Route Origin Authorization
$ rpki-client -vvf rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
File: 3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier: E4G97b3X9r+4Hi9Ud/TPsuoku0KzwpnfA3x3e33mSjM=
Subject key identifier: 90:B4:0C:6B:C3:4A:4A:3D:EF:97:B2:4A:2A:1C:76:E8:7E:1D:F2:66
Certificate issuer: /CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Certificate serial: 057AA4BB3F18BBCE2628A5528931EA1439BEDAD9
Authority key identifier: D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
Authority info access: rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject info access: rsync://rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
Signing time: Fri 14 Jun 2024 06:41:39 +0000
ROA not before: Fri 14 Jun 2024 06:36:39 +0000
ROA not after: Fri 13 Jun 2025 06:41:39 +0000
asID: 10103
IP address blocks: 216.146.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7a:a4:bb:3f:18:bb:ce:26:28:a5:52:89:31:ea:14:39:be:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6
Validity
Not Before: Jun 14 06:36:39 2024 GMT
Not After : Jun 13 06:41:39 2025 GMT
Subject: CN=90B40C6BC34A4A3DEF97B24A2A1C76E87E1DF266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:2f:7c:dd:5c:07:4c:df:20:a4:04:0f:6e:
5f:b3:fe:96:c3:b1:47:01:13:41:9d:04:3a:73:51:
55:b2:02:bc:1d:a3:05:02:ec:56:99:e7:4e:b5:2a:
f4:f4:fc:37:5c:23:53:6d:13:34:cc:85:6f:f1:bf:
c0:b1:45:c3:24:26:80:b3:6f:ae:f0:33:2f:2c:60:
cc:f1:c2:86:33:59:42:ba:a2:9a:fd:c3:4e:0d:75:
8c:74:82:9e:a7:4a:96:a1:c8:88:ef:d2:20:cd:73:
48:d0:c6:2d:5d:b0:97:4a:96:15:00:7d:bb:8b:f9:
bb:69:4e:13:14:89:15:05:83:74:71:97:ac:aa:1a:
3f:57:2e:74:92:2e:3b:e0:8e:e0:91:1a:f2:6a:ad:
94:48:e5:19:cb:b8:97:e7:37:5a:e3:75:8d:5d:24:
b6:29:47:04:51:17:17:59:e0:ff:94:34:cf:fb:03:
37:ee:22:bb:9f:ac:10:dc:83:c9:59:0e:94:fb:c0:
48:35:d5:44:23:56:71:f1:3d:ce:52:5a:bf:a1:f8:
80:10:13:75:0f:19:35:c2:67:3e:53:c3:2d:2e:3d:
25:98:0a:07:c1:e6:b6:5c:b9:86:de:b5:69:49:f6:
e4:65:4d:81:3c:7e:19:aa:5e:23:0f:05:98:4f:be:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:0C:6B:C3:4A:4A:3D:EF:97:B2:4A:2A:1C:76:E8:7E:1D:F2:66
X509v3 Authority Key Identifier:
keyid:D9:9E:36:77:F8:E2:DE:F2:A5:83:7C:3D:4A:76:86:C7:C8:9B:51:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/3/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.crl
Authority Information Access:
CA Issuers - URI:rsync://dev.tw/rpki/August/0/D99E3677F8E2DEF2A5837C3D4A7686C7C89B51C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS945/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.30.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a8:4b:7b:f6:4e:a4:7d:39:44:fe:ee:94:cd:1e:bc:e1:78:
9f:a5:99:3a:30:91:99:2e:11:74:d1:19:b4:c4:ce:5f:82:30:
ec:6d:d5:02:e7:70:a9:2d:fd:b8:66:2e:42:8b:75:0b:66:97:
65:72:be:ec:66:83:42:a3:a3:38:79:ea:3b:aa:23:f0:f1:ae:
98:6b:41:cf:e6:6e:1b:42:4d:14:70:3e:cf:d6:ab:3d:11:c9:
e4:f0:0c:e7:18:90:2a:b7:7a:b0:96:0b:c2:cb:71:6d:4c:f0:
73:eb:d1:70:a6:65:da:0c:2a:e0:1d:06:b7:b7:a4:16:77:5d:
3d:80:dc:9a:d9:cb:fd:b0:bf:18:62:09:4f:1f:ba:02:5c:82:
70:40:65:0f:dd:07:d2:6c:2a:e9:be:ca:80:41:f6:f1:cd:61:
ef:aa:a2:41:85:d0:0a:79:b4:72:64:35:2d:41:ee:f9:50:f1:
3d:2c:97:c9:f4:e1:1e:a5:cc:39:6b:b1:2e:ff:53:8c:fc:4f:
93:bb:db:76:0f:48:33:d1:48:17:d7:b4:ee:cd:4f:3a:4e:a0:
fa:ff:92:09:13:97:1a:50:24:9a:0f:89:84:b9:c5:5c:bf:ac:
5a:b8:a8:53:62:a6:37:7e:d2:bd:5a:0d:1b:e8:58:06:f4:73:
07:15:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:22:03 2025 by rpki-client