![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
File: swKAsbAPVupelyi4dG5fRvH7Uwo.roa (raw, json)
Hash identifier: SYSe/fUaXEwIHn1q7W2Sl6GQtoyUM/3pvep2zgckduo=
Subject key identifier: B3:02:80:B1:B0:0F:56:EA:5E:97:28:B8:74:6E:5F:46:F1:FB:53:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
Signing time: Fri 07 Apr 2023 07:34:57 +0000
ROA not before: Fri 07 Apr 2023 07:34:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.58.112.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7027 (0x1b73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:34:57 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B30280B1B00F56EA5E9728B8746E5F46F1FB530A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:f3:bb:ed:ce:57:f9:00:9f:21:29:a9:c0:
2a:fb:c5:4f:94:5c:4a:d7:2e:be:9d:b9:dc:43:39:
fe:b7:c2:86:ee:ba:d1:0f:25:a7:bb:38:f6:b7:96:
3b:d5:ed:58:e8:5b:93:29:2c:d6:0a:0b:21:93:c4:
0b:80:da:a0:4c:e3:23:cf:54:63:f9:e0:5f:a0:b3:
4c:c2:ee:0d:ab:41:fe:9e:ef:a0:68:48:21:4d:d8:
4a:04:db:85:f7:b3:5b:c5:a7:89:23:6c:2f:d4:ab:
b4:83:32:6c:b0:40:e8:5f:35:60:e9:38:fe:74:ea:
62:46:7e:94:72:98:ea:8a:bb:85:c3:84:89:9b:f1:
83:4f:71:21:bc:85:88:5b:f5:78:a9:4a:1e:2d:d8:
62:07:4c:ce:aa:de:ae:10:64:e5:ff:00:8f:69:97:
75:bd:7f:0f:e5:c0:dc:84:1b:b8:56:65:2b:a3:ee:
30:52:ca:27:a0:af:51:6b:b7:53:a4:d5:74:f2:30:
eb:48:fa:ab:8f:d2:3d:9d:41:23:20:6c:8e:b1:24:
1a:7f:b7:70:b9:71:15:4b:59:1f:ab:f7:ff:15:ad:
3e:59:cd:66:dc:5a:5d:8d:bd:a7:c4:1c:83:94:8a:
a4:92:ab:6a:f3:d3:de:b2:7a:25:64:0c:be:ba:cf:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:80:B1:B0:0F:56:EA:5E:97:28:B8:74:6E:5F:46:F1:FB:53:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/swKAsbAPVupelyi4dG5fRvH7Uwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
45:59:5c:6f:89:cb:af:1c:ff:e2:8b:d4:84:a2:a8:a5:77:ec:
13:4f:23:8b:ff:a7:33:06:68:fe:0b:3d:ce:31:d4:41:c3:1a:
f5:d2:18:0b:4c:30:29:df:e8:d2:8e:d9:78:c0:47:50:a6:b7:
60:a3:84:56:56:bb:ee:13:19:99:39:2d:2b:2c:50:0b:a4:36:
3b:fb:69:cd:bb:37:69:25:77:a9:0c:d2:1f:1c:2b:99:b6:c8:
0f:37:f8:52:fa:3a:8a:61:67:9c:c3:86:f4:de:52:97:e2:f9:
63:89:85:3a:52:d0:3b:47:53:68:e8:16:ff:c5:66:3a:2c:91:
73:f5:7c:72:48:e4:71:4e:c1:bb:cd:cf:3b:31:b4:57:55:df:
02:00:b1:d5:b6:5b:11:79:49:9a:c1:79:49:c9:49:94:df:10:
f3:73:ee:b2:df:92:5a:4b:8d:8e:13:6e:20:89:71:f2:c0:35:
ee:cf:17:5d:cf:36:75:d4:b2:48:d4:ab:c4:69:61:ff:01:9d:
aa:e7:49:63:28:b2:d6:f2:58:ad:b5:1d:9a:70:5d:97:6b:22:
87:af:98:4b:f3:b6:bf:8d:fa:5e:49:b2:8e:05:5f:1f:2f:71:
b0:6e:7a:64:0d:87:c1:d6:1e:84:d0:df:ef:98:f0:e6:46:5e:
1b:10:0e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:44 2025 by rpki-client