Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
File:                     32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          Izi9S6BMgRvZACqQTWUDPmBKNInYvbaQaeVON4pVnuY=
Subject key identifier:   62:C4:7C:40:F1:19:25:BF:B2:C8:A9:34:E4:E6:2E:08:82:34:8F:9B
Certificate issuer:       /CN=1A8C29884038907EDD0174FADC751F16456E1C56
Certificate serial:       6EF0F8BCA2AB39DFDFD6182AB9BF08D09BBF6AD5
Authority key identifier: 1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56
Authority info access:    rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
Subject info access:      rsync://dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa
Signing time:             Fri 11 Oct 2024 10:04:10 +0000
ROA not before:           Fri 11 Oct 2024 09:59:10 +0000
ROA not after:            Fri 10 Oct 2025 10:04:10 +0000
asID:                     197537
IP address blocks:        23.149.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl
                          rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.mft
                          rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 13:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f0:f8:bc:a2:ab:39:df:df:d6:18:2a:b9:bf:08:d0:9b:bf:6a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A8C29884038907EDD0174FADC751F16456E1C56
        Validity
            Not Before: Oct 11 09:59:10 2024 GMT
            Not After : Oct 10 10:04:10 2025 GMT
        Subject: CN=62C47C40F11925BFB2C8A934E4E62E0882348F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:db:94:5e:ec:9c:53:70:a3:3f:27:7a:7b:
                    c5:60:0f:56:c4:72:c4:45:e7:5d:dc:b8:60:80:fb:
                    ad:c5:8d:82:b0:3f:97:1a:11:ab:e1:16:63:db:93:
                    11:f6:03:fc:61:9f:ad:a5:ba:4e:2a:36:75:69:0e:
                    fb:3a:6f:54:27:96:97:84:ef:6b:5e:e3:34:da:bf:
                    68:23:76:22:9d:35:f3:d9:ac:e4:64:9c:b5:92:e1:
                    c2:23:55:a1:f8:19:73:14:54:67:54:e3:ed:72:86:
                    97:44:8e:49:13:5e:69:99:e5:61:90:c4:4e:1a:6b:
                    d9:71:cf:ac:98:42:36:04:b8:99:70:c9:47:7a:66:
                    c0:cd:b9:21:a5:59:99:48:03:44:4a:0b:ff:96:d4:
                    8b:4c:bc:1c:ad:18:8d:a6:d0:fb:34:d8:5d:f9:2b:
                    4f:63:0e:71:64:d9:53:34:38:d4:3b:4e:a4:f6:3e:
                    a0:01:26:d5:94:02:bd:e3:a0:63:03:dd:b2:ac:16:
                    d3:56:02:6d:21:46:31:9d:81:0f:4b:e9:22:1b:02:
                    90:9d:f9:39:4c:0b:e6:9e:0c:c8:e2:e6:87:1f:1a:
                    c5:21:ec:ec:1a:6b:26:d4:7a:cc:67:f4:36:bd:90:
                    93:50:6b:ec:c0:03:06:3b:6c:14:5b:f5:eb:80:dd:
                    26:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:7C:40:F1:19:25:BF:B2:C8:A9:34:E4:E6:2E:08:82:34:8F:9B
            X509v3 Authority Key Identifier:
                keyid:1A:8C:29:88:40:38:90:7E:DD:01:74:FA:DC:75:1F:16:45:6E:1C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/AS945/2/1A8C29884038907EDD0174FADC751F16456E1C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/1A8C29884038907EDD0174FADC751F16456E1C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/AS945/2/32332e3134392e3233322e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:7f:ed:63:42:71:84:a3:37:70:a6:f4:0e:8b:54:e6:cb:
         62:62:b4:b3:63:c6:73:2e:b3:73:85:2b:53:b9:63:75:fc:a3:
         88:15:e3:05:03:10:ab:1a:c9:b2:30:8d:f5:5f:1d:fb:7a:9c:
         36:c0:7b:4f:8f:72:3a:0d:bd:ea:a2:f3:fd:90:ed:04:ce:94:
         4b:1e:f9:54:84:ed:6a:bd:a5:cf:14:f0:e5:e2:47:52:98:25:
         ee:db:b8:e0:6c:01:d2:12:e9:13:0a:07:0d:f7:7f:1a:f6:02:
         d7:71:3b:5b:58:23:d6:6b:3a:09:37:7c:94:50:8a:0c:1a:3e:
         fc:7d:2f:74:96:eb:4a:d8:da:45:a0:97:1a:e2:18:6b:49:8c:
         33:89:bd:55:ef:7e:bf:21:05:75:c9:0f:99:2a:a8:72:ec:13:
         b7:ed:fb:b6:38:06:d1:1e:6a:27:ac:9d:fd:77:a3:d1:a4:ff:
         6f:20:7f:8c:fa:7c:7a:c0:62:57:44:6b:cf:81:c1:9d:5e:a1:
         f7:2b:3b:be:6c:a7:97:1f:24:ab:46:52:93:e1:36:c6:68:03:
         3e:48:b2:66:f6:ea:fa:d5:a9:1f:d7:0a:44:eb:c1:5a:e8:5f:
         65:6c:93:59:74:95:cb:e3:de:81:22:27:66:71:84:84:f3:1a:
         4f:20:38:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 00:38:52 2024 by rpki-client on console-ams.rpki-client.org