Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          n86urzie3Bv5Qsl2rNstGsJF/lCBruJLi1Zf4qsaj0U=
Subject key identifier:   34:35:8D:0F:0C:6C:8B:73:AB:2B:DA:68:3C:32:62:85:4B:08:38:BD
Certificate issuer:       /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial:       046FC392DB0A5A41156E4EB28D510E6E17479086
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject info access:      rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
Signing time:             Thu 03 Oct 2024 20:41:16 +0000
ROA not before:           Thu 03 Oct 2024 20:36:16 +0000
ROA not after:            Thu 02 Oct 2025 20:41:16 +0000
asID:                     945
IP address blocks:        140.235.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6f:c3:92:db:0a:5a:41:15:6e:4e:b2:8d:51:0e:6e:17:47:90:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
        Validity
            Not Before: Oct  3 20:36:16 2024 GMT
            Not After : Oct  2 20:41:16 2025 GMT
        Subject: CN=34358D0F0C6C8B73AB2BDA683C3262854B0838BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:68:6d:5b:4d:45:ad:43:af:2f:10:e3:5f:
                    c3:a7:e8:fa:7d:dc:20:95:f3:36:4b:34:ee:5d:ec:
                    37:ab:0b:99:02:ad:29:95:5e:8e:61:62:34:e4:ea:
                    38:8a:6a:22:5a:07:5a:6c:85:a1:7c:b5:13:ba:8f:
                    4d:bd:4c:5a:f0:2b:a3:aa:a9:68:02:44:d4:3d:2c:
                    55:a3:8b:e6:74:99:d3:06:49:4b:9b:8a:7b:09:f5:
                    60:a7:b3:02:4f:20:be:ab:73:27:20:ef:67:da:b8:
                    98:a8:88:15:ad:af:81:0f:e7:f4:52:8a:df:a6:66:
                    e8:9e:f5:64:48:c1:a5:e4:9b:dc:0a:fd:c4:d8:8c:
                    0f:bb:e0:90:07:77:f2:8d:86:76:12:63:af:d9:75:
                    96:3b:f6:e3:59:cc:e7:0b:b0:48:71:f5:8c:9a:44:
                    d4:f6:f5:12:63:a4:6f:0d:c1:bb:ad:e7:c7:71:fe:
                    40:7b:59:07:4f:f1:e4:4f:4e:6c:0c:e9:a5:1a:15:
                    b1:14:42:5a:7a:6d:86:3d:a4:93:60:15:a3:cb:8b:
                    1c:69:e4:6b:d6:eb:46:04:e6:c7:55:4c:06:c9:b3:
                    c3:4b:e3:65:dd:ec:37:b4:bd:24:8b:57:47:87:ac:
                    8a:84:cc:ec:31:9e:da:28:3d:39:cb:2f:9c:f3:ff:
                    cb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:35:8D:0F:0C:6C:8B:73:AB:2B:DA:68:3C:32:62:85:4B:08:38:BD
            X509v3 Authority Key Identifier:
                keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:99:c4:1e:f8:be:c0:a4:8f:cd:3e:5e:fd:bb:1d:0d:f4:9c:
         0e:ad:71:57:bf:d2:70:ce:06:16:51:91:1e:d8:ee:cd:a2:21:
         08:d6:3e:c6:b3:82:2b:8f:cb:79:91:2e:a0:2c:e5:20:76:69:
         50:eb:bf:92:fc:36:c7:f7:aa:f4:cc:a6:30:e2:75:ca:b3:ce:
         8f:e7:a1:63:e7:87:92:f8:ad:7b:9c:47:0e:9d:0e:4e:b1:ad:
         fb:43:d9:be:b4:40:cb:6c:4c:01:84:57:23:49:ea:b6:78:da:
         d9:fc:fb:4d:75:89:6d:53:64:f7:f4:c0:b8:65:d8:54:f2:8c:
         09:68:a7:35:b1:8c:dd:20:26:d0:a2:c2:5c:29:16:8f:48:90:
         b6:85:6a:51:49:7a:cc:6d:9f:13:66:2c:d8:dd:df:22:50:62:
         b8:46:14:84:b6:b3:9c:81:36:0c:5f:5b:09:df:40:d2:2f:68:
         35:8c:c3:f6:13:bc:d7:19:2f:2c:49:e2:b4:ac:4d:13:68:49:
         17:3b:c1:1a:56:21:11:82:60:6d:2f:23:7f:64:2d:38:b9:11:
         ac:75:c1:26:c4:9a:84:ec:e3:13:92:2d:19:6a:71:04:65:9b:
         76:e0:55:f2:66:75:19:da:bc:98:4d:4b:fd:b2:aa:25:b8:f5:
         6f:59:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:41:40 2025 by rpki-client