![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiDqwhH5XcrM2RCHkYDJ2Tuw6p8.roa
File: UiDqwhH5XcrM2RCHkYDJ2Tuw6p8.roa (raw, json)
Hash identifier: iEWBloPRVXQ6EIHN78a93/vo5IufiJayx/8Mgm8Cix8=
Subject key identifier: 52:20:EA:C2:11:F9:5D:CA:CC:D9:10:87:91:80:C9:D9:3B:B0:EA:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 13BA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiDqwhH5XcrM2RCHkYDJ2Tuw6p8.roa
Signing time: Wed 19 Jan 2022 05:35:23 +0000
ROA not before: Wed 19 Jan 2022 05:35:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5050 (0x13ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 19 05:35:23 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5220EAC211F95DCACCD910879180C9D93BB0EA9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:9f:2c:f1:17:1d:dd:a7:62:80:06:25:5f:
05:d1:ee:30:21:71:66:3a:98:04:55:5e:8d:05:8b:
68:4b:e7:da:06:c5:43:de:75:58:4c:8a:11:cc:c0:
d2:41:2f:69:81:24:8d:68:bd:c4:1d:ee:f0:dd:8f:
aa:97:d5:3b:c0:a8:11:e3:28:ed:04:59:72:55:b6:
0f:30:3c:ba:34:ba:69:35:78:57:38:57:a7:f6:54:
63:40:6d:b9:9f:9d:22:bf:07:71:0b:5e:69:af:fb:
e8:ef:57:61:b2:d0:3f:12:e7:15:8c:05:d8:6d:d4:
a8:aa:f8:89:30:1c:9a:ad:e0:07:d5:78:ab:2d:33:
e8:ff:5a:fb:20:8f:c2:e3:e4:67:37:ec:ba:7d:b9:
27:a7:d4:62:5f:31:61:2b:45:bf:bd:8c:a8:cb:38:
f5:54:4a:af:ba:34:45:5b:17:7f:2c:c8:1e:62:88:
ab:f8:27:50:27:41:17:5f:63:a1:aa:89:ec:ce:05:
75:2a:3b:2d:00:c8:f0:a1:1d:18:84:2c:b5:af:8a:
e5:ab:d2:1b:51:10:8a:12:9e:27:ec:ef:52:03:f4:
70:7e:4e:76:87:ef:d1:18:d6:f1:0a:93:65:cc:ab:
32:76:37:cd:45:f7:cd:17:d6:da:88:e1:2f:a7:c9:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:EA:C2:11:F9:5D:CA:CC:D9:10:87:91:80:C9:D9:3B:B0:EA:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UiDqwhH5XcrM2RCHkYDJ2Tuw6p8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.184.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:cd:7a:ad:ac:d8:54:e7:e2:9c:36:71:06:48:58:05:fa:6f:
24:f8:82:f9:83:20:d7:df:98:b3:7a:1e:76:f9:6d:a6:fa:6f:
62:7a:e2:09:72:fc:a2:dd:c1:25:58:26:c8:90:54:36:1b:0c:
3f:d1:a5:6b:53:27:e6:4d:e8:b6:a4:5e:26:af:43:b8:1e:f3:
23:34:2d:08:1b:9b:f6:5b:42:f6:75:66:2e:7f:73:f2:77:50:
43:df:22:18:36:6e:2f:2b:1a:55:24:a8:bd:cd:a2:da:75:ac:
9a:bf:cc:91:f3:7f:a8:0f:77:58:f4:d4:75:22:a2:8e:fd:f5:
3d:ce:98:1e:d2:a7:ad:ae:f5:f4:6a:a9:84:f0:60:4c:8f:45:
04:15:0e:7c:c3:38:85:c2:f7:5c:48:c7:4a:58:d4:7d:42:92:
aa:82:e6:92:9e:50:b0:ca:07:3f:a2:88:df:e6:3a:35:1a:e6:
c4:19:d5:17:b1:ab:94:2a:00:73:a8:bc:46:3e:8a:f7:8f:9d:
76:b1:c9:f3:2b:1f:d0:59:cb:7c:38:a1:c4:3b:79:75:8e:16:
e5:67:84:e9:77:0d:54:e4:d4:7c:63:31:20:39:55:c2:37:6f:
e5:3c:bc:51:0f:4a:fe:2a:1f:5d:10:93:86:7c:c4:dc:c4:eb:
d6:a8:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:17 2025 by rpki-client