![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
File: kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa (raw, json)
Hash identifier: syXYHrZtPU7rhFn4qxEEUxn1mXu/XbrHPY/cKqdnQJo=
Subject key identifier: 91:57:57:06:A1:0A:AF:17:C0:6C:2D:77:25:12:8C:36:31:6D:F4:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1912
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
Signing time: Sat 22 Oct 2022 06:06:04 +0000
ROA not before: Sat 22 Oct 2022 06:06:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6418 (0x1912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=91575706A10AAF17C06C2D7725128C36316DF488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:ea:d6:5a:aa:cd:19:a6:55:bd:67:bd:e7:
d2:ab:de:ad:6f:c2:f8:17:52:23:a5:45:d4:6e:e8:
87:35:d5:e5:8f:19:96:ef:83:91:4f:ce:4a:4e:e4:
39:70:67:07:1b:14:22:2a:72:ed:e9:bc:e9:ad:da:
f0:9a:da:99:57:e8:b2:87:73:13:f7:f8:15:a9:09:
1c:96:3d:01:1e:ac:11:be:7c:54:01:fc:a3:2c:be:
fa:2f:41:3b:11:27:b8:b0:bb:e9:75:f7:c5:51:4c:
6b:ae:33:80:07:3a:a9:98:0b:79:89:e2:6f:cb:b4:
a2:71:74:26:a4:d1:9f:1c:ed:e4:08:ce:56:84:16:
1d:5b:05:51:50:cb:d5:bd:5f:de:4f:65:93:b6:f4:
74:79:e8:38:e7:14:5b:5c:42:ba:af:b1:aa:22:83:
88:34:ae:01:01:62:17:6b:1d:be:98:03:76:d3:d3:
cc:90:fe:f8:0d:14:71:9e:30:33:f2:c7:b4:e0:0c:
61:87:74:ce:85:0e:45:1d:3c:91:40:53:69:cd:6f:
6c:76:ad:aa:12:0f:ab:45:1b:9b:62:9b:db:80:58:
fb:d1:bd:1b:0e:a3:38:3e:62:0a:68:29:12:ce:72:
72:ac:ac:48:0a:16:e3:75:68:02:d6:eb:49:a5:46:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:57:57:06:A1:0A:AF:17:C0:6C:2D:77:25:12:8C:36:31:6D:F4:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.224.0/21
Signature Algorithm: sha256WithRSAEncryption
88:8e:da:3a:22:45:5a:ad:fc:1a:62:d2:ef:c9:07:fd:8d:f5:
d4:e0:7d:e7:a8:53:92:8b:42:29:44:aa:6c:51:f1:6f:80:29:
87:03:0d:fe:4b:e1:a8:e5:d5:0c:b8:b4:57:a2:8f:53:14:3a:
69:3c:38:8e:92:16:fb:3b:9d:00:9c:2a:ba:70:92:35:c2:22:
a4:b7:69:a9:7d:90:cc:f3:59:d0:c3:53:92:98:15:e9:89:b0:
ed:96:34:83:94:7d:b6:30:f2:0a:76:58:d6:de:f0:07:2a:56:
59:1d:ae:ae:48:1e:fd:10:60:fa:af:7a:d5:33:f1:ab:f7:4a:
db:8c:b8:03:77:94:f3:c3:c3:34:a0:c3:68:9b:48:82:aa:d4:
5e:43:a5:34:21:f7:f8:30:14:6b:85:0b:5c:ca:c5:ee:a3:15:
55:26:16:e5:28:64:cb:fa:f5:9b:fe:1f:c7:53:fb:57:d2:02:
27:6c:0c:76:9a:28:ca:33:cc:5d:28:a6:5a:16:ef:4b:3d:3c:
02:0a:75:e6:ca:2f:1d:41:af:50:d5:13:37:c2:4d:92:26:5a:
77:31:27:1a:ba:39:c3:c7:41:51:e5:cd:f4:a6:65:81:b5:7b:
e4:05:99:d4:08:f5:b4:38:11:fb:92:84:dd:3e:63:19:ac:0e:
c8:3e:2e:5d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkxNTc1NzA2QTEwQUFG
MTdDMDZDMkQ3NzI1MTI4QzM2MzE2REY0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7MOrWWqrNGaZVvWe959Kr3q1vwvgXUiOlRdRu6Ic11eWPGZbv
g5FPzkpO5DlwZwcbFCIqcu3pvOmt2vCa2plX6LKHcxP3+BWpCRyWPQEerBG+fFQB
/KMsvvovQTsRJ7iwu+l198VRTGuuM4AHOqmYC3mJ4m/LtKJxdCak0Z8c7eQIzlaE
Fh1bBVFQy9W9X95PZZO29HR56DjnFFtcQrqvsaoig4g0rgEBYhdrHb6YA3bT08yQ
/vgNFHGeMDPyx7TgDGGHdM6FDkUdPJFAU2nNb2x2raoSD6tFG5tim9uAWPvRvRsO
ozg+YgpoKRLOcnKsrEgKFuN1aALW60mlRikhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkVdXBqEKrxfAbC13JRKMNjFt9IgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2tWZFhCcUVLcnhmQWJDMTNK
UktNTmpGdDlJZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANz
peAwDQYJKoZIhvcNAQELBQADggEBAIiO2joiRVqt/Bpi0u/JB/2N9dTgfeeoU5KL
QilEqmxR8W+AKYcDDf5L4ajl1Qy4tFeij1MUOmk8OI6SFvs7nQCcKrpwkjXCIqS3
aal9kMzzWdDDU5KYFemJsO2WNIOUfbYw8gp2WNbe8AcqVlkdrq5IHv0QYPqvetUz
8av3StuMuAN3lPPDwzSgw2ibSIKq1F5DpTQh9/gwFGuFC1zKxe6jFVUmFuUoZMv6
9Zv+H8dT+1fSAidsDHaaKMozzF0oploW70s9PAIKdebKLx1Br1DVEzfCTZImWncx
Jxq6OcPHQVHlzfSmZYG1e+QFmdQI9bQ4EfuShN0+YxmsDsg+Ll0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:39 2025 by rpki-client