Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa
File: 326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa (raw, json)
Hash identifier: Tw9/dIyeN2Dk7tk49LcVpEiLKnp1/dkbD3w3QjrssKI=
Subject key identifier: A9:4E:72:D4:64:98:29:D6:66:E3:0C:76:AB:89:AB:85:DA:B5:C6:23
Certificate issuer: /CN=12962028A181E758B8990A6CA4F04A998A69311E
Certificate serial: 6AC44D840EEDB62EBA63DB2D63D32E849D437EB3
Authority key identifier: 12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
Authority info access: rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject info access: rsync://dev.tw/rpki/AS945/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa
Signing time: Fri 11 Oct 2024 10:04:23 +0000
ROA not before: Fri 11 Oct 2024 09:59:23 +0000
ROA not after: Fri 10 Oct 2025 10:04:23 +0000
asID: 198734
IP address blocks: 2a12:dd47:d500::/40 maxlen: 48
Validation: OK
Signature path: rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.mft
rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 12:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c4:4d:84:0e:ed:b6:2e:ba:63:db:2d:63:d3:2e:84:9d:43:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12962028A181E758B8990A6CA4F04A998A69311E
Validity
Not Before: Oct 11 09:59:23 2024 GMT
Not After : Oct 10 10:04:23 2025 GMT
Subject: CN=A94E72D4649829D666E30C76AB89AB85DAB5C623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:a4:62:4a:a9:d2:8c:6e:05:bd:af:5e:d9:
44:cb:24:ae:83:45:57:38:b9:17:9d:24:bd:e8:92:
be:66:b4:18:4b:04:1b:d9:db:c1:25:44:9f:8a:ba:
a5:0a:f8:d3:cd:93:bc:97:94:a4:d8:a5:1b:01:bc:
51:36:57:79:fe:aa:71:a5:57:f0:d3:f4:1d:b3:8e:
f2:40:3a:48:8f:04:53:39:bb:d7:e7:a8:38:ff:ae:
44:70:bf:fb:fa:72:03:c6:59:7c:97:fa:ff:2e:b4:
ba:54:fd:7d:63:f3:cb:b1:90:d6:63:e1:40:c7:f5:
52:80:e0:0c:d7:60:ed:63:fc:9b:3e:dd:8a:1d:53:
05:89:6e:7d:a4:ca:aa:99:fe:44:36:a4:32:1d:1e:
7d:9b:a0:b6:c0:90:53:fe:78:fc:04:64:e3:51:fd:
ea:66:33:1c:c3:09:69:c5:fb:ec:ba:33:53:35:aa:
95:69:24:e5:a6:11:a1:6d:14:cd:30:09:24:99:ce:
08:f1:7e:0a:e8:f1:ac:92:44:90:dd:44:8f:61:54:
33:71:95:87:2c:f5:a8:4a:87:82:92:6a:ff:89:39:
68:81:e0:23:46:e5:24:89:9b:0a:ae:6f:cd:87:ee:
19:77:4c:7b:71:4b:6e:cc:0c:3e:2d:11:00:90:89:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4E:72:D4:64:98:29:D6:66:E3:0C:76:AB:89:AB:85:DA:B5:C6:23
X509v3 Authority Key Identifier:
keyid:12:96:20:28:A1:81:E7:58:B8:99:0A:6C:A4:F0:4A:99:8A:69:31:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/1/12962028A181E758B8990A6CA4F04A998A69311E.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/12962028A181E758B8990A6CA4F04A998A69311E.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/1/326131323a646434373a643530303a3a2f34302d3438203d3e20313938373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:d500::/40
Signature Algorithm: sha256WithRSAEncryption
6f:9d:f5:2d:d2:96:2b:cd:97:e8:89:ef:d6:a5:a4:64:b9:bc:
2e:c8:82:42:ad:1d:f5:ec:7b:3e:2f:b4:eb:45:bb:76:68:43:
9f:2f:f3:3e:fc:c6:c2:20:9f:26:3f:15:93:f9:dd:9c:fa:fc:
f1:dd:c2:e6:5a:fc:4a:0c:9a:b2:e3:58:1f:d0:33:a9:e4:3d:
bd:fb:f1:4e:c5:c7:a1:f5:c6:1d:97:8c:bd:0b:c5:82:f7:69:
a0:d1:74:8a:49:82:56:b1:f4:03:71:cc:39:f1:f1:0f:1d:42:
e0:4f:c6:e7:eb:da:41:0a:0f:ac:be:26:ac:c9:e4:48:6d:f4:
00:cb:9b:12:14:b1:5d:9f:cc:29:74:aa:0f:4e:bb:be:20:66:
57:3f:9f:43:7e:e6:7b:54:f6:96:51:63:13:63:ce:70:d4:69:
83:e2:89:d7:10:11:9b:94:bc:22:54:b2:d3:00:43:da:03:b1:
ac:cb:51:ef:f5:66:51:53:06:71:62:5b:00:4b:d9:50:72:80:
e0:de:42:c8:ab:1f:4a:7c:34:51:d3:71:e6:af:76:04:b9:91:
04:dd:18:75:2a:81:34:a1:6a:53:36:da:8c:45:4d:73:a6:38:
08:21:af:63:d9:e3:8a:27:02:0f:55:c0:86:3f:7c:79:16:63:
4b:8b:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:38:58 2024 by rpki-client on console-ams.rpki-client.org