Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          4Gh2Onjbwc9hX7bUt/WfMegvH+lsPYnS2AiGsYeQRpw=
Subject key identifier:   BE:9D:57:78:16:22:83:79:D8:D2:89:14:80:D4:76:4B:55:A8:9B:8B
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       50E31FE97B1B59716D49D3CA8BFA31C402CDF3BB
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa
Signing time:             Fri 11 Oct 2024 10:04:10 +0000
ROA not before:           Fri 11 Oct 2024 09:59:10 +0000
ROA not after:            Fri 10 Oct 2025 10:04:10 +0000
asID:                     945
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl
                          rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
                          rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:1f:e9:7b:1b:59:71:6d:49:d3:ca:8b:fa:31:c4:02:cd:f3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 11 09:59:10 2024 GMT
            Not After : Oct 10 10:04:10 2025 GMT
        Subject: CN=BE9D577816228379D8D2891480D4764B55A89B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:be:c6:5e:f5:f2:ec:38:11:0c:6c:58:3d:
                    77:92:6b:fd:a0:b4:85:c8:cf:ac:a8:d1:dc:e8:81:
                    dd:cf:4a:ab:d3:69:41:c7:d4:f8:06:c8:44:bb:4b:
                    1d:8c:21:48:4e:45:eb:e3:df:f7:39:0e:5e:4c:c8:
                    c4:91:e4:71:d6:19:27:27:62:f5:0d:eb:ce:5c:8d:
                    b3:69:46:78:cd:11:56:42:24:a6:8c:81:24:bb:42:
                    f9:aa:56:96:16:72:76:31:6f:b5:d9:cc:1c:e4:8d:
                    bb:ed:38:bf:6f:0f:39:02:27:1c:ea:4c:33:87:2f:
                    53:aa:01:10:aa:db:2d:69:d5:99:2c:d7:3f:2f:20:
                    db:d5:a7:76:bb:c3:ed:9b:bc:7d:5a:cf:01:c2:ad:
                    06:e0:a9:5b:6e:02:00:ba:78:17:63:bd:8a:82:17:
                    db:cb:f3:3c:6f:30:69:52:7a:ff:25:52:9a:a6:4c:
                    13:12:dd:b8:df:45:22:40:20:74:54:aa:da:2e:14:
                    b9:63:df:34:b5:14:0a:38:25:00:b4:59:9f:ae:09:
                    20:f9:33:45:15:c2:f6:bd:8b:eb:48:41:5a:a7:67:
                    f6:26:7d:43:16:3c:c9:8f:84:c1:bd:ae:71:5e:ee:
                    4c:9c:02:48:4b:05:b9:17:1a:c1:39:7b:5a:04:f5:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9D:57:78:16:22:83:79:D8:D2:89:14:80:D4:76:4B:55:A8:9B:8B
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:43:6b:38:72:f1:e4:40:1f:21:cc:1c:c5:2b:1d:4b:e9:f4:
         27:da:e0:8b:79:dc:47:c0:46:cd:e4:5a:d4:c1:95:d3:4d:8f:
         36:61:53:7c:3e:dc:15:9a:20:80:59:f6:2d:d6:1d:20:71:88:
         bd:31:ec:b9:fa:71:06:96:58:0b:15:ba:3e:8b:c0:74:f2:f5:
         fd:af:88:07:cb:cb:cb:8b:65:8b:59:34:84:b6:26:32:fa:84:
         99:44:9f:53:cb:b0:b3:a8:fd:38:da:b1:04:a6:93:e4:44:c3:
         3f:c2:39:77:2e:e3:29:e6:27:a2:b2:9f:3d:a6:ec:3b:85:3b:
         c2:29:c2:52:7b:3c:83:4b:8d:3c:1f:ff:c6:80:47:9d:c0:2e:
         7e:f6:7d:aa:3c:86:5e:e0:02:12:71:1a:88:ea:01:1f:09:27:
         23:97:5b:2a:0b:26:25:2e:12:db:47:16:63:19:d4:7f:45:45:
         d1:1b:36:eb:ad:e7:4f:da:51:7a:c9:bc:ea:77:a6:e7:c4:fd:
         5f:89:47:70:33:48:6f:c8:6a:8c:a4:ca:db:4e:e8:45:ce:88:
         a7:30:73:74:da:7c:ac:fe:c1:f2:16:1c:b8:c5:a2:21:e6:1b:
         35:0e:34:c2:68:9f:ef:dc:de:bd:e9:79:ba:2f:28:68:93:ac:
         09:8d:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 12:32:43 2024 by rpki-client on console-ams.rpki-client.org