Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa
File:                     3130342e33372e34322e302f32332d3234203d3e20393435.roa (raw, json)
Hash identifier:          r1IapZi2dXnxzVZJN/Qhgc9lfi7VmINJK2GCQULgTBI=
Subject key identifier:   1D:2B:12:F0:DE:D3:1A:3B:BE:B7:9F:56:C0:74:FB:0F:E7:9E:9A:65
Certificate issuer:       /CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
Certificate serial:       6874030A49D2E28349C104F3407CDAACE567D801
Authority key identifier: 64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67
Authority info access:    rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
Subject info access:      rsync://dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa
Signing time:             Sun 15 Oct 2023 04:00:21 +0000
ROA not before:           Sun 15 Oct 2023 03:55:21 +0000
ROA not after:            Sun 13 Oct 2024 04:00:21 +0000
asID:                     945
IP address blocks:        104.37.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl
                          rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.mft
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 08:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:74:03:0a:49:d2:e2:83:49:c1:04:f3:40:7c:da:ac:e5:67:d8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
        Validity
            Not Before: Oct 15 03:55:21 2023 GMT
            Not After : Oct 13 04:00:21 2024 GMT
        Subject: CN=1D2B12F0DED31A3BBEB79F56C074FB0FE79E9A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:62:af:f9:e0:d0:30:b4:33:03:3c:8e:c2:
                    e2:08:0b:cd:43:7e:7c:08:cc:44:e9:f6:7d:66:71:
                    50:a0:56:24:94:9f:48:50:eb:b8:24:0f:af:50:05:
                    85:33:01:1d:ec:de:6d:9a:9b:dc:1a:ae:d5:47:95:
                    e3:61:57:1b:23:bf:f3:36:67:08:b3:21:6b:63:ac:
                    b2:3f:87:23:eb:46:64:4f:3f:95:69:f6:75:77:f6:
                    03:bf:04:76:d7:10:5a:7d:53:a0:8d:12:1a:9b:f0:
                    5d:e7:b0:10:5d:63:1f:4a:f8:12:39:cb:52:31:fe:
                    da:12:bc:97:52:41:4a:cc:96:2a:c7:06:e7:2e:e0:
                    8c:47:16:dc:34:51:ad:2d:af:f5:d5:45:ab:4a:46:
                    5a:d2:da:fa:62:c9:04:b5:7a:94:97:7f:58:63:71:
                    3a:79:a7:2d:74:ad:ec:64:f1:90:bd:ea:ce:83:bb:
                    6e:b5:91:d0:70:0f:41:5b:23:96:e6:ea:bc:3f:9a:
                    8e:0a:e8:f2:57:3d:5d:2b:8f:5f:6e:fa:aa:20:c8:
                    bc:43:f2:d7:d1:ce:2a:25:5c:13:e1:93:99:00:eb:
                    4e:68:eb:3e:5e:d6:7c:47:b4:be:35:86:ad:15:87:
                    f8:f5:e3:06:dd:90:db:b8:c5:d6:73:7d:35:4d:14:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2B:12:F0:DE:D3:1A:3B:BE:B7:9F:56:C0:74:FB:0F:E7:9E:9A:65
            X509v3 Authority Key Identifier:
                keyid:64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/12/3130342e33372e34322e302f32332d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:86:43:c3:67:f8:29:66:65:e1:04:49:6e:eb:46:e7:22:78:
         1a:44:9f:9b:97:05:25:6d:cd:7c:20:f2:d7:9f:9f:f5:7a:7c:
         aa:42:a0:94:05:7b:d7:b6:d6:9f:37:46:5a:40:38:ce:7b:4b:
         e0:e0:bb:43:56:10:65:23:44:9f:37:af:7c:54:c0:02:22:00:
         bc:22:ed:ad:2b:51:87:78:9b:25:25:2d:cf:f6:20:12:29:46:
         89:d4:d3:e6:21:69:c6:b3:ad:47:86:e9:3b:93:d5:b6:0c:6d:
         ed:13:90:90:81:20:cf:7b:6c:ff:e1:9e:7d:32:5e:00:7c:60:
         b4:93:2a:4f:ed:f3:42:27:2b:7d:84:8c:48:5e:3f:41:05:d4:
         19:5d:56:ae:49:8a:b2:c6:dc:32:f0:42:a3:3d:77:b1:dd:96:
         41:27:12:8a:6f:c1:62:89:70:2e:8d:a1:47:99:97:91:41:ef:
         63:e0:38:64:a7:30:f5:9f:b0:10:e5:46:ec:31:26:5a:3b:8b:
         dd:13:90:53:d2:26:be:d4:aa:1c:0f:da:47:5e:27:6b:5f:f2:
         37:7a:3e:46:79:a7:78:14:06:ed:c0:f3:47:a9:f2:02:e5:a1:
         c6:9b:73:ac:8b:10:86:a3:87:78:77:ba:8d:bb:28:24:7e:ea:
         f3:c2:65:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org