Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa
File:                     323630323a666266363a3a2f33322d3438203d3e20393435.roa (raw, json)
Hash identifier:          ThGh72vy5eH0BN53ZId9BZvjfznlI1amPxXSevriaH0=
Subject key identifier:   F6:2D:AA:58:1A:AE:74:E3:38:12:64:E6:53:3F:20:47:95:37:4E:18
Certificate issuer:       /CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
Certificate serial:       483BD984E8DE3873077185E987264ADE8FED72C3
Authority key identifier: D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
Subject info access:      rsync://dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:25:04 +0000
ROA not before:           Tue 17 Oct 2023 16:20:04 +0000
ROA not after:            Tue 15 Oct 2024 16:25:04 +0000
asID:                     945
IP address blocks:        2602:fbf6::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 16:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3b:d9:84:e8:de:38:73:07:71:85:e9:87:26:4a:de:8f:ed:72:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097
        Validity
            Not Before: Oct 17 16:20:04 2023 GMT
            Not After : Oct 15 16:25:04 2024 GMT
        Subject: CN=F62DAA581AAE74E3381264E6533F204795374E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0f:58:b7:c7:c9:6e:41:4f:ec:31:c8:4f:11:
                    ab:ae:56:3f:c3:f7:49:3b:bf:21:b6:11:fa:f6:4d:
                    13:27:08:cd:38:b2:d7:5b:5b:9a:4c:99:1b:f6:86:
                    3f:95:05:67:a0:c9:3a:2f:21:7c:dc:d2:1e:b6:37:
                    85:c3:c1:24:8c:55:80:31:4e:7d:0c:09:3d:da:3e:
                    50:e9:a9:5b:14:55:3f:e5:1c:7c:a5:47:57:8f:9c:
                    c2:f7:39:ca:3a:13:b3:39:c3:9a:66:71:dc:55:d5:
                    79:c2:78:2f:16:de:eb:a9:9f:23:0f:3c:3f:1f:e9:
                    95:07:e4:ce:38:a3:0d:09:4e:b7:08:93:9a:f7:18:
                    2f:1c:76:57:9c:2e:65:c4:34:39:58:c2:7e:68:63:
                    3f:1e:ef:25:d1:5f:c2:c8:7e:b5:87:7b:eb:f8:bd:
                    b8:d6:17:8a:8a:92:a2:52:cc:7f:56:e1:f3:e6:71:
                    78:9f:7d:91:2b:89:dc:55:ec:80:be:10:78:db:cf:
                    34:34:72:02:8e:55:89:7e:40:72:9c:fc:2f:de:ad:
                    72:07:42:56:56:55:d1:2b:06:36:80:c6:3d:bf:82:
                    4c:a4:89:c7:29:43:dd:80:73:c1:5d:d7:fb:8d:dd:
                    db:bb:a6:76:a6:00:24:02:01:15:0c:4f:dd:5a:90:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2D:AA:58:1A:AE:74:E3:38:12:64:E6:53:3F:20:47:95:37:4E:18
            X509v3 Authority Key Identifier:
                keyid:D4:48:BC:AD:3A:EB:3E:21:73:51:99:2B:27:E9:66:8A:A8:72:46:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/0/323630323a666266363a3a2f33322d3438203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:de:21:60:b8:c5:1f:be:59:07:57:71:fe:2d:82:8e:11:
         4c:a1:a4:16:93:66:38:c9:8d:94:03:05:c4:b8:e0:f5:5f:3a:
         6c:9e:8a:e5:32:18:35:da:36:ea:a2:ed:bd:c9:a7:f3:e0:6d:
         b6:a6:72:73:5b:5f:db:32:f9:39:75:8a:4c:2a:24:08:7a:2f:
         9c:38:17:a2:15:a3:ea:8a:0b:fb:af:7f:e6:50:b2:b2:1c:3b:
         60:bb:ae:57:1f:16:d9:89:1a:bc:c9:f6:6f:36:0e:a1:4f:39:
         a2:88:23:fd:8f:78:1c:ec:7f:a3:ed:35:ec:4c:c0:ad:fd:26:
         37:57:a1:7b:de:35:6b:3e:b3:30:28:fe:7e:0d:d1:fe:b9:78:
         e3:34:d7:2d:25:c8:2a:e7:dd:99:d3:f4:3a:2c:20:66:dc:f7:
         f3:02:11:8e:8d:09:9a:58:b3:cb:08:7d:11:16:4c:73:f9:f3:
         60:a1:54:b1:f0:69:82:5e:36:67:e4:fc:4d:99:5e:96:d3:75:
         e1:06:7e:ff:88:5a:8e:ae:5f:31:43:26:b7:34:8d:2c:75:77:
         fe:4a:cc:90:cc:cd:f3:fb:81:d4:12:81:57:c8:5f:02:89:a2:
         fe:3c:f3:f5:8a:30:aa:1c:32:8b:ce:b5:95:c4:ee:05:e2:5f:
         2c:db:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org