Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File: 3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier: jyCmw9GomMQa5cIj87jssC2QHZWRfsmMvmjkXuWDKvs=
Subject key identifier: 12:D6:AE:D4:8D:1A:86:FB:C3:3E:26:4A:3F:7A:CE:D2:71:48:78:94
Certificate issuer: /CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
Certificate serial: 650356FB8D46E260BFA46286CA7A94BE646A4ADC
Authority key identifier: D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
Authority info access: rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
Subject info access: rsync://dev.tw/rpki/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time: Fri 11 Oct 2024 10:04:07 +0000
ROA not before: Fri 11 Oct 2024 09:59:07 +0000
ROA not after: Fri 10 Oct 2025 10:04:07 +0000
asID: 207731
IP address blocks: 216.146.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:03:56:fb:8d:46:e2:60:bf:a4:62:86:ca:7a:94:be:64:6a:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B
Validity
Not Before: Oct 11 09:59:07 2024 GMT
Not After : Oct 10 10:04:07 2025 GMT
Subject: CN=12D6AED48D1A86FBC33E264A3F7ACED271487894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:7b:20:9d:ef:8a:67:bc:00:29:21:ac:5c:
a2:f8:f6:e5:94:73:bb:e3:e4:4e:5b:16:ba:3e:28:
8f:07:d9:94:09:dc:57:c1:5a:c4:f8:77:1f:f2:cb:
ea:92:c1:de:11:92:f4:3d:59:6d:8f:69:66:19:80:
88:97:ee:fb:3b:f1:f4:df:e0:3a:f6:c6:04:6e:a8:
68:fc:45:23:c8:ea:d3:92:5d:77:95:74:a8:e1:4c:
fc:80:ff:10:ba:e8:06:56:14:03:4f:05:74:77:cf:
b4:fc:aa:0a:27:c6:14:ce:f6:ae:f7:0a:1d:c2:34:
a1:2a:bc:66:f5:4c:11:3d:92:5b:4f:e4:13:cd:9b:
99:58:33:03:27:d8:71:35:a7:1d:ba:b0:7e:25:e8:
0c:1d:78:82:02:9d:ef:2f:1a:01:07:5b:d5:17:6b:
c7:68:ce:bd:90:df:f8:e4:e8:2a:94:c9:82:28:cc:
25:a2:26:42:e8:7b:16:40:de:9b:91:4f:40:7b:0f:
2a:12:f2:a8:37:9d:a9:b5:6f:06:3a:d4:fd:45:92:
5b:b1:01:07:40:c5:db:82:ab:3e:f6:af:60:fa:69:
40:80:90:21:5f:c8:81:fc:8d:3f:24:4d:58:a3:e9:
d2:78:2e:4f:60:e8:6d:2f:7e:90:1c:79:78:a1:df:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D6:AE:D4:8D:1A:86:FB:C3:3E:26:4A:3F:7A:CE:D2:71:48:78:94
X509v3 Authority Key Identifier:
keyid:D8:DF:BB:D7:92:51:71:AE:E9:52:24:A2:3F:F4:C3:9A:95:BB:CC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/AS945/3/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/0/D8DFBBD7925171AEE95224A23FF4C39A95BBCC0B.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/AS945/3/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.31.0/24
Signature Algorithm: sha256WithRSAEncryption
16:3c:2f:f7:ab:54:9a:83:d6:60:73:ed:6a:47:5c:80:d7:9a:
b9:2f:9a:37:b3:a3:12:39:c8:ea:2c:48:4a:ef:d8:e6:b9:c0:
6c:ae:cf:11:93:ed:ab:d0:ce:b5:3f:d1:7e:c9:00:72:33:1a:
ad:7a:97:4e:02:84:88:65:e4:13:d2:4a:7a:56:c6:2e:5c:af:
d8:a9:5f:5b:7d:61:46:d4:9e:4f:82:32:25:2c:21:81:aa:b7:
b4:5e:d4:0f:d7:a2:bc:be:e4:e3:fa:8d:22:1f:11:c0:ab:1c:
7a:13:7f:fb:47:5f:74:c1:3a:35:75:50:c7:15:1b:5e:3c:82:
a0:92:1d:4b:c9:00:e4:77:7e:df:5b:fd:92:3a:aa:13:1f:1e:
39:22:37:d7:9d:4b:e6:cc:b6:fd:a4:29:1f:49:c8:11:1a:99:
3d:db:29:6d:3b:e4:03:15:84:f0:db:1f:bd:da:07:45:10:c1:
f4:a7:94:f3:99:90:c7:84:cb:c0:a1:70:f3:e7:f5:ca:62:90:
ed:a7:53:94:fc:26:1f:7a:2d:7f:88:6e:a5:3a:f5:28:84:9b:
0e:f2:cc:66:2b:1b:88:34:46:a0:66:5f:4e:2f:6a:d3:15:9f:
21:f2:84:60:02:bf:4e:dd:35:a8:1c:c6:bd:4b:8b:0a:30:e0:
6a:0d:37:aa
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUZQNW+41G4mC/pGKGynqUvmRqStwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhERkJCRDc5MjUxNzFBRUU5NTIyNEEyM0ZGNEMzOUE5
NUJCQ0MwQjAeFw0yNDEwMTEwOTU5MDdaFw0yNTEwMTAxMDA0MDdaMDMxMTAvBgNV
BAMTKDEyRDZBRUQ0OEQxQTg2RkJDMzNFMjY0QTNGN0FDRUQyNzE0ODc4OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOHsgne+KZ7wAKSGsXKL49uWU
c7vj5E5bFro+KI8H2ZQJ3FfBWsT4dx/yy+qSwd4RkvQ9WW2PaWYZgIiX7vs78fTf
4Dr2xgRuqGj8RSPI6tOSXXeVdKjhTPyA/xC66AZWFANPBXR3z7T8qgonxhTO9q73
Ch3CNKEqvGb1TBE9kltP5BPNm5lYMwMn2HE1px26sH4l6AwdeIICne8vGgEHW9UX
a8dozr2Q3/jk6CqUyYIozCWiJkLoexZA3puRT0B7DyoS8qg3nam1bwY61P1Fklux
AQdAxduCqz72r2D6aUCAkCFfyIH8jT8kTVij6dJ4Lk9g6G0vfpAceXih383PAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUEtau1I0ahvvDPiZKP3rO0nFIeJQwHwYDVR0j
BBgwFoAU2N+715JRca7pUiSiP/TDmpW7zAswDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vZGV2LnR3L3Jwa2kvQVM5NDUvMy9EOERGQkJE
NzkyNTE3MUFFRTk1MjI0QTIzRkY0QzM5QTk1QkJDQzBCLmNybDBlBggrBgEFBQcB
AQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzAv
RDhERkJCRDc5MjUxNzFBRUU5NTIyNEEyM0ZGNEMzOUE5NUJCQ0MwQi5jZXIwdAYI
KwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2Rldi50dy9ycGtpL0FT
OTQ1LzMvMzIzMTM2MmUzMTM0MzYyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMjMwMzczNzMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYkh8wDQYJKoZIhvcNAQELBQADggEB
ABY8L/erVJqD1mBz7WpHXIDXmrkvmjezoxI5yOosSErv2Oa5wGyuzxGT7avQzrU/
0X7JAHIzGq16l04ChIhl5BPSSnpWxi5cr9ipX1t9YUbUnk+CMiUsIYGqt7Re1A/X
ory+5OP6jSIfEcCrHHoTf/tHX3TBOjV1UMcVG148gqCSHUvJAOR3ft9b/ZI6qhMf
HjkiN9edS+bMtv2kKR9JyBEamT3bKW075AMVhPDbH73aB0UQwfSnlPOZkMeEy8Ch
cPPn9cpikO2nU5T8Jh96LX+IbqU69SiEmw7yzGYrG4g0RqBmX04vatMVnyHyhGAC
v07dNagcxr1Liwow4GoNN6o=
-----END CERTIFICATE-----
Generated at Mon Oct 21 19:13:56 2024 by rpki-client on console-fra.rpki-client.org