Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa
File: 326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa (raw, json)
Hash identifier: vktem7uyfyywlpGLFp6lOgogiYSvhDv6EqUezBjPNSc=
Subject key identifier: 0C:ED:22:27:BE:7A:BF:B9:44:EC:CE:79:5F:7B:59:DA:18:A0:72:6E
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 1FB9C11CFF28FDACF5F5017D6FB10F10A48AE169
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject info access: rsync://dev.tw/rpki/AS945/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa
Signing time: Fri 11 Oct 2024 10:04:11 +0000
ROA not before: Fri 11 Oct 2024 09:59:11 +0000
ROA not after: Fri 10 Oct 2025 10:04:11 +0000
asID: 151338
IP address blocks: 2a12:dd47:8370::/44 maxlen: 48
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 03:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b9:c1:1c:ff:28:fd:ac:f5:f5:01:7d:6f:b1:0f:10:a4:8a:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 11 09:59:11 2024 GMT
Not After : Oct 10 10:04:11 2025 GMT
Subject: CN=0CED2227BE7ABFB944ECCE795F7B59DA18A0726E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:f2:d3:e0:77:23:54:a5:a3:84:1e:ca:b8:
15:6a:ee:b9:da:e1:dc:5b:23:e1:6b:65:a6:d0:0d:
83:aa:1f:b1:96:4a:89:3f:2c:bc:d4:17:94:0a:22:
c3:3e:e5:99:e0:74:08:78:90:0a:78:1b:46:ca:cf:
a1:2d:ec:fb:2a:1f:7f:38:48:50:36:4a:fd:ce:c4:
49:89:6d:01:17:cc:6a:89:d4:8e:37:31:25:79:33:
60:ce:69:0e:d5:e6:b3:e6:c0:2a:dc:02:a6:73:c4:
35:c0:26:de:db:cb:a4:a5:e6:90:32:c8:fb:e9:f5:
64:a7:26:40:51:a5:f6:38:e1:07:3e:c7:29:08:fd:
f5:55:e1:ee:b1:27:60:9b:5d:fb:a0:17:a4:d7:b2:
8f:2b:64:b3:0b:7c:b7:b4:bd:c1:b9:a5:e1:7e:69:
9b:bd:5c:a5:f8:33:ca:ce:87:42:ad:d5:24:71:22:
00:79:73:f8:dd:3e:b0:3f:94:c3:59:8e:c1:b2:68:
6c:c7:b3:bc:02:73:12:d6:cb:97:f7:bd:45:52:0c:
ff:23:b2:96:76:40:0d:22:dd:8b:78:12:cf:96:31:
75:6b:6d:83:a9:89:2a:68:b5:b1:fd:a4:86:2b:95:
d4:b6:61:53:7d:dd:d0:67:56:de:50:31:fd:f1:7d:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:22:27:BE:7A:BF:B9:44:EC:CE:79:5F:7B:59:DA:18:A0:72:6E
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/1/326131323a646434373a383337303a3a2f34342d3438203d3e20313531333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8370::/44
Signature Algorithm: sha256WithRSAEncryption
14:a2:de:49:79:d0:f7:8c:37:57:72:47:9b:2b:13:c9:92:11:
5f:45:2c:09:a1:7d:37:57:da:35:c2:ab:cc:20:e8:cb:da:5d:
80:c7:52:ce:2f:03:f1:a6:36:ba:27:0d:0a:89:d3:90:31:9d:
39:2d:84:72:bb:1c:9b:28:c6:c6:f7:7c:06:b0:f5:df:3e:46:
10:23:ee:e5:df:52:be:ca:04:18:98:ec:5f:92:d2:b9:3a:26:
a0:e5:78:09:0c:9d:55:7d:c0:c9:d1:ca:b4:79:f7:7d:30:54:
31:5e:0d:00:af:01:68:45:a1:29:29:a5:8b:76:f3:7d:80:ff:
87:d3:ea:66:dd:3b:ab:f8:ee:a9:6f:e5:10:1b:7f:2b:72:f7:
ac:fa:73:2c:ff:80:17:45:70:dd:73:af:ed:1a:49:4d:7d:ae:
40:2c:27:5d:35:c3:d0:8c:73:44:0a:54:b2:39:4e:14:18:52:
66:bb:25:cf:31:e3:60:08:d5:41:7b:12:91:8a:8a:9b:a0:f7:
73:6e:8f:40:32:97:da:42:08:85:40:cf:f1:6f:8d:b2:19:96:
44:40:b0:b1:98:58:8a:37:7f:f0:5b:17:1a:07:43:05:70:d2:
34:6f:fc:21:fe:a2:a0:a7:5b:80:df:08:74:9f:30:20:74:4e:
03:e2:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org