Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/3231362e3134362e32382e302f32342d3234203d3e2037373139.roa
File:                     3231362e3134362e32382e302f32342d3234203d3e2037373139.roa (raw, json)
Hash identifier:          00ehijBWvaz/eYZn2OyGMM2qZ4QU0Mp2ZGRgoHsisI4=
Subject key identifier:   69:60:51:E8:70:EB:33:32:67:FF:90:53:AA:A0:0C:F1:4B:48:F2:EB
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       65E459C7D249B20DC2D17DAABB5B1A248A551430
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/3231362e3134362e32382e302f32342d3234203d3e2037373139.roa
Signing time:             Sun 10 Mar 2024 10:43:02 +0000
ROA not before:           Sun 10 Mar 2024 10:38:02 +0000
ROA not after:            Sun 09 Mar 2025 10:43:02 +0000
asID:                     7719
IP address blocks:        216.146.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e4:59:c7:d2:49:b2:0d:c2:d1:7d:aa:bb:5b:1a:24:8a:55:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Mar 10 10:38:02 2024 GMT
            Not After : Mar  9 10:43:02 2025 GMT
        Subject: CN=696051E870EB333267FF9053AAA00CF14B48F2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:b1:2e:dc:7c:d2:08:f7:c1:ae:0a:20:b9:
                    57:03:54:ae:7a:38:7f:47:09:ed:5c:2f:ea:4b:e2:
                    a1:f2:fe:8a:23:f8:82:02:03:5b:41:65:0e:72:f9:
                    a4:80:19:a5:6d:62:d9:d5:83:51:54:b5:1c:44:2c:
                    1b:7f:f5:2c:53:4a:25:28:58:be:dc:5d:11:4a:ca:
                    ef:60:de:ad:d9:87:1e:29:7e:3c:7e:59:d6:0f:29:
                    32:18:2d:4e:7b:08:ca:63:70:1a:53:0d:10:8a:46:
                    41:10:4c:93:e2:50:56:59:5c:3b:80:5d:2b:ae:6c:
                    12:d4:03:87:81:93:93:d7:cc:17:6a:e9:25:78:8f:
                    5a:38:40:60:55:59:f3:9a:e5:08:93:df:09:41:e7:
                    45:dd:15:5d:16:88:2b:53:28:bc:ce:77:20:b5:09:
                    6d:7f:9c:27:56:76:0c:06:4b:f2:16:1f:d7:5d:df:
                    68:2e:0d:f9:65:98:c8:64:79:90:f0:dc:ab:de:7f:
                    ba:0d:4e:26:ae:e3:38:ad:4c:e6:0b:8f:96:0a:25:
                    3d:38:43:1c:44:9b:62:ed:3d:07:cd:29:aa:63:1e:
                    f2:8a:f6:08:74:b0:77:f4:29:1b:58:8e:ab:53:ba:
                    b1:7d:71:7d:b2:76:14:23:91:ce:e4:d0:9a:fb:d4:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:60:51:E8:70:EB:33:32:67:FF:90:53:AA:A0:0C:F1:4B:48:F2:EB
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/3231362e3134362e32382e302f32342d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ed:92:10:1d:1b:50:8c:23:81:5a:ec:9e:97:52:4a:73:1d:
         b6:74:8c:de:54:63:66:f6:89:f6:f1:05:83:91:f0:38:39:d2:
         7b:79:8b:12:e0:b4:2d:29:80:fb:e2:90:03:3a:81:c5:c9:ce:
         c9:b7:47:e2:06:3b:89:1b:5c:67:64:eb:81:78:dc:63:94:c1:
         29:71:8c:81:30:a3:d1:5b:d6:c8:30:46:6c:68:bd:04:28:c5:
         64:6e:9d:13:b7:81:8d:8b:89:8d:04:3b:21:ea:4f:b3:24:42:
         14:8b:f6:0a:1b:bf:bc:4d:a8:2d:f2:a0:bd:bc:02:bf:57:2f:
         b1:a4:ca:4b:af:1b:59:13:a6:bb:20:5a:b5:1b:05:a5:86:fd:
         3b:e1:6e:60:bb:b6:a3:da:d5:1e:d7:ce:f8:e1:eb:31:64:de:
         ba:59:99:48:b2:6c:ed:f6:a2:bd:66:36:ce:4b:7d:13:49:28:
         09:66:f7:c1:b2:fc:48:14:54:8b:c2:8e:4c:d5:3e:1b:84:9a:
         58:78:96:49:e2:7c:84:60:4f:8c:37:09:e7:92:88:4a:b0:54:
         d9:f0:d6:47:06:4d:78:e6:34:4a:16:eb:6f:65:15:cb:9f:ee:
         61:87:f1:fa:e2:97:2e:7b:f7:b9:65:29:97:53:e0:a0:cc:1b:
         13:a6:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org