![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa
File: 8xEUeJ29C10wgAylVUiD5rdYXk0.roa (raw, json)
Hash identifier: mQ18gIg4NPFJD+qEkKZz9yWDp/Z2zjF17KXdrPXRENY=
Subject key identifier: F3:11:14:78:9D:BD:0B:5D:30:80:0C:A5:55:48:83:E6:B7:58:5E:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1D81
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa
Signing time: Fri 01 Sep 2023 10:14:55 +0000
ROA not before: Fri 01 Sep 2023 10:14:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 2407:4b00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7553 (0x1d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:14:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F31114789DBD0B5D30800CA5554883E6B7585E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:8c:db:ad:ff:71:14:4e:5f:36:ae:54:36:
38:2d:fb:f8:55:d7:32:d4:bd:68:f3:9f:f4:77:73:
6a:98:a2:cd:50:e2:15:4e:b2:ba:8f:d6:e2:8f:8b:
36:1e:3f:f5:7e:31:b2:5b:2d:15:6c:15:8c:26:8c:
5f:61:b9:a8:e5:23:16:4c:cd:79:86:bf:64:cf:94:
8e:d7:99:97:f9:89:19:dc:ca:9a:6b:53:20:73:2b:
aa:6a:ce:97:88:49:2a:d5:c2:08:5c:96:9a:14:ee:
60:0a:ec:4c:77:1b:73:99:76:8b:6d:f1:50:1d:9a:
e4:24:ac:ab:a1:dc:4e:76:fc:36:70:63:ea:07:78:
0e:a7:5f:31:11:ae:ef:13:b2:df:9e:79:4f:ac:71:
1a:98:ec:64:fd:76:ea:94:12:a9:b4:60:61:cf:00:
0b:fb:e9:ac:c7:22:2c:92:14:3e:e9:47:e1:d2:a8:
8e:8e:09:85:69:5d:3f:ba:14:12:ed:4f:f5:2c:1b:
df:ea:1e:c7:b3:68:5a:21:18:ed:f0:92:46:3d:ec:
f7:88:61:f6:2f:f3:2c:95:0a:0e:2e:4c:ef:2d:93:
d4:ed:12:59:27:31:7b:44:eb:40:19:ea:9d:e1:9a:
d6:17:ac:43:09:73:42:1d:b8:10:3d:82:49:a6:4c:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:14:78:9D:BD:0B:5D:30:80:0C:A5:55:48:83:E6:B7:58:5E:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8xEUeJ29C10wgAylVUiD5rdYXk0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
6a:92:ea:5b:7d:96:5e:d0:0a:24:c4:18:4f:91:bf:a9:39:02:
2d:5b:db:33:a7:06:6c:75:28:c1:81:02:98:fd:bc:d3:90:43:
9e:fb:4f:44:7c:83:b9:7f:4e:65:98:db:34:16:b1:46:be:92:
2f:ec:68:1e:66:ad:e8:96:87:f0:e3:86:55:f1:2b:29:64:fc:
a3:44:23:a4:c8:46:79:9e:d1:43:31:64:ef:4e:ba:46:36:c0:
7f:8d:16:57:7f:ee:21:14:d3:2c:6d:52:74:04:69:d1:23:1f:
03:d3:ab:ac:96:16:ec:2d:e7:d3:86:39:de:9b:38:9d:0b:05:
da:1a:4e:52:68:c9:81:73:70:70:a6:6a:8f:a1:b1:97:43:12:
ad:fe:43:88:9b:4a:ed:ab:bd:cc:ac:a9:dd:c9:d7:d3:7d:0e:
25:71:95:3c:ee:71:29:5d:3a:1b:e6:67:59:15:8e:5c:e8:e6:
c6:a7:59:1c:00:40:02:6f:41:ae:63:2b:ea:5f:e6:71:61:02:
e9:c4:6b:e7:58:08:fd:37:72:a5:8d:03:f8:2e:16:c0:bb:4f:
ba:c4:55:d9:20:21:9d:a8:4c:11:8c:ed:4a:78:85:da:fa:f5:
51:60:a9:5d:9d:58:a3:46:46:ce:35:e7:a4:96:05:48:3b:e3:
4e:0c:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:58 2025 by rpki-client