Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
File:                     3231362e3134362e32382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          xgh0Zr4u7ylKoBaTs/MnRfE9jGFe0ve0wh+bxWyAVc8=
Subject key identifier:   F3:1F:EF:B2:5F:CC:19:A8:06:0D:CC:FF:57:DA:63:2E:02:FD:5C:49
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       59B8AB040DC73FDA4DDB00957AEF2EB478465DEB
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:00:25 +0000
ROA not before:           Tue 17 Oct 2023 15:55:25 +0000
ROA not after:            Tue 15 Oct 2024 16:00:25 +0000
asID:                     945
IP address blocks:        216.146.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b8:ab:04:0d:c7:3f:da:4d:db:00:95:7a:ef:2e:b4:78:46:5d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Oct 17 15:55:25 2023 GMT
            Not After : Oct 15 16:00:25 2024 GMT
        Subject: CN=F31FEFB25FCC19A8060DCCFF57DA632E02FD5C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:31:65:c0:79:49:56:84:bf:40:5a:b2:3a:
                    d0:8f:b9:13:b6:2d:5c:f0:61:79:7b:e5:84:db:20:
                    20:f9:86:98:ce:d2:a5:9f:d0:63:c8:95:e4:df:bc:
                    b1:98:4d:c0:e4:71:ff:56:19:c9:79:4e:c9:18:a8:
                    e0:27:29:d4:b9:76:18:29:6c:8a:73:68:4c:63:03:
                    72:91:42:e1:9c:90:67:fc:72:69:d4:31:c3:cf:f1:
                    61:80:8d:8e:6b:54:21:8c:24:61:ae:c0:5e:7a:83:
                    90:6a:ae:0d:ad:a6:c4:ae:38:00:78:b0:2b:50:33:
                    fd:df:cf:39:6e:29:3d:c7:25:9f:a8:2e:ab:45:55:
                    83:ea:c2:9c:ab:db:d1:05:08:82:47:a8:97:6b:8e:
                    91:0e:9f:9a:2f:b5:5d:39:e8:bc:ec:7f:04:6e:eb:
                    ef:d8:6b:c0:26:dc:f2:5c:11:cd:c5:3f:a4:6b:7a:
                    e4:aa:24:f8:30:e5:f7:0a:38:70:3f:09:b5:be:eb:
                    45:8b:84:13:88:35:94:48:57:bf:1e:8c:58:b4:18:
                    79:df:fb:b0:c1:00:07:fa:da:3e:33:ce:36:32:7a:
                    28:5c:be:2d:93:4e:50:f3:84:26:c6:51:e7:c7:c6:
                    59:30:26:58:1c:4a:e4:6f:bc:c7:55:72:11:79:b2:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:EF:B2:5F:CC:19:A8:06:0D:CC:FF:57:DA:63:2E:02:FD:5C:49
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/3231362e3134362e32382e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:1f:3f:f4:28:1b:bd:61:44:16:33:f5:3b:82:56:4f:dc:
         f3:9b:de:b0:1b:9a:ce:ee:aa:70:9b:80:3a:be:50:f9:87:00:
         c4:a1:71:96:a7:72:af:9f:be:bc:53:8b:64:cb:19:3e:dd:36:
         49:ba:1f:17:56:40:da:cd:e4:6a:5d:9c:ec:a6:c1:a0:64:22:
         72:13:3e:c1:ca:60:d8:73:de:84:1b:86:0e:9f:45:17:8e:06:
         ab:cd:4c:2d:d2:df:b8:a7:01:63:57:73:3f:ad:c4:ef:80:ca:
         8b:10:02:bd:50:5d:d9:4e:4c:40:38:71:f7:dd:5f:1a:a6:0d:
         a5:fd:81:9e:8b:98:09:d5:37:42:c3:ca:5a:a6:69:d1:5d:80:
         7b:fd:ba:a3:1d:d6:bd:fe:07:ad:09:92:37:9a:2a:0e:d7:e2:
         09:c1:f9:48:02:70:15:06:29:ba:66:06:0d:2c:8c:76:65:9d:
         ea:1f:83:1c:e0:9f:1d:08:6d:96:57:2a:2f:e3:d6:33:59:2f:
         3d:17:15:38:db:9b:c0:9d:5e:8c:17:fe:ab:64:a4:b2:ce:37:
         8a:a6:9a:59:61:12:da:54:57:c0:51:f1:06:11:fe:04:ac:5e:
         47:e0:d7:65:3c:0a:1c:0f:00:ea:d9:70:c0:43:fa:3b:16:e0:
         79:66:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org