Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/1/AS203635.roa
File: AS203635.roa (raw, json)
Hash identifier: gVTznXEKheuB3Hs0oV/eQucQgx5xqPu7nR28y+H4v/k=
Subject key identifier: 17:60:E0:A0:41:0F:0C:79:B7:21:0E:56:E8:25:EA:6C:DA:CE:06:93
Certificate issuer: /CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Certificate serial: 6DC2814480A5EF4284A6B6B402F177FC3E718288
Authority key identifier: 66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
Authority info access: rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject info access: rsync://rpki.co/repo/AS945/1/AS203635.roa
Signing time: Tue 17 Oct 2023 16:05:02 +0000
ROA not before: Tue 17 Oct 2023 16:00:02 +0000
ROA not after: Tue 15 Oct 2024 16:05:02 +0000
asID: 203635
IP address blocks: 2a12:dd47:81f0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c2:81:44:80:a5:ef:42:84:a6:b6:b4:02:f1:77:fc:3e:71:82:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6604289C7E39E08E1AE1255CEE73C05BFD99F3E6
Validity
Not Before: Oct 17 16:00:02 2023 GMT
Not After : Oct 15 16:05:02 2024 GMT
Subject: CN=1760E0A0410F0C79B7210E56E825EA6CDACE0693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:1f:5e:0c:df:f5:b4:ba:7f:61:57:a8:4d:
e1:2c:53:35:c8:0c:16:81:b5:50:48:a3:2b:96:47:
dc:b4:39:b3:56:3d:23:b6:a0:68:19:c7:54:cc:fd:
9f:7b:35:60:07:d5:9b:49:5d:b1:70:76:7a:6e:55:
be:a2:d0:a7:ca:7f:92:24:64:5e:a9:ee:e0:2c:9d:
81:28:7e:2d:f9:9b:c8:4d:ae:a1:2d:39:fb:ce:42:
7d:28:d7:04:a2:f3:7c:33:95:af:6c:54:c8:15:79:
22:aa:e7:8a:9a:1f:c4:65:73:ca:25:91:1b:23:a6:
cd:2e:9d:84:5b:46:20:62:d7:57:7e:29:70:41:b0:
da:9c:e5:33:a7:65:7e:13:a2:8c:b4:b0:8c:1f:16:
7d:4c:85:c6:96:7b:d6:32:cd:11:43:99:25:8e:74:
ae:a3:e0:ee:55:b0:fd:8d:b0:8d:52:1e:f9:d6:03:
a9:4e:e1:bb:bd:f7:9f:a4:c3:e5:7e:8e:b8:9c:9d:
24:47:67:00:67:8d:93:0f:1d:bf:25:1e:70:85:72:
15:d2:bd:47:88:1d:f2:e5:ff:ae:d2:71:00:8e:50:
38:67:86:b3:f7:6e:85:f4:08:c6:cf:ea:dc:ca:a1:
7c:74:00:37:40:9d:e3:9e:98:b0:35:40:03:cd:9f:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:60:E0:A0:41:0F:0C:79:B7:21:0E:56:E8:25:EA:6C:DA:CE:06:93
X509v3 Authority Key Identifier:
keyid:66:04:28:9C:7E:39:E0:8E:1A:E1:25:5C:EE:73:C0:5B:FD:99:F3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/1/AS203635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dd47:81f0::/44
Signature Algorithm: sha256WithRSAEncryption
4a:76:74:c7:1e:b4:47:56:e3:7d:38:c5:be:c8:6f:13:21:9e:
60:66:82:5b:50:ff:f1:c8:36:cd:0e:46:09:36:d7:7e:a3:bc:
8c:bd:dd:40:f4:03:5e:18:12:64:c1:e2:f7:04:38:de:66:54:
35:36:4e:26:44:f5:99:91:20:17:f3:79:1f:40:56:ec:18:6f:
08:70:50:e7:46:e5:9a:5f:47:59:46:b6:68:68:af:9e:b3:03:
5c:12:f7:29:f4:91:df:6b:ba:ba:d6:63:3c:d2:c6:5f:1a:7d:
b6:05:cd:99:b8:15:4a:81:2c:a9:86:67:c7:f6:21:04:31:bf:
9f:b1:f4:a8:7c:4f:fe:76:bf:df:a2:23:3f:52:cc:c1:fd:a4:
c0:1d:25:40:ca:2d:aa:ed:27:11:cc:f7:9d:37:aa:9d:5c:d0:
f9:8b:3d:15:ef:14:03:18:6e:dd:73:dc:4c:d0:e5:5d:ae:f5:
86:2d:c9:4f:1e:85:b1:f5:04:99:ed:7f:86:82:b5:4b:bf:e2:
e3:5a:6c:0c:70:a4:c8:af:f5:c3:6d:66:2f:38:af:7a:a0:7c:
a3:d9:20:e6:0c:1d:4b:1f:29:ce:1f:ff:2f:f5:b4:2f:ca:51:
8f:d7:a3:02:87:7c:cb:ed:2d:d3:40:c8:e3:98:d9:76:8a:98:
20:f3:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:04 2025 by rpki-client