Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/2/323030313a3530333a666634343a3a2f34382d3438203d3e20343031313131.roa
File:                     323030313a3530333a666634343a3a2f34382d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          GHcyL8GHsymj0WTPK+EU93ru5FIs7N3Wk0Gi/m34yTU=
Subject key identifier:   68:D0:45:21:E7:4A:9D:EC:7D:44:A7:66:4C:1E:70:7A:9E:69:5C:62
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       419162B5C222033F596E54769A317731025FEDC2
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/323030313a3530333a666634343a3a2f34382d3438203d3e20343031313131.roa
Signing time:             Tue 22 Oct 2024 22:51:21 +0000
ROA not before:           Tue 22 Oct 2024 22:46:21 +0000
ROA not after:            Tue 21 Oct 2025 22:51:21 +0000
asID:                     401111
IP address blocks:        2001:503:ff44::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl
                          rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
                          rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 13:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:62:b5:c2:22:03:3f:59:6e:54:76:9a:31:77:31:02:5f:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 22 22:46:21 2024 GMT
            Not After : Oct 21 22:51:21 2025 GMT
        Subject: CN=68D04521E74A9DEC7D44A7664C1E707A9E695C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:62:8f:19:ac:26:b3:dc:06:4b:b1:6b:dd:
                    3b:2f:7e:ba:e5:91:0d:e8:31:28:99:18:6a:db:1c:
                    35:a9:a2:56:5d:36:95:bc:4a:e8:08:88:71:de:b3:
                    1f:35:93:19:c3:76:bd:d1:a1:5d:e8:af:5b:79:1c:
                    9b:dc:fe:d1:4e:60:54:b5:dc:a2:1b:65:1f:cd:72:
                    77:44:d5:86:90:91:7c:4c:64:ce:7c:32:37:eb:49:
                    4b:63:23:e3:a0:9b:c5:fe:e0:a2:19:cc:ab:c7:7a:
                    ef:10:e2:ee:70:af:e8:cd:62:29:a2:37:8a:51:42:
                    58:87:3e:03:d7:9e:c8:0a:df:4b:f7:f6:7d:60:7c:
                    8f:77:ff:19:1b:22:77:8e:a1:57:d8:a2:fe:19:72:
                    46:07:37:be:9a:de:4a:56:f5:ed:c5:00:ce:05:31:
                    9f:a8:a5:6c:21:6f:41:d4:33:47:c7:c4:5a:f3:3a:
                    8d:69:17:40:a1:6f:45:66:cd:06:00:48:d2:51:ad:
                    3d:82:35:1d:a8:49:81:8b:20:68:4c:64:70:1e:d2:
                    12:9e:6d:97:83:a5:1d:73:ec:12:be:02:db:b3:e6:
                    83:2f:f4:f5:dd:03:d2:5d:c5:dc:38:a6:46:b4:3c:
                    15:c0:63:37:31:2c:fc:bc:21:74:66:89:b2:a5:bb:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:45:21:E7:4A:9D:EC:7D:44:A7:66:4C:1E:70:7A:9E:69:5C:62
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/323030313a3530333a666634343a3a2f34382d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ff44::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:0a:bc:f7:7b:1a:9f:2f:6f:36:56:fe:2a:46:8d:a8:d6:
         07:f1:e1:85:13:bf:a4:de:97:0f:3e:96:a4:7a:d1:b6:fd:bf:
         90:e1:a7:cb:14:40:6f:d1:cf:66:b9:5b:95:14:dd:9f:46:b6:
         5d:1a:ad:f6:fe:0b:e5:e8:2c:30:3d:78:28:d7:1b:c7:b0:10:
         98:f7:2b:26:e1:60:5a:fc:cf:88:5b:c7:d3:62:a8:d5:fe:db:
         c8:76:29:5b:d6:27:14:e8:49:6b:5a:83:d2:20:ce:cc:86:43:
         f7:a7:1d:0d:d1:14:91:31:e9:dd:3e:65:44:f5:1c:5c:13:9d:
         70:85:be:8e:18:55:2f:09:4d:df:2a:de:e2:1d:6f:4b:b9:b4:
         6f:06:5c:0a:17:98:e6:a5:29:c2:c3:1c:74:8b:e7:60:6b:1b:
         e1:90:08:0a:e3:d5:f9:ba:06:d5:7e:27:cd:38:4c:ee:30:54:
         c2:a9:63:6f:07:57:3c:4d:a9:1b:2e:33:6b:ca:ce:90:35:6b:
         72:3d:27:85:1b:b5:58:30:29:6f:ba:0f:39:21:27:9e:6e:50:
         04:8e:e5:39:4b:8d:ec:75:63:3a:37:fd:b9:ec:b6:4b:69:11:
         f8:92:7d:5a:e2:d1:a3:de:d9:55:58:2c:fa:72:2f:dd:fd:56:
         da:be:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 00:38:52 2024 by rpki-client on console-ams.rpki-client.org