Route Origin Authorization
$ rpki-client -vvf dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
File: 3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier: iOYCR0hVYi+urDuKn4kUikuCVlLPYqq4laexVwf+McA=
Subject key identifier: 45:16:E4:68:37:40:E1:8D:E0:97:44:82:ED:F4:C9:1F:D2:5E:AE:9E
Certificate issuer: /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial: 0939F2BDEC88C488F85D0051D214D5EB80810DA7
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject info access: rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
Signing time: Thu 03 Oct 2024 20:33:15 +0000
ROA not before: Thu 03 Oct 2024 20:28:15 +0000
ROA not after: Thu 02 Oct 2025 20:33:15 +0000
asID: 401111
IP address blocks: 140.235.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:39:f2:bd:ec:88:c4:88:f8:5d:00:51:d2:14:d5:eb:80:81:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Validity
Not Before: Oct 3 20:28:15 2024 GMT
Not After : Oct 2 20:33:15 2025 GMT
Subject: CN=4516E4683740E18DE0974482EDF4C91FD25EAE9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:c9:02:ae:2c:c1:13:cf:bd:bc:d7:6c:16:
68:bb:2f:e9:7b:fc:12:d0:82:d3:20:6e:8f:4f:35:
a7:de:ee:2e:7d:1e:0d:79:e0:24:4b:49:6f:fc:d3:
cf:15:b9:7b:53:87:87:c9:68:54:97:52:3b:a9:8a:
da:67:52:68:06:0c:20:c8:4e:07:2d:7f:1c:56:86:
ae:90:89:02:2b:a4:d0:37:ef:0b:d6:cd:75:91:bf:
c7:f1:30:27:4c:4d:7f:ad:d8:1e:dd:0d:56:cb:13:
69:54:da:6b:a5:2f:cc:49:65:e2:85:22:d9:8d:ce:
b4:83:92:69:65:87:a4:05:af:fe:fb:eb:16:21:90:
1b:71:93:77:f2:c0:30:41:ca:99:0a:07:dc:58:c2:
f6:af:81:43:59:54:0f:d2:b6:86:97:dd:93:e5:db:
e7:48:57:be:fd:98:6b:ac:a1:0d:31:3b:65:75:66:
ab:bb:af:f7:7d:64:51:4d:c1:22:85:ab:d6:0c:03:
f1:90:73:34:2c:04:0c:6a:c6:2e:61:97:9d:17:3d:
a5:5a:16:86:fd:a0:fe:4d:ac:d4:b3:62:fa:7e:d8:
90:c0:7a:7e:9f:c5:7d:84:0e:54:e0:a7:76:84:05:
1b:cd:a0:f4:8b:e1:ed:11:01:2f:a6:88:df:0c:27:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:E4:68:37:40:E1:8D:E0:97:44:82:ED:F4:C9:1F:D2:5E:AE:9E
X509v3 Authority Key Identifier:
keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject Information Access:
Signed Object - URI:rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:cd:77:3c:d9:27:4b:cb:d5:ed:85:ca:dd:77:e3:26:0e:
6a:0a:ba:0e:ad:62:5d:92:a1:cb:39:4d:29:bf:36:d0:d4:82:
ae:e2:3d:19:88:dc:5d:5e:2a:75:6b:f9:40:01:dd:6b:a5:2b:
91:3a:15:c8:ee:30:73:05:87:4d:3d:7b:36:c9:9c:3d:94:fe:
b0:3f:b2:89:e5:cf:78:08:d7:25:39:ae:51:f4:6b:b6:52:61:
23:ea:e3:33:51:86:e5:78:e2:27:20:ca:91:34:26:c1:18:28:
20:e3:63:fc:bc:c1:44:67:ea:5b:cf:71:a1:9c:00:b5:7b:4f:
82:3e:d7:cb:88:f4:b2:3b:3c:4b:e8:b1:f6:27:5c:7d:cf:3b:
8c:7d:fb:14:57:9b:0c:1b:c0:35:a9:a8:61:4c:d8:55:15:29:
5e:dd:80:ad:93:37:5f:bb:44:3b:2b:74:1a:37:57:1f:28:61:
2e:14:20:2e:6b:a6:05:7e:2d:b5:e7:3f:18:df:6b:19:5a:83:
5d:e0:14:2b:da:2a:11:1c:15:07:bd:68:73:a4:e0:5d:4a:eb:
c3:c6:b4:35:dc:6d:cd:c0:ec:a3:31:6e:af:68:77:65:bc:fa:
f9:df:fc:07:1e:50:f3:61:8c:80:3d:09:b5:5d:75:5d:a9:c0:
de:c8:cd:57
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUCTnyveyIxIj4XQBR0hTV64CBDacwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJl
ODljYTdiZDE4ODEyN2E0MzkwHhcNMjQxMDAzMjAyODE1WhcNMjUxMDAyMjAzMzE1
WjAzMTEwLwYDVQQDEyg0NTE2RTQ2ODM3NDBFMThERTA5NzQ0ODJFREY0QzkxRkQy
NUVBRTlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfJAq4swRPP
vbzXbBZouy/pe/wS0ILTIG6PTzWn3u4ufR4NeeAkS0lv/NPPFbl7U4eHyWhUl1I7
qYraZ1JoBgwgyE4HLX8cVoaukIkCK6TQN+8L1s11kb/H8TAnTE1/rdge3Q1WyxNp
VNprpS/MSWXihSLZjc60g5JpZYekBa/+++sWIZAbcZN38sAwQcqZCgfcWML2r4FD
WVQP0raGl92T5dvnSFe+/ZhrrKENMTtldWaru6/3fWRRTcEihavWDAPxkHM0LAQM
asYuYZedFz2lWhaG/aD+TazUs2L6ftiQwHp+n8V9hA5U4Kd2hAUbzaD0i+HtEQEv
pojfDCdHDwIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFEUW5Gg3QOGN4JdEgu30yR/S
Xq6eMB8GA1UdIwQYMBaAFEcs2EWeB7lqdqcM68A2HoeQFM+BMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC80LzQ3MkNEODQ1OUUwN0I5NkE3NkE3MENFQkMwMzYxRTg3OTAxNENGODEuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEz
NzIyN2U5NzFhYy83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4N2I0ODMv
NjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJlODljYTdiZDE4ODEyN2E0
MzkuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNC8zMTM0MzAyZTMyMzMzNTJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOt5MA0GCSqG
SIb3DQEBCwUAA4IBAQBKhc13PNknS8vV7YXK3XfjJg5qCroOrWJdkqHLOU0pvzbQ
1IKu4j0ZiNxdXip1a/lAAd1rpSuROhXI7jBzBYdNPXs2yZw9lP6wP7KJ5c94CNcl
Oa5R9Gu2UmEj6uMzUYbleOInIMqRNCbBGCgg42P8vMFEZ+pbz3GhnAC1e0+CPtfL
iPSyOzxL6LH2J1x9zzuMffsUV5sMG8A1qahhTNhVFSle3YCtkzdfu0Q7K3QaN1cf
KGEuFCAua6YFfi215z8Y32sZWoNd4BQr2ioRHBUHvWhzpOBdSuvDxrQ13G3NwOyj
MW6vaHdlvPr53/wHHlDzYYyAPQm1XXVdqcDeyM1X
-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:18 2024 by rpki-client on console-ams.rpki-client.org