Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
File: 326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa (raw, json)
Hash identifier: qv0g4kh4gMphRaqvYSbOsi6qcKBfCV07wJ+84A4lHHg=
Subject key identifier: 2E:49:6F:5C:70:79:1F:D4:96:91:05:74:9B:D5:4A:90:EC:9F:6B:72
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 4084DAEDE98F4073BF0C18159F87508A8814D48D
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
Signing time: Tue 17 Oct 2023 16:13:36 +0000
ROA not before: Tue 17 Oct 2023 16:08:36 +0000
ROA not after: Tue 15 Oct 2024 16:13:36 +0000
asID: 197609
IP address blocks: 2a12:dd47:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:da:ed:e9:8f:40:73:bf:0c:18:15:9f:87:50:8a:88:14:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:08:36 2023 GMT
Not After : Oct 15 16:13:36 2024 GMT
Subject: CN=2E496F5C70791FD4969105749BD54A90EC9F6B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:4b:ec:f6:58:11:b8:d2:20:e6:6f:f2:f6:
26:cb:77:2f:37:0d:22:25:e4:4a:8b:98:10:a7:99:
f0:b4:07:f9:af:37:60:07:ce:61:0f:b5:4d:b0:dd:
3f:82:2f:7b:19:6f:16:13:1d:67:e7:82:de:9b:a8:
c7:de:14:06:4f:54:a4:f7:d0:a7:a4:34:85:74:45:
8b:52:3e:84:a4:67:7f:7b:a7:63:76:e2:db:a3:ac:
e5:23:dd:2c:ac:99:38:6e:0a:e8:28:6f:68:3d:1e:
77:cf:14:f6:44:70:fb:14:e2:4d:75:e7:36:b5:4a:
3a:e5:da:e5:2b:66:3a:02:f4:d2:a7:0e:9d:18:ee:
12:36:09:f9:23:5b:b0:04:f6:6a:fe:34:00:d5:33:
f8:02:51:e1:d2:53:c3:14:ec:5e:71:ac:30:9b:2e:
e7:4a:27:d6:7d:72:56:ab:02:f1:0d:ff:8c:48:cd:
9b:c6:3f:70:92:de:e6:a1:29:4f:c3:36:9b:f4:06:
63:ea:86:ad:bc:33:14:28:c7:da:41:20:4c:68:2b:
c2:cb:87:48:1b:13:f6:b2:ba:8d:40:d5:40:d1:89:
38:ad:fe:f2:0b:ef:1b:c4:0a:e7:f8:77:51:5d:31:
ac:e8:d0:27:3f:cd:d7:7c:71:e6:cd:53:fd:72:f0:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:6F:5C:70:79:1F:D4:96:91:05:74:9B:D5:4A:90:EC:9F:6B:72
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/326131323a646434373a3130303a3a2f34302d3438203d3e20313937363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:100::/40
Signature Algorithm: sha256WithRSAEncryption
15:15:4d:0a:4c:fc:87:8d:d1:c9:84:35:7e:4a:d9:eb:d5:24:
70:c8:fa:15:b4:64:15:8b:b4:a9:80:ed:40:a2:aa:19:57:80:
f6:c3:6e:32:17:d4:10:45:e0:fb:36:ae:13:57:c2:36:0a:71:
80:5b:1e:0f:05:65:e3:c6:06:8f:92:0a:e9:8f:a1:ed:96:55:
de:15:03:4b:df:1e:d5:87:8e:e2:29:5d:76:7e:c2:36:f7:a7:
f6:9a:63:38:e3:b5:49:50:04:3d:04:67:2a:41:b4:3e:97:b7:
15:cd:9f:8a:c6:c9:35:6a:57:89:ba:e2:cf:10:f8:c1:2e:7a:
2e:2a:8f:3f:22:44:fd:15:29:9e:cf:13:b8:b8:3a:13:db:62:
8a:f5:33:42:61:2b:4b:18:36:f8:45:5b:c6:1e:cf:21:ac:7c:
30:1a:9a:68:fb:f3:c1:3b:0d:d7:01:21:43:ed:a9:43:43:80:
e4:ff:78:02:ff:75:13:ff:2a:43:87:98:a6:ef:a8:14:b6:d6:
42:62:39:e1:5f:bd:cd:c1:1e:0f:c6:70:81:6f:9c:4d:a4:2a:
48:62:f2:eb:59:ad:c6:99:ea:ed:70:36:0d:02:e0:c9:a8:b4:
c6:40:f0:36:f9:e8:99:54:61:a5:54:2e:a5:cb:97:d9:11:4b:
8e:4f:e8:3e
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUQITa7emPQHO/DBgVn4dQiogU1I0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYwNDI4OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJG
RDk5RjNFNjAeFw0yMzEwMTcxNjA4MzZaFw0yNDEwMTUxNjEzMzZaMDMxMTAvBgNV
BAMTKDJFNDk2RjVDNzA3OTFGRDQ5NjkxMDU3NDlCRDU0QTkwRUM5RjZCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsKkvs9lgRuNIg5m/y9ibLdy83
DSIl5EqLmBCnmfC0B/mvN2AHzmEPtU2w3T+CL3sZbxYTHWfngt6bqMfeFAZPVKT3
0KekNIV0RYtSPoSkZ397p2N24tujrOUj3SysmThuCugob2g9HnfPFPZEcPsU4k11
5za1Sjrl2uUrZjoC9NKnDp0Y7hI2CfkjW7AE9mr+NADVM/gCUeHSU8MU7F5xrDCb
LudKJ9Z9clarAvEN/4xIzZvGP3CS3uahKU/DNpv0BmPqhq28MxQox9pBIExoK8LL
h0gbE/ayuo1A1UDRiTit/vIL7xvECuf4d1FdMazo0Cc/zdd8cebNU/1y8H2LAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQULklvXHB5H9SWkQV0m9VKkOyfa3IwHwYDVR0j
BBgwFoAUZgQonH454I4a4SVc7nPAW/2Z8+YwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzEvNjYwNDI4
OUM3RTM5RTA4RTFBRTEyNTVDRUU3M0MwNUJGRDk5RjNFNi5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC81
LzY2MDQyODlDN0UzOUUwOEUxQUUxMjU1Q0VFNzNDMDVCRkQ5OUYzRTYuY2VyMHsG
CCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTMxMzAzMDNhM2EyZjM0MzAyZDM0
MzgyMDNkM2UyMDMxMzkzNzM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoS3UcBMA0GCSqGSIb3
DQEBCwUAA4IBAQAVFU0KTPyHjdHJhDV+Stnr1SRwyPoVtGQVi7SpgO1AoqoZV4D2
w24yF9QQReD7Nq4TV8I2CnGAWx4PBWXjxgaPkgrpj6HtllXeFQNL3x7Vh47iKV12
fsI296f2mmM447VJUAQ9BGcqQbQ+l7cVzZ+Kxsk1aleJuuLPEPjBLnouKo8/IkT9
FSmezxO4uDoT22KK9TNCYStLGDb4RVvGHs8hrHwwGppo+/PBOw3XASFD7alDQ4Dk
/3gC/3UT/ypDh5im76gUttZCYjnhX73NwR4PxnCBb5xNpCpIYvLrWa3GmertcDYN
AuDJqLTGQPA2+eiZVGGlVC6ly5fZEUuOT+g+
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:47 2025 by rpki-client