Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
File: 3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: cGdaIjlArOn8cp3SRuq5F+6pTsp733H54fs7sU7+L+0=
Subject key identifier: 46:75:E1:B5:8A:68:B9:6D:EE:4C:02:B9:19:F1:FC:15:4B:3E:B3:12
Certificate issuer: /CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
Certificate serial: 644DB478643946E5320006948CD1045F57E1B27D
Authority key identifier: D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
Authority info access: rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
Subject info access: rsync://dev.tw/rpki/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
Signing time: Fri 11 Oct 2024 10:04:07 +0000
ROA not before: Fri 11 Oct 2024 09:59:07 +0000
ROA not after: Fri 10 Oct 2025 10:04:07 +0000
asID: 10103
IP address blocks: 216.146.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4d:b4:78:64:39:46:e5:32:00:06:94:8c:d1:04:5f:57:e1:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
Validity
Not Before: Oct 11 09:59:07 2024 GMT
Not After : Oct 10 10:04:07 2025 GMT
Subject: CN=4675E1B58A68B96DEE4C02B919F1FC154B3EB312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:41:b4:89:bb:97:d5:0e:49:35:01:96:a7:
ba:97:0d:7e:5c:77:d1:56:e4:1f:ac:73:d7:e8:d4:
f7:27:ec:d2:d3:49:b1:37:4c:be:88:4a:60:15:9d:
a0:0a:38:4e:36:86:3e:ea:59:16:66:57:ec:84:01:
9b:df:7a:c4:ef:ce:81:b5:f1:72:05:df:bf:47:4f:
34:6a:c0:07:2d:d1:5a:97:76:1f:0f:a0:8f:f8:17:
10:6f:83:21:66:36:04:85:42:ae:2f:29:64:0d:fd:
83:14:94:ce:ac:b2:9f:25:bb:08:c6:8f:61:3d:28:
af:2f:f1:03:e3:73:ad:07:87:e7:19:db:5e:1b:e3:
36:a9:b9:26:c1:95:d1:0c:4c:86:a5:dd:99:2a:c7:
dc:4a:a9:d4:4b:97:61:ba:4c:67:2f:76:06:12:bb:
d6:2a:cc:7a:e6:ea:53:cd:a8:a1:9d:13:a0:e0:04:
d8:94:cc:86:d5:af:4d:d1:e3:28:95:5d:20:d7:2b:
b2:45:b2:ba:32:9b:65:94:99:cd:5d:46:7c:e7:7e:
a1:5b:4f:da:5d:4e:9c:e3:6d:84:c8:69:12:ed:e3:
e0:cc:48:c7:37:46:03:3e:9a:82:b5:0f:0a:6e:44:
c5:d4:09:25:95:bd:87:1b:d1:9c:8d:65:b8:e1:9b:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:E1:B5:8A:68:B9:6D:EE:4C:02:B9:19:F1:FC:15:4B:3E:B3:12
X509v3 Authority Key Identifier:
keyid:D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b4:87:d3:23:ac:cc:29:db:cc:1b:07:db:07:51:0b:f9:18:
23:8c:54:5d:58:28:dc:06:40:08:a7:b4:1f:fe:ac:aa:69:97:
92:03:41:7f:ce:41:40:9a:8a:e6:69:33:68:73:f6:99:0e:13:
1b:f1:2a:ae:a7:35:57:f5:3b:69:70:a8:60:1e:d6:cf:fe:c9:
a2:c6:2f:e2:33:10:75:a9:df:ec:10:99:63:85:c1:ae:07:c9:
80:4a:88:f4:38:f3:e3:b1:45:e8:4a:97:0b:ee:f6:da:80:d3:
99:7b:d2:8b:15:ba:49:1f:c9:a0:6d:2b:f1:76:d5:d1:5b:3c:
11:18:5f:9d:6b:96:07:b2:17:64:84:52:1c:eb:8e:14:db:ed:
c0:42:6f:12:13:90:5c:e6:05:f7:8c:1e:d5:cd:5a:ca:34:46:
1c:02:7c:6f:28:cf:25:ba:e3:66:b8:74:35:f3:76:fd:1c:e2:
07:0e:52:19:a3:a5:0b:4f:b4:23:50:1f:f0:c7:e4:6c:d4:92:
58:1b:47:41:7b:09:eb:4b:08:a6:bf:68:9f:a5:bb:1d:3d:bb:
7a:51:31:5b:fb:dd:ce:73:b0:c7:b3:1f:af:e2:79:b7:9f:14:
82:9b:ff:f6:43:60:24:ad:42:e9:be:3d:ec:12:87:13:3f:d1:
db:e7:88:19
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIUZE20eGQ5RuUyAAaUjNEEX1fhsn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhERkJCRDc5MjUxNzFBRUU5NTIyNEEyM0ZGNEMzOUE5
NUJCQ0MwQjAeFw0yNDEwMTEwOTU5MDdaFw0yNTEwMTAxMDA0MDdaMDMxMTAvBgNV
BAMTKDQ2NzVFMUI1OEE2OEI5NkRFRTRDMDJCOTE5RjFGQzE1NEIzRUIzMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AUG0ibuX1Q5JNQGWp7qXDX5c
d9FW5B+sc9fo1Pcn7NLTSbE3TL6ISmAVnaAKOE42hj7qWRZmV+yEAZvfesTvzoG1
8XIF379HTzRqwAct0VqXdh8PoI/4FxBvgyFmNgSFQq4vKWQN/YMUlM6ssp8luwjG
j2E9KK8v8QPjc60Hh+cZ214b4zapuSbBldEMTIal3Zkqx9xKqdRLl2G6TGcvdgYS
u9YqzHrm6lPNqKGdE6DgBNiUzIbVr03R4yiVXSDXK7JFsroym2WUmc1dRnznfqFb
T9pdTpzjbYTIaRLt4+DMSMc3RgM+moK1DwpuRMXUCSWVvYcb0ZyNZbjhm6JVAgMB
AAGjggHFMIIBwTAdBgNVHQ4EFgQURnXhtYpouW3uTAK5GfH8FUs+sxIwHwYDVR0j
BBgwFoAU2N+715JRca7pUiSiP/TDmpW7zAswDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvMy9EOERGQkJE
NzkyNTE3MUFFRTk1MjI0QTIzRkY0QzM5QTk1QkJDQzBCLmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzAv
RDhERkJCRDc5MjUxNzFBRUU5NTIyNEEyM0ZGNEMzOUE5NUJCQ0MwQi5jZXIwcgYI
KwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzovL2Rldi50dy9ycGtpL0FT
OTQ1LzMvMzIzMTM2MmUzMTM0MzYyZTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMTMwMzEzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JIeMA0GCSqGSIb3DQEBCwUAA4IBAQBu
tIfTI6zMKdvMGwfbB1EL+RgjjFRdWCjcBkAIp7Qf/qyqaZeSA0F/zkFAmormaTNo
c/aZDhMb8SqupzVX9TtpcKhgHtbP/smixi/iMxB1qd/sEJljhcGuB8mASoj0OPPj
sUXoSpcL7vbagNOZe9KLFbpJH8mgbSvxdtXRWzwRGF+da5YHshdkhFIc644U2+3A
Qm8SE5Bc5gX3jB7VzVrKNEYcAnxvKM8luuNmuHQ183b9HOIHDlIZo6ULT7QjUB/w
x+Rs1JJYG0dBewnrSwimv2ifpbsdPbt6UTFb+93Oc7DHsx+v4nm3nxSCm//2Q2Ak
rULpvj3sEocTP9Hb54gZ
-----END CERTIFICATE-----
Generated at Mon Oct 21 19:13:56 2024 by rpki-client on console-fra.rpki-client.org