![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VOCOM/HlViWYW0g3mNyjGQFHBDoOfK_js.roa
File: HlViWYW0g3mNyjGQFHBDoOfK_js.roa (raw, json)
Hash identifier: 2u0+TkJxljlxfW31AKY4y0ZjaPjq2+hNCuCMlRbhA5g=
Subject key identifier: 1E:55:62:59:85:B4:83:79:8D:CA:31:90:14:70:43:A0:E7:CA:FE:3B
Certificate issuer: /CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Certificate serial: 09
Authority key identifier: 9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/HlViWYW0g3mNyjGQFHBDoOfK_js.roa
Signing time: Tue 23 May 2023 03:27:29 +0000
ROA not before: Tue 23 May 2023 03:27:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63897
IP address blocks: 103.178.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E847108EBA0B550BC020FD9B1DC6DEB29E0DBEF
Validity
Not Before: May 23 03:27:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1E55625985B483798DCA3190147043A0E7CAFE3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:10:89:61:e9:8a:25:0c:cc:7e:a5:9e:14:
19:61:40:be:18:91:1e:0d:04:99:92:b2:ca:9f:8f:
94:66:50:bd:d3:5d:75:9a:e2:2a:ed:f7:3a:40:78:
60:b2:c0:a3:d3:6f:dd:14:1e:dd:17:c7:b5:1a:9e:
2a:1b:b6:37:ea:ea:e8:8b:97:7d:e9:a8:0e:10:7c:
a8:4d:57:e7:93:8a:ac:b2:b0:94:eb:6b:88:cc:70:
38:f0:61:84:4f:32:23:e9:14:1c:c7:04:49:09:f7:
5a:57:5c:ea:fa:d5:2b:2e:f4:c8:bc:4d:ef:33:e2:
23:8f:c1:15:c5:c3:f2:1e:03:f9:1f:6e:c9:d9:2a:
54:29:08:fe:3c:ec:78:a1:e9:8a:d8:db:0b:c8:4f:
88:3c:11:27:d2:93:68:c3:7d:dd:28:13:60:ba:81:
7d:3e:0f:9c:0d:06:32:de:33:af:27:be:d1:28:72:
8c:20:cd:c9:c6:d4:28:32:8b:5c:bb:c2:59:bc:c9:
0e:2c:d8:1f:63:8b:a8:ab:f0:bb:42:b6:c6:36:2a:
09:ed:4f:7f:f8:d0:cd:fb:ed:34:a8:3a:2f:14:46:
3c:81:66:e0:dd:a0:0e:60:66:68:f2:f3:1e:e7:a0:
05:fc:18:d3:fd:d6:02:bf:e6:0b:ed:60:1c:45:90:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:62:59:85:B4:83:79:8D:CA:31:90:14:70:43:A0:E7:CA:FE:3B
X509v3 Authority Key Identifier:
keyid:9E:84:71:08:EB:A0:B5:50:BC:02:0F:D9:B1:DC:6D:EB:29:E0:DB:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/noRxCOugtVC8Ag_Zsdxt6yng2-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/noRxCOugtVC8Ag_Zsdxt6yng2-8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VOCOM/HlViWYW0g3mNyjGQFHBDoOfK_js.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.37.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a7:13:b7:5b:68:49:84:38:c6:97:d5:33:79:84:49:40:54:
f4:38:cb:b4:8a:21:0a:58:45:71:dc:33:31:13:22:32:bb:56:
52:d9:41:38:0e:b2:6f:fe:18:b8:f4:1f:30:c3:bc:80:51:65:
17:e9:48:94:64:82:9b:9c:e9:84:97:d1:c3:5b:58:85:8b:78:
48:95:27:af:3b:54:61:9e:f7:1b:69:29:37:38:43:c8:38:2e:
9c:ff:b6:23:8b:b4:de:ab:8a:bc:25:c9:8e:ef:c0:03:d8:26:
65:93:70:c5:54:e6:08:90:22:63:cc:ce:11:33:e4:fc:94:fa:
21:7d:ea:f5:96:eb:82:62:c7:36:77:d7:b6:10:f3:14:a1:3e:
96:de:b8:16:6b:7a:7b:6f:da:89:8e:68:c3:1f:8d:8d:07:ec:
5c:5a:bb:a2:64:e6:d1:9d:45:a6:45:8e:d5:ed:cb:73:29:49:
16:8b:4f:c5:18:f6:70:7f:a5:44:0e:b1:36:34:e0:d3:cc:4a:
da:49:d5:30:a6:41:99:aa:e2:fb:e3:da:61:05:88:bb:63:30:
d1:47:34:bb:2f:ca:9d:de:5f:2e:ca:ed:eb:c4:74:cd:4f:b5:
03:38:3e:47:17:98:bc:3d:2f:ae:df:a6:be:d3:7e:50:7e:22:
1a:2b:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:41 2025 by rpki-client