Route Origin Authorization
$ rpki-client -vvf rpki.august.tw/repo/localname/0/323630323a666332333a3134303a3a2f34342d3438203d3e20323130363331.roa
File: 323630323a666332333a3134303a3a2f34342d3438203d3e20323130363331.roa (raw, json)
Hash identifier: oJfk2JR6IIDZ9AIx5RaQgXsEwlp+PDzd59gVHHT2Qm0=
Subject key identifier: 70:9E:94:F0:F8:62:E1:F3:3A:C2:9A:93:6F:6C:64:9E:EB:5B:63:5A
Certificate issuer: /CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Certificate serial: 04577BED019E4A8C58B546559F79E8FADE5259EC
Authority key identifier: 32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject info access: rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3134303a3a2f34342d3438203d3e20323130363331.roa
Signing time: Wed 09 Mar 2022 19:11:22 +0000
ROA not before: Wed 09 Mar 2022 19:06:22 +0000
ROA not after: Wed 08 Mar 2023 19:11:22 +0000
asID: 210631
IP address blocks: 2602:fc23:140::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:57:7b:ed:01:9e:4a:8c:58:b5:46:55:9f:79:e8:fa:de:52:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c
Validity
Not Before: Mar 9 19:06:22 2022 GMT
Not After : Mar 8 19:11:22 2023 GMT
Subject: CN=709E94F0F862E1F33AC29A936F6C649EEB5B635A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:e7:c8:a2:e3:f5:14:06:4c:b1:2d:a2:73:
52:7c:fa:1b:f4:19:2d:97:0d:3d:71:bc:76:7a:dc:
12:68:42:95:de:1b:51:56:16:b8:7d:73:86:8e:a2:
68:48:b0:df:67:6d:7d:56:55:ec:dd:da:d0:6c:ec:
48:9c:9f:bc:e2:59:62:60:70:0f:ea:76:d1:0f:3b:
51:68:b8:66:9f:c9:be:6b:5c:9a:29:e6:c3:b4:eb:
36:4c:8c:42:c1:f2:84:fd:f6:55:49:2f:e3:6e:9b:
93:5f:59:f7:1a:32:3e:09:38:c7:c2:fd:b2:96:54:
36:59:9e:37:00:7e:50:37:8f:6d:a0:e3:b1:50:3b:
9b:c1:e7:b1:77:27:f1:98:84:f5:56:ff:1d:f4:65:
f5:23:c7:e1:5c:52:d4:e5:23:62:90:ea:da:5a:4b:
b1:3c:45:51:7a:a1:b1:df:44:7a:33:57:64:25:64:
f7:11:10:0e:50:a2:10:86:a2:61:ea:30:92:03:15:
50:70:cb:cb:b7:ac:30:07:9a:9c:60:a1:aa:f4:13:
b6:23:40:65:2f:13:a3:06:c0:a4:93:91:af:bc:88:
a0:6e:0a:79:94:1c:ab:06:66:2a:05:af:ce:58:3d:
1f:81:c6:bd:1b:9c:09:42:48:ef:4c:86:e2:76:5e:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:94:F0:F8:62:E1:F3:3A:C2:9A:93:6F:6C:64:9E:EB:5B:63:5A
X509v3 Authority Key Identifier:
keyid:32:71:6A:A1:61:C2:B0:D1:6D:11:64:32:E3:79:09:63:9E:3C:A6:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.august.tw/repo/localname/0/32716AA161C2B0D16D116432E37909639E3CA672.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0effd6d153f9cd529ccaad5dc49d18f08a085873c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.august.tw/repo/localname/0/323630323a666332333a3134303a3a2f34342d3438203d3e20323130363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fc23:140::/44
Signature Algorithm: sha256WithRSAEncryption
7e:52:ad:20:44:0b:72:f8:53:7d:fa:5d:00:49:bf:5a:97:f7:
46:50:bd:2b:38:54:98:05:9f:6e:91:e6:7c:08:63:6d:8b:c8:
58:4c:45:28:3d:86:87:23:26:36:22:78:ad:dd:3a:d8:5a:ed:
f2:b1:33:4c:69:c9:d9:0e:7f:1a:3c:e2:7c:39:63:87:01:54:
02:f0:2d:6e:5f:aa:7e:60:95:4d:65:61:91:56:09:21:3b:8d:
c2:fb:66:3a:3a:ef:88:92:7d:b0:5c:4a:8e:0f:95:97:76:c1:
7b:41:be:5c:75:1b:3b:82:eb:73:2c:72:6f:e2:a9:ef:5d:16:
c7:74:88:b2:df:80:1c:9b:1a:b1:4d:e9:23:8a:90:c3:0e:f8:
b1:cf:9e:4a:1c:6c:97:c4:ed:2c:03:88:b3:b7:a0:3d:29:c7:
c0:20:9f:e4:82:bf:c4:a8:c0:c5:42:4a:92:f7:80:2e:08:fc:
d6:98:d1:65:d3:42:6f:16:60:bd:51:e9:ab:c0:a9:69:03:09:
6a:db:cf:9a:e5:b4:13:7c:c0:18:81:2a:c5:33:5e:f2:f3:3d:
9b:14:28:c4:64:e0:ae:c1:8f:18:61:9d:7c:99:18:ea:d8:2b:
73:03:f1:34:54:4e:c5:af:2c:19:45:7a:d0:f6:2a:ad:67:37:
2b:fe:f4:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUBFd77QGeSoxYtUZVn3no+t5SWewwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmZmQ2ZDE1M2Y5Y2Q1MjljY2FhZDVk
YzQ5ZDE4ZjA4YTA4NTg3M2MwHhcNMjIwMzA5MTkwNjIyWhcNMjMwMzA4MTkxMTIy
WjAzMTEwLwYDVQQDEyg3MDlFOTRGMEY4NjJFMUYzM0FDMjlBOTM2RjZDNjQ5RUVC
NUI2MzVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7bnyKLj9RQG
TLEtonNSfPob9Bktlw09cbx2etwSaEKV3htRVha4fXOGjqJoSLDfZ219VlXs3drQ
bOxInJ+84lliYHAP6nbRDztRaLhmn8m+a1yaKebDtOs2TIxCwfKE/fZVSS/jbpuT
X1n3GjI+CTjHwv2yllQ2WZ43AH5QN49toOOxUDubweexdyfxmIT1Vv8d9GX1I8fh
XFLU5SNikOraWkuxPEVReqGx30R6M1dkJWT3ERAOUKIQhqJh6jCSAxVQcMvLt6ww
B5qcYKGq9BO2I0BlLxOjBsCkk5GvvIigbgp5lByrBmYqBa/OWD0fgca9G5wJQkjv
TIbidl6OhQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFHCelPD4YuHzOsKak29sZJ7r
W2NaMB8GA1UdIwQYMBaAFDJxaqFhwrDRbRFkMuN5CWOePKZyMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuYXVndXN0LnR3L3Jl
cG8vbG9jYWxuYW1lLzAvMzI3MTZBQTE2MUMyQjBEMTZEMTE2NDMyRTM3OTA5NjM5
RTNDQTY3Mi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00
Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIw
NGZkZDY2M2YzNy82NTA2YTY2ZWQwZWZmZDZkMTUzZjljZDUyOWNjYWFkNWRjNDlk
MThmMDhhMDg1ODczYy5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq
cnN5bmM6Ly9ycGtpLmF1Z3VzdC50dy9yZXBvL2xvY2FsbmFtZS8wLzMyMzYzMDMy
M2E2NjYzMzIzMzNhMzEzNDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMw
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEJgL8IwFAMA0GCSqGSIb3DQEBCwUAA4IBAQB+Uq0g
RAty+FN9+l0ASb9al/dGUL0rOFSYBZ9ukeZ8CGNti8hYTEUoPYaHIyY2Init3TrY
Wu3ysTNMacnZDn8aPOJ8OWOHAVQC8C1uX6p+YJVNZWGRVgkhO43C+2Y6Ou+Ikn2w
XEqOD5WXdsF7Qb5cdRs7gutzLHJv4qnvXRbHdIiy34AcmxqxTekjipDDDvixz55K
HGyXxO0sA4izt6A9KcfAIJ/kgr/EqMDFQkqS94AuCPzWmNFl00JvFmC9UemrwKlp
Awlq28+a5bQTfMAYgSrFM17y8z2bFCjEZOCuwY8YYZ18mRjq2CtzA/E0VE7FrywZ
RXrQ9iqtZzcr/vQC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:59 2024 by rpki-client on console-fra.rpki-client.org