![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa
File: eKFdijJ5SwxtbAVlXNhWJixht_0.roa (raw, json)
Hash identifier: Ql0KXn3vHG44/v+01ILV3I9s3/67VWX/wibkH/i+RhQ=
Subject key identifier: 78:A1:5D:8A:32:79:4B:0C:6D:6C:05:65:5C:D8:56:26:2C:61:B7:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E95
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa
Signing time: Fri 01 Sep 2023 10:16:14 +0000
ROA not before: Fri 01 Sep 2023 10:16:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 114.198.176.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7829 (0x1e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=78A15D8A32794B0C6D6C05655CD856262C61B7FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:64:e2:19:64:37:10:46:9e:75:99:25:9a:
35:53:84:64:42:3a:74:69:d2:9b:56:28:cd:ee:4f:
28:a7:ce:df:d1:e0:09:d3:23:1e:de:3c:29:57:67:
6b:fb:a8:78:a7:ec:83:8c:fd:b9:d1:f8:90:f7:73:
0c:f4:e4:de:5a:5c:0d:d4:7b:e0:a2:9d:7c:13:a5:
72:c4:8f:a8:b6:e1:80:6f:02:16:ab:8d:99:c7:11:
d9:55:77:23:ba:20:1b:72:05:07:ef:f3:d6:f7:c0:
e1:d1:b2:b9:6d:c4:c2:f4:ef:33:0d:60:60:dc:6d:
84:4c:de:6b:8d:fc:0c:b7:ec:34:32:46:02:2b:33:
22:22:4f:f8:80:1a:84:85:3b:8c:30:dd:0e:95:b4:
57:a9:e9:c0:4e:aa:2a:10:c7:fd:a0:f3:2f:8a:dc:
7c:3a:84:21:8e:7e:83:f0:93:eb:11:d5:65:63:c9:
ea:e8:ee:55:e2:5f:10:2e:39:b5:fb:13:d4:20:5d:
81:29:d0:fb:d7:a3:6d:f0:be:9f:4a:66:3d:06:ed:
9f:c6:19:a7:4c:dd:59:7a:b1:c4:23:ac:e5:52:de:
7a:5f:b4:6a:36:35:31:6c:84:ad:9f:f6:b4:c2:10:
b7:97:28:9f:02:97:22:29:7e:37:e0:a4:90:44:ea:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:5D:8A:32:79:4B:0C:6D:6C:05:65:5C:D8:56:26:2C:61:B7:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eKFdijJ5SwxtbAVlXNhWJixht_0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
31:58:eb:0d:fe:2c:30:68:88:e9:bb:cf:c2:0f:6c:c0:45:3a:
39:72:36:80:59:f1:22:f1:93:8c:26:19:d2:ed:44:a5:d6:92:
60:4f:0d:2a:2d:f7:53:70:41:e5:b0:a2:8b:23:9b:9a:a1:df:
2f:95:96:f6:f3:7f:e1:db:26:d0:ef:98:35:5c:67:5e:17:50:
ff:9e:37:4d:42:4d:01:5c:9f:08:58:31:8c:24:1f:c8:23:f4:
59:0a:6b:ad:62:b4:47:05:22:22:a0:90:db:51:ab:8b:5c:83:
fd:01:ef:53:d8:8f:43:82:16:71:f5:5c:c2:d8:72:69:74:0f:
f2:4a:72:37:05:94:59:2a:8a:37:40:c4:82:20:43:e2:e0:c0:
a7:be:7e:65:1c:18:6e:ce:5e:1a:07:5c:a5:e8:e9:bd:54:7d:
0c:5d:87:18:de:c3:ae:e4:23:01:98:45:0a:43:cf:46:38:9a:
d5:c4:3b:cc:d4:5a:c2:ed:65:f6:44:d5:43:40:1b:7a:27:e2:
97:f2:69:17:09:9c:29:a2:e9:21:29:67:38:6c:73:a9:5f:3e:
b9:3c:ba:c9:fb:61:e2:9d:e1:e6:c6:a5:98:db:f9:5a:01:f4:
06:21:c9:38:e2:79:ef:a1:bd:1d:5e:ca:81:49:ac:a2:6f:55:
22:be:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:27 2025 by rpki-client