Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/1/3138352e3135352e37352e302f32342d3234203d3e2037373139.roa
File:                     3138352e3135352e37352e302f32342d3234203d3e2037373139.roa (raw, json)
Hash identifier:          ivoeOpv1/WroFX/JcouZKhEj64X2lh0/j1EQWpcULvY=
Subject key identifier:   F7:6E:B0:6D:EA:F2:17:B8:56:19:60:D8:CD:49:7D:3A:49:E1:9E:18
Certificate issuer:       /CN=442c354a483a8b70d839d3f798cd870684f02186
Certificate serial:       424671E6F764647A30079B914E804B3911C9BFA7
Authority key identifier: 44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
Subject info access:      rsync://dev.tw/rpki/August/1/3138352e3135352e37352e302f32342d3234203d3e2037373139.roa
Signing time:             Tue 14 May 2024 18:06:28 +0000
ROA not before:           Tue 14 May 2024 18:01:28 +0000
ROA not after:            Tue 13 May 2025 18:06:28 +0000
asID:                     7719
IP address blocks:        185.155.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Jun 2024 22:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:46:71:e6:f7:64:64:7a:30:07:9b:91:4e:80:4b:39:11:c9:bf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=442c354a483a8b70d839d3f798cd870684f02186
        Validity
            Not Before: May 14 18:01:28 2024 GMT
            Not After : May 13 18:06:28 2025 GMT
        Subject: CN=F76EB06DEAF217B8561960D8CD497D3A49E19E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:9c:f9:8d:ed:32:e8:04:cc:27:da:e1:06:
                    b4:81:3f:f4:59:f4:82:0f:3b:24:77:5a:a9:7e:cf:
                    70:ef:49:c6:bc:ef:7f:bd:d1:0d:b1:5d:78:c3:00:
                    83:39:33:82:2b:3c:21:fb:00:94:4a:16:36:8d:2d:
                    93:b9:95:e5:1c:e8:87:f8:6e:7f:9b:a7:33:fd:03:
                    09:2c:25:42:ce:bf:51:07:e4:27:e2:80:bc:00:9a:
                    fd:04:35:56:26:70:00:ca:0e:df:7a:87:b7:8e:67:
                    65:17:03:55:b8:7f:05:71:a0:fc:a1:be:f6:f0:86:
                    68:b6:22:ef:70:83:f4:41:ad:cd:6e:56:53:8e:aa:
                    75:81:50:79:19:20:ad:00:d9:19:6a:06:ce:4b:12:
                    5d:f3:63:12:0b:98:a7:05:24:52:f2:a1:ae:6d:8d:
                    ac:c2:5f:40:aa:83:4b:a1:e9:d0:c5:81:ce:5e:03:
                    38:4d:97:d3:9f:4a:4b:09:12:6b:bd:f9:f4:b8:a6:
                    7c:dc:c7:2d:d0:de:99:cd:9c:17:87:0f:fb:61:40:
                    d6:af:ae:d4:48:76:03:8d:41:3d:57:97:65:1b:ff:
                    93:2f:62:46:6b:84:8c:1d:af:a2:eb:d5:80:1d:91:
                    7a:26:af:57:7a:dc:63:94:ab:f1:78:d4:a6:ec:87:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:B0:6D:EA:F2:17:B8:56:19:60:D8:CD:49:7D:3A:49:E1:9E:18
            X509v3 Authority Key Identifier:
                keyid:44:2C:35:4A:48:3A:8B:70:D8:39:D3:F7:98:CD:87:06:84:F0:21:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/1/3138352e3135352e37352e302f32342d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3e:c9:9e:d5:d6:67:2c:d0:77:97:8c:23:ec:3b:a1:bd:3d:
         7c:eb:f3:95:f8:33:69:75:54:ab:50:ee:66:13:b6:46:b5:46:
         fb:65:ef:cb:62:5c:2e:be:10:02:8e:22:2f:15:05:3a:b0:41:
         16:43:0a:56:83:4a:99:4a:04:94:94:a3:31:78:e5:f3:11:90:
         d3:f5:b8:47:2e:d8:2e:e2:9d:77:bb:16:65:37:f7:dc:44:f4:
         a3:62:34:d0:ef:6a:3f:8b:c1:67:76:3e:a6:f5:bb:44:bf:6e:
         35:6b:e8:37:11:f9:eb:81:9d:1c:66:39:ff:6f:7a:91:bc:85:
         a8:47:93:f1:dc:8a:35:56:f2:83:a8:f9:fe:79:cb:52:4c:e1:
         98:80:2d:3a:64:35:aa:a5:f2:53:e4:2c:80:5e:ed:28:6b:8c:
         df:da:49:ff:84:9e:84:dd:9b:4f:fe:5b:95:8d:3e:79:d4:cd:
         b5:08:ae:b4:41:bb:1b:d9:87:08:26:d2:17:e0:c0:63:06:41:
         81:7d:6b:66:66:f4:12:fa:ff:30:37:f6:62:19:28:1e:d8:e0:
         00:6b:e6:06:20:15:41:e0:21:9b:87:b1:9d:81:9a:51:12:64:
         2b:c9:4d:dd:95:49:a2:bb:cb:1e:99:d9:ca:f2:da:12:7c:0e:
         4e:5b:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:02:23 2024 by rpki-client on console-ams.rpki-client.org