Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/August/1/326131333a633030303a3a2f32392d3438203d3e20393435.roa
File: 326131333a633030303a3a2f32392d3438203d3e20393435.roa (raw, json)
Hash identifier: QPEkqZC/AWiJbQ0SAHv+vBG44H+iQqiRKhefea2koVo=
Subject key identifier: A0:AD:A6:61:B7:29:DC:D5:4F:C5:7D:35:0C:88:C1:CF:74:C4:FC:99
Certificate issuer: /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial: 3CDA2108DA480F74D80CB97B8C348C0122F478E5
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access: rsync://dev.tw/rpki/August/1/326131333a633030303a3a2f32392d3438203d3e20393435.roa
Signing time: Tue 17 Sep 2024 17:13:48 +0000
ROA not before: Tue 17 Sep 2024 17:08:48 +0000
ROA not after: Tue 16 Sep 2025 17:13:48 +0000
asID: 945
IP address blocks: 2a13:c000::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:da:21:08:da:48:0f:74:d8:0c:b9:7b:8c:34:8c:01:22:f4:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
Validity
Not Before: Sep 17 17:08:48 2024 GMT
Not After : Sep 16 17:13:48 2025 GMT
Subject: CN=A0ADA661B729DCD54FC57D350C88C1CF74C4FC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:ce:50:69:a4:b3:d2:12:4d:97:b1:cf:8f:
58:d5:b7:aa:6f:ce:0c:ae:04:1c:62:3c:ca:42:88:
aa:1b:ad:92:42:34:67:83:80:d0:2f:ff:b0:30:c8:
78:09:a7:33:96:d2:cd:34:dc:6c:f1:05:59:33:ba:
2a:c4:a3:24:a9:4e:fc:26:cf:02:66:f8:d6:15:50:
e3:36:95:15:46:fd:93:71:e5:a2:eb:f2:ba:8b:cf:
ae:5a:99:80:75:ac:0c:34:1d:c0:59:13:21:f7:7b:
d8:b9:b8:3b:df:ac:49:be:02:27:a9:5d:c9:ca:df:
e4:6b:b4:f5:68:7f:c9:7c:44:41:4f:b5:d4:ff:cd:
89:89:93:ef:80:f6:e0:12:a0:e5:22:72:49:cc:f9:
09:38:78:4e:7a:63:30:6c:88:b2:09:7b:dd:c2:29:
4d:50:f0:f0:b5:5c:b1:8c:ab:2b:e0:92:95:4c:ca:
15:23:17:32:46:b3:57:3a:2e:65:93:1a:e7:e3:a6:
99:f9:1c:7d:39:b3:69:a5:19:69:e8:02:12:7b:ee:
43:db:65:ef:39:e8:f0:a0:95:52:3c:e0:a7:d5:5e:
3a:2e:9a:ff:83:77:db:c2:8b:56:41:64:81:ab:3a:
98:97:96:5a:74:fb:a8:67:da:b8:2d:fb:27:52:3b:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AD:A6:61:B7:29:DC:D5:4F:C5:7D:35:0C:88:C1:CF:74:C4:FC:99
X509v3 Authority Key Identifier:
keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/1/326131333a633030303a3a2f32392d3438203d3e20393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c000::/29
Signature Algorithm: sha256WithRSAEncryption
05:ed:67:e6:07:c6:53:e3:bb:a3:8b:66:30:df:01:a8:02:9f:
2d:f5:f0:22:95:ad:c3:f6:ce:39:fb:9d:14:a3:d1:62:ae:8a:
e5:e8:dd:3b:73:74:fa:51:58:49:65:34:d0:41:ec:9b:51:bf:
26:31:63:8a:64:52:6b:22:fe:35:fe:52:f7:65:5d:32:25:89:
2b:df:3f:64:2e:6f:d7:0e:7d:b3:c5:1d:e3:95:44:db:88:a6:
d4:86:f1:f1:63:aa:4c:19:c6:89:23:2e:7f:c7:54:a0:23:1c:
01:e5:8e:95:b8:b4:05:e4:96:bc:54:94:1a:dd:64:af:71:26:
ce:9d:ca:be:ca:84:5f:3f:25:23:e3:6b:e4:1a:e5:c7:5d:83:
bd:72:33:7c:90:7b:5c:dc:d9:a9:1b:30:15:bb:e0:d6:04:8a:
ee:b1:0a:70:0d:c7:26:b8:71:df:00:e9:37:e0:05:75:5c:d7:
d0:c1:29:1f:8e:82:90:13:d4:2b:16:6b:cd:7d:9d:d9:e4:4e:
e5:40:09:ee:74:89:ed:27:f1:f6:93:f6:78:96:37:37:88:bb:
83:df:70:58:c8:55:f1:10:ca:81:79:21:f9:1d:f5:89:9d:81:
68:7f:65:94:d0:d3:c7:f9:3a:51:56:c0:7d:a6:77:fc:df:ae:
08:71:c9:96
-----BEGIN CERTIFICATE-----
MIIEtzCCA5+gAwIBAgIUPNohCNpID3TYDLl7jDSMASL0eOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQyYzM1NGE0ODNhOGI3MGQ4MzlkM2Y3OThjZDg3MDY4
NGYwMjE4NjAeFw0yNDA5MTcxNzA4NDhaFw0yNTA5MTYxNzEzNDhaMDMxMTAvBgNV
BAMTKEEwQURBNjYxQjcyOURDRDU0RkM1N0QzNTBDODhDMUNGNzRDNEZDOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVDc5QaaSz0hJNl7HPj1jVt6pv
zgyuBBxiPMpCiKobrZJCNGeDgNAv/7AwyHgJpzOW0s003GzxBVkzuirEoySpTvwm
zwJm+NYVUOM2lRVG/ZNx5aLr8rqLz65amYB1rAw0HcBZEyH3e9i5uDvfrEm+Aiep
XcnK3+RrtPVof8l8REFPtdT/zYmJk++A9uASoOUicknM+Qk4eE56YzBsiLIJe93C
KU1Q8PC1XLGMqyvgkpVMyhUjFzJGs1c6LmWTGufjppn5HH05s2mlGWnoAhJ77kPb
Ze856PCglVI84KfVXjoumv+Dd9vCi1ZBZIGrOpiXllp0+6hn2rgt+ydSO5OtAgMB
AAGjggHBMIIBvTAdBgNVHQ4EFgQUoK2mYbcp3NVPxX01DIjBz3TE/JkwHwYDVR0j
BBgwFoAURCw1Skg6i3DYOdP3mM2HBoTwIYYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEvNDQyQzM1
NEE0ODNBOEI3MEQ4MzlEM0Y3OThDRDg3MDY4NEYwMjE4Ni5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL1JDdzFTa2c2aTNEWU9kUDNtTTJIQm9Ud0lZWS5jZXIwbQYI
KwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL2Rldi50dy9ycGtpL0F1
Z3VzdC8xLzMyNjEzMTMzM2E2MzMwMzAzMDNhM2EyZjMyMzkyZDM0MzgyMDNkM2Uy
MDM5MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcB
BwEB/wQRMA8wDQQCAAIwBwMFAyoTwAAwDQYJKoZIhvcNAQELBQADggEBAAXtZ+YH
xlPju6OLZjDfAagCny318CKVrcP2zjn7nRSj0WKuiuXo3TtzdPpRWEllNNBB7JtR
vyYxY4pkUmsi/jX+UvdlXTIliSvfP2Qub9cOfbPFHeOVRNuIptSG8fFjqkwZxokj
Ln/HVKAjHAHljpW4tAXklrxUlBrdZK9xJs6dyr7KhF8/JSPja+Qa5cddg71yM3yQ
e1zc2akbMBW74NYEiu6xCnANxya4cd8A6TfgBXVc19DBKR+OgpAT1CsWa819ndnk
TuVACe50ie0n8faT9niWNzeIu4PfcFjIVfEQyoF5Ifkd9YmdgWh/ZZTQ08f5OlFW
wH2md/zfrghxyZY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:18:22 2025 by rpki-client