![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
File: t1AaqtjRGGkHOKVG9CNRp8O71qc.roa (raw, json)
Hash identifier: N5kMKpZsXzcgECHB4LGr35JNbY0ash0YBNYGV9BdBCc=
Subject key identifier: B7:50:1A:AA:D8:D1:18:69:07:38:A5:46:F4:23:51:A7:C3:BB:D6:A7
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0BD6
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
Signing time: Tue 28 Mar 2023 10:49:00 +0000
ROA not before: Tue 28 Mar 2023 10:49:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 2405:8700:9900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Mar 28 10:49:00 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7501AAAD8D118690738A546F42351A7C3BBD6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:05:4f:37:92:58:b8:2b:2b:cb:0f:31:1e:
18:eb:8a:5e:3c:58:2d:df:e3:b4:8f:0e:76:4f:e5:
aa:59:34:29:a6:2f:93:35:2d:29:fe:29:9e:f6:ac:
05:fa:35:c7:ee:0d:f0:27:7e:08:b9:86:6a:52:98:
10:0c:fa:54:3a:48:e4:09:70:98:d7:76:74:69:6a:
cd:df:f6:a2:76:ff:46:42:cb:70:ac:b8:ce:e4:ff:
f4:7e:2b:a8:cf:7d:fa:fc:48:9c:a9:c5:92:ef:19:
f2:2f:d8:2f:8f:98:ea:9f:b4:e3:d4:92:08:c1:33:
5a:92:54:db:bd:36:cc:dd:58:e0:cb:aa:11:8b:7a:
dc:b3:d8:ee:f5:b9:f4:15:c8:ef:5c:f0:21:48:b7:
a9:3c:a6:3c:cb:c2:e2:3b:82:7a:d3:04:00:cc:98:
ac:3f:ea:b0:95:9f:29:a0:f0:c1:b1:ca:3c:c1:51:
d5:ee:75:0e:06:c1:9f:d6:8e:47:dd:b2:04:43:c5:
e3:03:45:8f:e1:59:43:70:43:8a:32:38:33:94:0c:
40:a7:3e:ec:be:2d:37:ba:e2:09:58:ec:e7:d1:ea:
51:6f:2d:d7:b0:13:0a:94:6b:52:40:75:bb:ae:2c:
25:0c:61:22:4a:f7:f7:39:7f:86:57:79:40:9a:de:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:1A:AA:D8:D1:18:69:07:38:A5:46:F4:23:51:A7:C3:BB:D6:A7
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/t1AaqtjRGGkHOKVG9CNRp8O71qc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:8700:9900::/48
Signature Algorithm: sha256WithRSAEncryption
36:c3:86:ad:44:94:15:60:75:ba:45:14:a9:3c:88:11:f3:dd:
56:d8:57:63:16:19:6d:59:68:2f:e2:c3:40:4c:2f:cb:a7:0d:
de:45:69:ed:69:52:10:88:19:e3:6a:0d:9a:e3:9e:f5:48:5e:
bf:ae:2b:41:30:3f:56:b2:29:38:98:ca:9c:69:a4:87:11:73:
ca:be:7b:b7:55:d1:78:0d:df:86:f6:c5:27:3c:70:6c:60:22:
b9:c7:99:26:4c:f7:60:45:f1:ae:8f:66:af:32:55:fe:e3:c3:
9c:ce:9c:c9:87:d2:2e:4c:95:75:88:f6:eb:b9:9d:40:1d:57:
de:e7:4b:19:0f:2e:a6:78:14:5c:b7:c1:d0:a4:26:c2:df:10:
e4:0f:ff:38:a9:fc:4b:2e:29:29:63:2e:69:3d:00:f8:dc:0b:
d2:60:c5:17:8d:f5:71:aa:fb:fc:3e:1f:97:2a:3a:f9:77:11:
e7:76:67:9d:83:6a:67:78:8c:e9:c9:4a:52:3b:6e:2d:f0:9b:
c9:a5:a1:0e:4f:6c:20:53:69:fe:62:4d:3c:24:6b:37:97:2f:
33:cc:6b:77:65:a1:97:06:ac:06:1c:3a:c7:7f:46:30:36:f9:
b7:af:59:29:ea:a8:cc:49:3c:e3:f9:27:40:61:33:8b:58:84:
e8:fc:e2:fd
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMzAzMjgx
MDQ5MDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI3NTAxQUFBRDhEMTE4
NjkwNzM4QTU0NkY0MjM1MUE3QzNCQkQ2QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmLAVPN5JYuCsryw8xHhjril48WC3f47SPDnZP5apZNCmmL5M1
LSn+KZ72rAX6NcfuDfAnfgi5hmpSmBAM+lQ6SOQJcJjXdnRpas3f9qJ2/0ZCy3Cs
uM7k//R+K6jPffr8SJypxZLvGfIv2C+PmOqftOPUkgjBM1qSVNu9NszdWODLqhGL
etyz2O71ufQVyO9c8CFIt6k8pjzLwuI7gnrTBADMmKw/6rCVnymg8MGxyjzBUdXu
dQ4GwZ/WjkfdsgRDxeMDRY/hWUNwQ4oyODOUDECnPuy+LTe64glY7OfR6lFvLdew
EwqUa1JAdbuuLCUMYSJK9/c5f4ZXeUCa3svZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUt1AaqtjRGGkHOKVG9CNRp8O71qcwHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL3QxQWFxdGpSR0dr
SE9LVkc5Q05ScDhPNzFxYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkBYcAmQAwDQYJKoZIhvcNAQELBQADggEBADbDhq1ElBVgdbpFFKk8iBHz
3VbYV2MWGW1ZaC/iw0BML8unDd5Fae1pUhCIGeNqDZrjnvVIXr+uK0EwP1ayKTiY
ypxppIcRc8q+e7dV0XgN34b2xSc8cGxgIrnHmSZM92BF8a6PZq8yVf7jw5zOnMmH
0i5MlXWI9uu5nUAdV97nSxkPLqZ4FFy3wdCkJsLfEOQP/zip/EsuKSljLmk9APjc
C9JgxReN9XGq+/w+H5cqOvl3Eed2Z52Damd4jOnJSlI7bi3wm8mloQ5PbCBTaf5i
TTwkazeXLzPMa3dloZcGrAYcOsd/RjA2+bevWSnqqMxJPOP5J0BhM4tYhOj84v0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:39 2025 by rpki-client