![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
File: WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa (raw, json)
Hash identifier: bt7kKpc2Ux+tQp3ZM/mwm9lVOehFAWYlasuoppmwssk=
Subject key identifier: 58:F0:50:B0:DE:87:ED:A4:34:37:86:0B:AE:A7:5C:23:AA:10:69:EF
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
Signing time: Thu 15 Sep 2022 02:50:31 +0000
ROA not before: Thu 15 Sep 2022 02:50:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24168
IP address blocks: 121.50.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 15 02:50:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58F050B0DE87EDA43437860BAEA75C23AA1069EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:82:c7:2c:47:3a:04:c4:0c:24:cd:e8:27:
36:ae:f0:c4:e2:d9:8c:e8:97:55:75:20:6d:96:26:
8c:8c:e5:48:6a:14:2c:0e:63:0e:34:be:dd:16:47:
f1:a2:99:7e:cb:26:44:1a:a0:0a:ac:13:1a:c9:98:
0f:a0:2a:bd:ce:ba:94:63:e3:13:fc:90:af:28:05:
cc:8b:31:ee:ae:e7:cf:32:40:2a:fb:74:90:e9:33:
85:9b:74:de:76:2e:81:87:bf:30:f1:75:f1:16:3d:
e4:45:11:b0:54:37:79:cb:d9:69:1e:22:cd:e1:66:
5a:e8:b7:a1:e0:e0:ce:1f:49:af:09:9b:51:82:bd:
0d:9b:53:c4:bb:fd:c2:bd:86:8f:5f:56:99:bb:6c:
db:d5:63:5e:2b:00:1c:a6:8a:ea:44:c9:ea:47:d9:
03:9d:5d:de:7b:86:97:78:38:58:0b:bc:af:c7:82:
28:f8:fa:8c:f7:f0:04:12:fc:33:3e:95:50:e5:ac:
4e:c3:8a:cd:02:92:dd:7d:27:3d:b7:ca:7c:d3:fc:
3d:ae:55:be:cc:c0:9e:1d:1d:86:14:f2:18:6b:d5:
21:54:bd:45:01:52:d7:2d:3c:20:d8:24:a1:b9:23:
5a:55:cd:be:2c:ee:b4:16:5f:f8:dc:50:21:a0:53:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:50:B0:DE:87:ED:A4:34:37:86:0B:AE:A7:5C:23:AA:10:69:EF
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/WPBQsN6H7aQ0N4YLrqdcI6oQae8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.150.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3e:74:10:cf:7d:14:76:87:fb:20:c4:9c:5f:6b:a8:81:aa:
43:ab:c3:4e:13:8d:10:78:57:82:2f:a6:7e:7b:9b:0a:a2:2e:
eb:ff:5c:8d:38:04:be:1d:4c:45:b5:53:ec:11:0a:58:0f:04:
4a:ae:04:1d:7b:76:44:7d:cf:9a:3a:73:18:d2:dd:1e:71:6a:
51:b1:89:65:af:e5:64:5b:6d:05:65:18:ee:67:62:ce:df:84:
3e:02:70:a3:67:55:56:c2:63:8f:a9:97:e8:07:e7:17:8e:ae:
38:6e:05:29:df:a5:b7:3d:9d:e7:ab:63:e4:20:7d:64:1c:04:
a0:c3:b2:0d:3a:74:de:55:97:2b:d2:f5:ba:5a:aa:24:c5:b6:
d9:1a:72:86:d3:64:21:5e:93:61:96:b7:90:3f:7b:1b:71:dd:
f0:b5:ed:2e:64:e4:22:fb:f6:44:bd:57:e2:0b:8d:98:cc:ed:
41:a3:7a:48:44:b0:ce:9c:d8:95:3c:91:d9:93:c3:f8:79:c8:
13:61:16:89:0c:ca:02:51:8a:18:3c:1f:4b:ea:c3:ee:33:0a:
f1:2a:34:84:40:3b:b1:1c:5c:35:db:b8:5c:b3:bd:be:3f:3a:
03:84:4e:99:ad:79:ad:a3:6d:03:b0:91:aa:60:d7:ab:30:5d:
b0:6c:80:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:48 2025 by rpki-client