![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
File: 3btoSM71c6suay4wpvvX1F6Jgfw.roa (raw, json)
Hash identifier: N4mSVRhheXT+QqEU/BKPRw28kETOuMrwomwCYwXYze0=
Subject key identifier: DD:BB:68:48:CE:F5:73:AB:2E:6B:2E:30:A6:FB:D7:D4:5E:89:81:FC
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
Signing time: Thu 15 Sep 2022 02:50:33 +0000
ROA not before: Thu 15 Sep 2022 02:50:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 121.50.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 15 02:50:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DDBB6848CEF573AB2E6B2E30A6FBD7D45E8981FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:28:32:e6:21:cf:c9:47:b7:75:48:ee:b3:
bb:41:af:5d:de:27:a0:0b:16:2c:13:6d:2e:3a:af:
b2:4e:fd:23:1e:de:2f:a6:5f:0b:6b:c3:10:d3:0e:
20:bb:66:9f:43:fd:1e:77:52:5f:97:0a:a1:d0:01:
c4:1f:7e:c8:5c:5f:45:a2:d3:86:d7:b6:fd:31:eb:
68:8e:73:91:0e:f2:32:71:0d:77:a3:3d:d6:ec:74:
bd:2b:de:b1:dd:77:65:18:7e:ff:01:c9:ad:6a:0c:
6d:86:fa:d4:be:36:8f:6a:5b:8e:fd:7c:9e:69:c2:
ab:62:f1:c3:2a:57:64:61:56:97:2b:d1:a0:b7:b9:
57:39:aa:82:cf:68:a7:8a:79:e8:0e:c0:af:d1:06:
0b:82:6f:14:90:e6:3d:13:c1:69:03:43:75:57:fb:
bf:49:d1:ed:1e:ab:fb:0f:7a:8c:2c:91:45:4e:ed:
e7:73:1c:3d:97:4e:5c:5d:07:90:6c:b8:db:4d:5e:
f5:1f:73:08:7f:b3:09:7d:f0:fa:b5:24:a7:54:60:
1a:9d:58:53:5b:f3:e9:2d:48:54:04:7c:ac:90:e9:
19:e3:4a:88:d0:bb:a1:e2:1e:22:42:ab:2e:a5:02:
de:33:5a:99:e6:07:11:d9:89:b5:87:f2:c6:7f:33:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BB:68:48:CE:F5:73:AB:2E:6B:2E:30:A6:FB:D7:D4:5E:89:81:FC
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/3btoSM71c6suay4wpvvX1F6Jgfw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.144.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6e:e7:ef:e0:bf:f1:3d:8d:06:1c:79:69:0e:e1:42:1e:08:
b0:92:22:29:fe:04:30:90:52:89:d6:ae:28:2f:d4:44:2b:f6:
d4:ce:9e:04:cd:4c:0c:da:e7:37:a9:35:78:5b:cb:5f:7e:09:
5c:60:4f:27:70:61:a2:b2:a5:b1:ec:82:7a:03:ea:f7:e1:81:
3a:cf:e3:ff:87:12:88:f4:fe:19:9f:53:6c:42:92:8e:f2:1d:
3a:f2:02:c3:3e:24:f3:d2:09:44:1d:6b:ad:14:6f:ed:83:78:
e7:d5:3b:df:57:58:34:85:bb:71:37:6c:cf:6f:ba:ac:2c:7e:
92:8a:3e:9e:5e:3a:09:37:20:0e:56:17:17:89:a6:06:f1:17:
26:43:1c:86:20:1d:44:39:b3:ba:7d:cd:24:d3:76:03:53:78:
06:59:ec:ee:8b:f0:e1:15:d3:aa:03:63:7a:13:ac:17:e5:cc:
7d:cc:6f:a9:8b:2c:b7:64:bb:0e:28:25:78:1c:73:93:45:70:
ec:63:4c:bf:f0:04:45:5c:a4:e5:f2:e7:79:a7:c0:66:4f:26:
5d:80:48:6a:9f:ca:17:73:22:e7:ae:f7:0d:ea:0f:ba:d3:84:
9e:71:19:31:f6:e6:1f:9f:fb:3c:7a:a8:d5:6d:58:81:59:6d:
47:cf:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:42 2025 by rpki-client