Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          iOYCR0hVYi+urDuKn4kUikuCVlLPYqq4laexVwf+McA=
Subject key identifier:   45:16:E4:68:37:40:E1:8D:E0:97:44:82:ED:F4:C9:1F:D2:5E:AE:9E
Certificate issuer:       /CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
Certificate serial:       0939F2BDEC88C488F85D0051D214D5EB80810DA7
Authority key identifier: 47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
Subject info access:      rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa
Signing time:             Thu 03 Oct 2024 20:33:15 +0000
ROA not before:           Thu 03 Oct 2024 20:28:15 +0000
ROA not after:            Thu 02 Oct 2025 20:33:15 +0000
asID:                     401111
IP address blocks:        140.235.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl
                          rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Oct 2024 10:58:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:f2:bd:ec:88:c4:88:f8:5d:00:51:d2:14:d5:eb:80:81:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439
        Validity
            Not Before: Oct  3 20:28:15 2024 GMT
            Not After : Oct  2 20:33:15 2025 GMT
        Subject: CN=4516E4683740E18DE0974482EDF4C91FD25EAE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e7:c9:02:ae:2c:c1:13:cf:bd:bc:d7:6c:16:
                    68:bb:2f:e9:7b:fc:12:d0:82:d3:20:6e:8f:4f:35:
                    a7:de:ee:2e:7d:1e:0d:79:e0:24:4b:49:6f:fc:d3:
                    cf:15:b9:7b:53:87:87:c9:68:54:97:52:3b:a9:8a:
                    da:67:52:68:06:0c:20:c8:4e:07:2d:7f:1c:56:86:
                    ae:90:89:02:2b:a4:d0:37:ef:0b:d6:cd:75:91:bf:
                    c7:f1:30:27:4c:4d:7f:ad:d8:1e:dd:0d:56:cb:13:
                    69:54:da:6b:a5:2f:cc:49:65:e2:85:22:d9:8d:ce:
                    b4:83:92:69:65:87:a4:05:af:fe:fb:eb:16:21:90:
                    1b:71:93:77:f2:c0:30:41:ca:99:0a:07:dc:58:c2:
                    f6:af:81:43:59:54:0f:d2:b6:86:97:dd:93:e5:db:
                    e7:48:57:be:fd:98:6b:ac:a1:0d:31:3b:65:75:66:
                    ab:bb:af:f7:7d:64:51:4d:c1:22:85:ab:d6:0c:03:
                    f1:90:73:34:2c:04:0c:6a:c6:2e:61:97:9d:17:3d:
                    a5:5a:16:86:fd:a0:fe:4d:ac:d4:b3:62:fa:7e:d8:
                    90:c0:7a:7e:9f:c5:7d:84:0e:54:e0:a7:76:84:05:
                    1b:cd:a0:f4:8b:e1:ed:11:01:2f:a6:88:df:0c:27:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:E4:68:37:40:E1:8D:E0:97:44:82:ED:F4:C9:1F:D2:5E:AE:9E
            X509v3 Authority Key Identifier:
                keyid:47:2C:D8:45:9E:07:B9:6A:76:A7:0C:EB:C0:36:1E:87:90:14:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/4/3134302e3233352e3132312e302f32342d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:cd:77:3c:d9:27:4b:cb:d5:ed:85:ca:dd:77:e3:26:0e:
         6a:0a:ba:0e:ad:62:5d:92:a1:cb:39:4d:29:bf:36:d0:d4:82:
         ae:e2:3d:19:88:dc:5d:5e:2a:75:6b:f9:40:01:dd:6b:a5:2b:
         91:3a:15:c8:ee:30:73:05:87:4d:3d:7b:36:c9:9c:3d:94:fe:
         b0:3f:b2:89:e5:cf:78:08:d7:25:39:ae:51:f4:6b:b6:52:61:
         23:ea:e3:33:51:86:e5:78:e2:27:20:ca:91:34:26:c1:18:28:
         20:e3:63:fc:bc:c1:44:67:ea:5b:cf:71:a1:9c:00:b5:7b:4f:
         82:3e:d7:cb:88:f4:b2:3b:3c:4b:e8:b1:f6:27:5c:7d:cf:3b:
         8c:7d:fb:14:57:9b:0c:1b:c0:35:a9:a8:61:4c:d8:55:15:29:
         5e:dd:80:ad:93:37:5f:bb:44:3b:2b:74:1a:37:57:1f:28:61:
         2e:14:20:2e:6b:a6:05:7e:2d:b5:e7:3f:18:df:6b:19:5a:83:
         5d:e0:14:2b:da:2a:11:1c:15:07:bd:68:73:a4:e0:5d:4a:eb:
         c3:c6:b4:35:dc:6d:cd:c0:ec:a3:31:6e:af:68:77:65:bc:fa:
         f9:df:fc:07:1e:50:f3:61:8c:80:3d:09:b5:5d:75:5d:a9:c0:
         de:c8:cd:57
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUCTnyveyIxIj4XQBR0hTV64CBDacwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJl
ODljYTdiZDE4ODEyN2E0MzkwHhcNMjQxMDAzMjAyODE1WhcNMjUxMDAyMjAzMzE1
WjAzMTEwLwYDVQQDEyg0NTE2RTQ2ODM3NDBFMThERTA5NzQ0ODJFREY0QzkxRkQy
NUVBRTlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfJAq4swRPP
vbzXbBZouy/pe/wS0ILTIG6PTzWn3u4ufR4NeeAkS0lv/NPPFbl7U4eHyWhUl1I7
qYraZ1JoBgwgyE4HLX8cVoaukIkCK6TQN+8L1s11kb/H8TAnTE1/rdge3Q1WyxNp
VNprpS/MSWXihSLZjc60g5JpZYekBa/+++sWIZAbcZN38sAwQcqZCgfcWML2r4FD
WVQP0raGl92T5dvnSFe+/ZhrrKENMTtldWaru6/3fWRRTcEihavWDAPxkHM0LAQM
asYuYZedFz2lWhaG/aD+TazUs2L6ftiQwHp+n8V9hA5U4Kd2hAUbzaD0i+HtEQEv
pojfDCdHDwIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFEUW5Gg3QOGN4JdEgu30yR/S
Xq6eMB8GA1UdIwQYMBaAFEcs2EWeB7lqdqcM68A2HoeQFM+BMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3Vz
dC80LzQ3MkNEODQ1OUUwN0I5NkE3NkE3MENFQkMwMzYxRTg3OTAxNENGODEuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEz
NzIyN2U5NzFhYy83YTA1NGQxZS04MzI2LTQyYTctYjFhZC0wMmIzMDI4N2I0ODMv
NjJmM2QwYWYxNmJkMDQ2NjU0YTJjNWMwMmU4OTlkMGJlODljYTdiZDE4ODEyN2E0
MzkuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5bmM6Ly9kZXYu
dHcvcnBraS9BdWd1c3QvNC8zMTM0MzAyZTMyMzMzNTJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMDMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOt5MA0GCSqG
SIb3DQEBCwUAA4IBAQBKhc13PNknS8vV7YXK3XfjJg5qCroOrWJdkqHLOU0pvzbQ
1IKu4j0ZiNxdXip1a/lAAd1rpSuROhXI7jBzBYdNPXs2yZw9lP6wP7KJ5c94CNcl
Oa5R9Gu2UmEj6uMzUYbleOInIMqRNCbBGCgg42P8vMFEZ+pbz3GhnAC1e0+CPtfL
iPSyOzxL6LH2J1x9zzuMffsUV5sMG8A1qahhTNhVFSle3YCtkzdfu0Q7K3QaN1cf
KGEuFCAua6YFfi215z8Y32sZWoNd4BQr2ioRHBUHvWhzpOBdSuvDxrQ13G3NwOyj
MW6vaHdlvPr53/wHHlDzYYyAPQm1XXVdqcDeyM1X
-----END CERTIFICATE-----
Generated at Sun Oct 6 09:18:52 2024 by rpki-client on console-ams.rpki-client.org