Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          23AkSlCjQs46nRt1ZhJAviaLH5J/lQjIsN9+GxJV4ck=
Subject key identifier:   4B:D4:0F:8B:37:30:15:D5:ED:C6:39:B2:18:32:89:27:48:BB:EE:B8
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       2FA1522614F05179F80BB475ED761EFBE330BC1C
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:23:39 +0000
ROA not before:           Tue 17 Oct 2023 16:18:39 +0000
ROA not after:            Tue 15 Oct 2024 16:23:39 +0000
asID:                     945
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:52:26:14:f0:51:79:f8:0b:b4:75:ed:76:1e:fb:e3:30:bc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:18:39 2023 GMT
            Not After : Oct 15 16:23:39 2024 GMT
        Subject: CN=4BD40F8B373015D5EDC639B21832892748BBEEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7e:e6:f1:be:eb:7d:4d:09:3f:6a:8e:bb:6f:
                    93:f3:3d:c9:bf:5f:be:45:04:b5:a1:6a:0d:06:64:
                    b0:2d:15:3b:27:49:8c:48:2a:7b:b4:37:b4:56:8b:
                    9d:fa:bf:cc:da:0b:35:f0:a4:c2:5a:06:ff:ae:d1:
                    db:c8:f6:99:98:46:b1:24:ac:89:c6:e9:50:ba:7b:
                    1b:60:5e:f7:59:f9:0a:8a:a2:55:8c:ba:2b:0a:0f:
                    11:f4:04:e8:be:e4:3d:bf:7e:c2:f5:a3:ec:25:9f:
                    a0:c2:c9:24:99:84:1d:87:81:01:d1:11:f9:8c:66:
                    e5:92:e7:e6:4d:99:60:05:f0:62:b4:bd:b1:ca:cf:
                    e5:ce:db:c4:d5:c3:50:91:60:7a:4b:03:fa:34:6c:
                    d3:a4:d2:34:42:a3:10:48:a2:a1:4c:63:42:2e:99:
                    be:d3:eb:67:61:ae:38:f2:4d:f4:a7:4c:e8:c5:12:
                    1d:c2:f8:3c:78:bc:78:a7:65:60:0c:c9:34:5f:b9:
                    e5:e8:63:ee:05:05:8c:14:ad:d1:9a:d6:44:5c:9f:
                    b5:d0:cf:05:1e:d6:a2:f6:fc:b8:b6:82:ea:e0:34:
                    92:e2:ce:48:79:89:b1:48:4c:43:52:bb:ce:22:51:
                    a7:55:a9:e0:e9:89:21:f6:7f:cb:c7:50:87:18:07:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:0F:8B:37:30:15:D5:ED:C6:39:B2:18:32:89:27:48:BB:EE:B8
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/32332e3133382e3233322e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:01:bb:8b:5f:1f:ed:9e:ef:40:25:0a:15:c9:37:5b:fb:4f:
         27:e8:8c:06:f5:3e:c9:16:8e:e3:fd:9c:99:8a:6a:b5:d0:b0:
         bb:f5:ae:1d:d7:91:5c:00:61:85:02:9b:18:25:db:04:5d:88:
         de:b6:26:3e:21:81:08:a0:b6:93:c0:49:56:33:77:f0:28:6e:
         55:a6:74:55:d4:f2:e9:7e:e3:6a:55:27:a8:9a:3d:b4:c1:07:
         f8:c3:ec:b2:35:f5:eb:c2:89:b9:4a:bd:b0:a1:b2:9b:ee:2a:
         72:3f:13:44:96:ce:be:fc:26:fb:da:d1:78:d7:1d:4c:ec:32:
         8d:53:55:f5:0a:f3:17:31:42:28:97:da:cf:5b:26:c9:d3:b4:
         20:19:d5:1a:eb:11:fb:ca:b6:e2:49:a8:1b:60:eb:25:90:90:
         49:fa:73:62:c1:f8:8e:4e:b9:01:f1:89:2a:5f:27:14:bd:cd:
         6f:b7:d1:35:83:8d:10:33:5a:00:26:b5:40:24:c1:d8:c4:9b:
         8f:63:66:77:a7:11:6b:23:4c:24:ef:92:84:9c:c7:44:c6:e0:
         ac:e3:f1:87:cc:6f:10:b2:87:6a:0d:b6:28:c6:0f:91:cf:d3:
         aa:17:ba:fa:cd:4a:09:9e:94:0b:3f:a4:10:57:fa:19:51:9e:
         9b:60:42:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org