Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa
File: 326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa (raw, json)
Hash identifier: xcQ8mSx6y07HZ7aWGxKawvV/3On6/BnxPMeMAZ8Rsj4=
Subject key identifier: 19:BE:1E:E3:A1:58:03:CB:DF:56:7D:3C:8A:A9:F8:80:1A:29:18:95
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 761AD0ACF1530EFF4A553950EB85522A371E4F1F
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject info access: rsync://dev.tw/rpki/AS945/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa
Signing time: Fri 11 Oct 2024 10:04:14 +0000
ROA not before: Fri 11 Oct 2024 09:59:14 +0000
ROA not after: Fri 10 Oct 2025 10:04:14 +0000
asID: 201217
IP address blocks: 2a12:dd47:8e70::/44 maxlen: 48
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1a:d0:ac:f1:53:0e:ff:4a:55:39:50:eb:85:52:2a:37:1e:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 11 09:59:14 2024 GMT
Not After : Oct 10 10:04:14 2025 GMT
Subject: CN=19BE1EE3A15803CBDF567D3C8AA9F8801A291895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5f:c5:0a:86:98:db:15:8e:fa:62:5c:73:e8:
4a:7e:6f:78:40:02:21:2f:03:9f:ac:2f:f2:1b:62:
b3:f0:1e:1c:ba:89:d8:7b:80:fc:63:84:10:12:48:
63:1d:a9:80:41:a4:21:11:69:16:6c:b6:e9:30:7c:
16:09:d0:d6:d9:38:b9:e8:6c:80:56:31:14:f3:91:
35:f9:15:a6:f9:aa:1b:ac:9e:f7:92:4b:23:25:3b:
83:1a:76:9f:c6:ce:55:90:65:71:24:32:06:03:2a:
3f:e9:b5:a8:cc:22:d5:4d:0f:19:2b:b0:fb:52:34:
55:02:e4:b9:03:21:0c:cd:04:15:e9:71:cc:d9:0a:
52:62:28:28:5e:41:08:99:e6:23:a4:9f:44:df:33:
f8:45:0e:6c:7a:07:39:3f:1a:7a:fa:eb:e1:6a:bd:
8c:4e:b1:35:b0:6f:32:2f:2d:15:30:27:d8:af:22:
6a:12:06:c1:41:9b:05:46:6a:56:2c:c3:9a:e4:d5:
72:d8:9d:36:9c:74:41:1c:de:c4:1f:2b:3f:f8:68:
eb:1a:74:53:86:03:78:5f:05:df:27:03:36:bc:2c:
86:c6:e9:fc:9a:27:5f:ed:40:79:95:7a:a2:9c:73:
b5:7b:ec:a5:5a:0c:54:30:32:23:1b:1c:eb:d1:4a:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BE:1E:E3:A1:58:03:CB:DF:56:7D:3C:8A:A9:F8:80:1A:29:18:95
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:8e70::/44
Signature Algorithm: sha256WithRSAEncryption
b1:3c:93:e3:da:97:a2:05:10:99:6d:4f:59:53:2c:46:9d:e9:
88:e1:fc:32:65:fe:f3:6b:53:79:07:21:25:f2:d2:a5:10:00:
83:f4:a5:0f:c9:f1:81:2e:bb:1c:b6:c0:61:94:77:0f:eb:db:
2c:de:ec:64:0e:14:ab:cb:09:2a:63:ba:60:26:11:7b:1c:00:
9b:fc:d9:df:22:12:b2:a7:9b:77:9e:7b:71:66:82:46:43:77:
47:2c:90:c9:03:b3:1f:3c:17:0d:d1:41:cb:f5:7a:b1:1c:a6:
5b:83:7f:e5:dd:81:c6:7b:1f:9d:aa:65:f3:d3:60:12:37:13:
f3:ac:c7:39:3b:10:4f:b8:cd:b5:92:2d:2c:84:01:d2:8a:50:
5c:e3:cb:ce:75:9f:b1:56:43:87:be:20:7d:da:87:47:a6:1a:
0a:78:9c:cd:ef:fb:a9:05:ec:9b:fb:47:26:e7:9f:8e:f4:48:
fe:5e:bc:f4:31:29:01:76:c4:da:34:e1:67:df:e9:b7:00:4d:
f9:e9:7f:c3:3c:55:df:1f:40:aa:4e:d1:6a:c1:cb:8e:33:ea:
04:81:29:53:df:9c:63:75:05:ec:a9:38:77:66:2f:a8:46:41:
af:a7:00:b9:67:6e:bd:13:3e:e4:53:47:1a:f1:b6:f7:20:5e:
91:d1:18:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 07:33:02 2024 by rpki-client on console-fra.rpki-client.org