53C5F05D0120B54F45FF37173FA591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:df:7c:13:b4:5b:04:7d:bc:2b:73:96:3e:
3f:06:60:87:38:61:a7:f0:ba:81:b9:d9:8d:3f:23:
44:95:27:ed:e7:94:ce:d9:9a:2a:86:3c:c6:81:26:
0a:5c:b6:d5:d4:77:95:0d:70:54:65:39:9f:dd:1f:
ba:72:c5:3b:42:dd:d0:d6:12:ad:bf:99:12:91:70:
8d:9f:a7:03:ee:8b:f9:da:23:53:9b:8f:f5:55:21:
a2:af:b1:3f:89:14:fd:ed:20:d0:15:36:7b:ec:53:
a6:19:a3:20:8d:02:76:f6:79:e3:3b:1f:3d:83:ac:
19:cf:5a:a3:fa:c8:1f:ef:c0:60:be:41:be:42:59:
fc:72:7f:38:72:66:68:eb:48:14:35:4c:d7:a0:1f:
28:1b:5b:8b:5c:72:a6:d7:71:c4:c0:83:c2:26:fb:
a4:e5:24:e4:00:27:b0:d3:21:5b:71:b6:86:5d:cf:
41:e8:8f:16:83:b2:19:a2:28:a1:ec:ed:5a:bc:1b:
cb:25:6d:6f:d4:27:4a:85:56:c1:b8:cf:16:f3:7f:
05:54:7f:54:70:20:44:4e:aa:2f:dd:f3:8b:cf:ee:
28:fa:1a:39:a3:10:10:53:d2:d5:4f:96:65:41:6e:
1f:b2:6b:ba:89:d4:58:50:0d:7c:2d:29:20:fe:3c:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:58:9C:9C:53:C5:F0:5D:01:20:B5:4F:45:FF:37:17:3F:A5:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvBYnJxTxfBdASC1T0X_Nxc_pZE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:30:75:3d:8e:0b:b9:d9:ac:29:ec:7e:24:0c:f2:a6:81:24:
82:f2:e7:45:5b:2a:3f:cc:e2:8f:bb:1c:b4:cb:e1:a8:d8:86:
0e:19:11:b3:47:cd:97:42:91:ae:14:03:ce:7a:8e:f2:32:96:
91:88:61:11:5d:67:4a:af:45:b7:8e:10:dc:1e:f1:58:e8:ce:
c4:9c:a5:1f:71:be:40:57:b6:06:9c:72:1d:4c:29:3c:f0:fa:
e0:1e:49:c0:92:1a:aa:a0:92:ce:3a:af:36:45:44:22:ae:85:
bd:e6:e1:5b:fe:89:4e:84:19:10:2d:94:85:e1:17:bb:26:c5:
cb:bf:e1:16:55:a6:74:b1:62:ba:9a:37:a7:e4:44:85:f5:52:
7d:68:dc:94:ce:38:e1:84:53:bd:c6:ef:86:a4:6f:35:d6:69:
98:e4:ad:44:4d:52:74:33:ef:22:c3:0f:44:be:e5:34:e3:58:
14:6f:30:36:57:41:cf:12:0d:f6:53:57:a8:2c:57:b1:07:82:
0f:f0:4a:06:7a:35:25:25:78:51:a3:d9:db:d7:26:24:74:0c:
11:56:b4:46:d2:14:d4:15:b3:a8:5d:5d:39:9d:f8:26:6a:9b:
29:16:67:5f:8b:7f:a4:fc:e8:1b:04:df:b0:f9:34:5d:62:7e:
71:7b:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:51 2025 by rpki-client