Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa
File:                     326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa (raw, json)
Hash identifier:          Z7TCTzTsvDmLnPCx8145HLkwTRsWV/ZM20qu7F08Ils=
Subject key identifier:   80:DF:8A:69:05:DD:F7:F2:41:18:59:05:93:F2:27:4D:DA:33:1F:F3
Certificate issuer:       /CN=E08A23B82DF37E4701E573987559B077CD666175
Certificate serial:       523F430E1EF93258E7FD9469F88F7540CAE3A41F
Authority key identifier: E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75
Authority info access:    rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
Subject info access:      rsync://dev.tw/rpki/AS945/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa
Signing time:             Fri 11 Oct 2024 10:04:06 +0000
ROA not before:           Fri 11 Oct 2024 09:59:06 +0000
ROA not after:            Fri 10 Oct 2025 10:04:06 +0000
asID:                     200529
IP address blocks:        2a05:dfc6:9500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl
                          rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.mft
                          rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.crl
                          rsync://dev.tw/rpki/August/13/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F4649896A70A20CD8ABB9644DE0C0399CEC6FBCE.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3f:43:0e:1e:f9:32:58:e7:fd:94:69:f8:8f:75:40:ca:e3:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E08A23B82DF37E4701E573987559B077CD666175
        Validity
            Not Before: Oct 11 09:59:06 2024 GMT
            Not After : Oct 10 10:04:06 2025 GMT
        Subject: CN=80DF8A6905DDF7F24118590593F2274DDA331FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:dc:ea:c5:0b:8e:a1:d1:6f:8a:8d:ab:4d:
                    a0:d7:3d:b8:26:20:2e:d4:15:5d:2d:bd:7b:d6:2c:
                    ec:2e:c3:77:60:ae:c8:28:ee:ab:50:49:2d:13:78:
                    2e:ac:46:c6:34:e7:38:a3:f4:93:d7:27:88:85:47:
                    fa:81:97:91:7c:64:05:67:c3:47:6a:6d:5a:ee:a4:
                    f6:67:cb:e9:f9:00:77:ef:c9:71:25:86:0b:ff:99:
                    fb:16:34:17:be:6c:b8:ef:a2:80:50:e6:0f:f5:43:
                    39:04:cf:da:7d:23:e3:0a:86:43:23:3e:8c:91:a5:
                    ae:96:ac:3a:5e:47:f0:06:c8:91:2f:50:2f:89:7c:
                    4d:fb:3d:93:60:ce:0c:fc:98:44:8d:45:8d:8c:88:
                    c4:56:f1:d2:d5:8a:76:45:28:a0:88:cf:92:4d:1d:
                    ee:ca:ad:db:e4:a4:70:65:11:25:81:e1:29:d8:1d:
                    d6:d5:f8:9a:c1:7d:34:57:63:c4:70:92:f1:c8:79:
                    d7:fd:46:aa:71:10:ed:46:c9:df:d2:75:a0:d2:ec:
                    14:84:6d:e8:3c:89:fe:5e:53:30:2e:fb:49:0d:1b:
                    ec:c3:50:8a:b6:d2:0e:f1:3f:69:3b:6d:b4:4d:02:
                    6a:c8:01:19:fd:68:a4:f8:39:c2:ce:a0:d8:a5:8e:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DF:8A:69:05:DD:F7:F2:41:18:59:05:93:F2:27:4D:DA:33:1F:F3
            X509v3 Authority Key Identifier:
                keyid:E0:8A:23:B8:2D:F3:7E:47:01:E5:73:98:75:59:B0:77:CD:66:61:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/14/E08A23B82DF37E4701E573987559B077CD666175.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/13/E08A23B82DF37E4701E573987559B077CD666175.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/14/326130353a646663363a393530303a3a2f34302d3438203d3e20323030353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc6:9500::/40

    Signature Algorithm: sha256WithRSAEncryption
         db:b0:bf:2b:00:75:21:4d:ad:7d:6e:14:e1:2e:70:d8:eb:b7:
         da:32:10:a4:76:d9:c0:8b:64:d8:ee:ca:cb:cd:49:73:8d:43:
         ca:ad:7b:80:57:25:f2:e3:4a:e9:94:b7:de:e8:fc:73:78:50:
         d7:b1:f4:a9:e6:ef:e6:09:21:67:a3:b4:67:b9:a7:14:cc:23:
         2a:32:cc:32:f5:a5:86:97:ef:f4:ad:fd:52:4a:e4:78:fb:14:
         6e:8e:62:0f:b3:bc:2d:91:41:a9:83:55:00:82:98:92:08:87:
         45:c9:24:02:90:e9:98:9c:f0:81:47:e3:0c:6b:0b:64:fb:3a:
         0e:59:61:3d:0d:ee:c2:3e:9a:07:8b:52:ee:39:87:3a:fc:96:
         af:32:27:1b:39:53:da:30:77:ce:35:02:30:07:ea:36:83:70:
         2e:88:61:22:8e:55:13:a0:97:ba:6e:e9:40:63:0d:6a:63:13:
         35:62:ad:ab:9f:4a:f7:28:ca:4c:a5:8c:70:7c:75:8f:3c:c4:
         4b:1c:05:45:46:52:d1:32:f5:ae:e8:4c:6f:71:6f:e7:06:ed:
         68:4a:97:1b:cd:a5:e7:f7:e6:86:e9:1f:f2:67:53:b2:ea:84:
         ff:a7:bd:04:ad:a3:16:97:4d:fd:7e:65:a0:e1:c8:c2:1b:f9:
         2f:06:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org