Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
File: 326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa (raw, json)
Hash identifier: jab9mZ8AhSKmOjnFUZ240SO853cm2dhZ4mRHVR1Rl/c=
Subject key identifier: 56:F2:B0:49:F4:10:17:93:64:55:46:AA:CD:90:F8:48:C0:04:F5:CC
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 743460F904D3181D8C92CBDB787C4FC75B4C6A31
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject info access: rsync://dev.tw/rpki/AS945/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
Signing time: Fri 11 Oct 2024 10:04:12 +0000
ROA not before: Fri 11 Oct 2024 09:59:12 +0000
ROA not after: Fri 10 Oct 2025 10:04:12 +0000
asID: 56328
IP address blocks: 2a12:dd47:8c00::/39 maxlen: 48
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:34:60:f9:04:d3:18:1d:8c:92:cb:db:78:7c:4f:c7:5b:4c:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 11 09:59:12 2024 GMT
Not After : Oct 10 10:04:12 2025 GMT
Subject: CN=56F2B049F4101793645546AACD90F848C004F5CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:bf:65:ac:05:06:ee:d4:44:01:a3:27:ba:
33:b8:e2:e9:b4:9f:54:a0:14:a2:2f:2a:7e:f4:16:
13:93:6a:81:ad:c9:d4:b3:13:48:db:a3:ca:aa:aa:
27:b7:3b:ee:f4:94:26:0e:dd:15:3f:23:19:94:94:
d6:ea:6a:ec:62:b4:06:8d:db:a8:16:fd:1d:d3:16:
36:b2:42:4b:09:1c:05:6e:cd:9e:cc:32:d2:2f:9e:
ad:28:fd:ab:96:63:9c:09:c6:2d:c1:f6:98:c9:1d:
38:c7:5e:8b:2a:09:ab:ec:a0:28:0d:49:8d:b0:05:
dc:0c:4e:c9:62:6a:26:d5:86:a5:7a:94:41:c0:28:
36:46:e2:bd:57:1e:3a:de:bf:cc:5c:27:ae:b2:0e:
28:f7:8b:fa:07:fa:5c:77:d1:f5:97:b0:5b:14:a7:
27:6e:bf:b7:2c:48:50:a7:b8:ea:cb:2b:bc:eb:23:
2c:8e:b5:ca:05:cc:1a:ec:a9:dc:56:4d:15:93:c8:
62:28:56:de:f2:e7:e8:cd:e5:43:9d:3b:dc:5c:fa:
09:f8:69:32:7f:e6:68:66:4d:a8:6d:1c:1d:bb:15:
11:32:03:b0:7a:5b:14:1f:8d:e5:09:be:d2:8b:3f:
a9:e7:d3:3c:86:97:5a:2c:84:18:37:ff:ac:18:3e:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:B0:49:F4:10:17:93:64:55:46:AA:CD:90:F8:48:C0:04:F5:CC
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8c00::/39
Signature Algorithm: sha256WithRSAEncryption
7e:16:2d:75:95:70:43:d3:0b:9e:10:49:9d:8f:da:ad:07:93:
78:7b:47:68:c6:20:ba:35:2f:11:8b:df:a0:46:59:37:58:fb:
77:3b:6d:59:16:9b:1e:02:d3:03:9c:a2:b5:88:e3:46:3b:c4:
7b:9a:be:ef:4f:12:8b:de:71:ad:be:05:d1:0b:5d:86:f3:38:
03:e2:93:63:15:bf:ea:8a:7a:6f:b8:c4:58:75:b0:23:b8:d5:
4c:2e:49:0c:58:f6:de:29:84:f1:f1:bf:26:07:fd:80:68:78:
40:c3:48:44:76:4a:07:4c:32:ab:d9:fd:a9:72:a4:7e:65:a0:
fb:45:61:cf:cc:ef:fd:5d:03:a3:df:2e:1e:3e:04:f0:da:47:
e7:6e:b2:a1:f6:01:e1:6a:7c:6c:d2:e7:5b:3b:2e:3f:c1:f5:
52:af:0f:c2:07:1b:d6:c6:8a:ae:5f:5f:f2:e3:71:2f:ef:8d:
ab:0a:5f:e5:08:06:4b:e7:5a:5e:c9:e6:74:30:5a:71:16:ae:
c1:fc:48:58:41:da:51:e2:82:6b:f6:85:e9:25:77:2c:ab:fa:
28:f2:03:3a:fb:b4:e5:e2:75:43:b5:d8:7e:22:b8:ee:bb:e1:
66:1f:b3:23:61:aa:46:37:f1:63:9c:4d:4a:22:95:76:55:6c:
22:23:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:11 2024 by rpki-client on console-fra.rpki-client.org