Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/6/32332e3133392e34302e302f32332d3234203d3e20393435.roa
File:                     32332e3133392e34302e302f32332d3234203d3e20393435.roa (raw, json)
Hash identifier:          Me4hJTOHV0ZUI9qIX4pynUI+K+8x/OUDKDp57y/0dtA=
Subject key identifier:   CC:4B:53:62:08:A1:11:39:E0:5D:B5:2E:9E:AC:DF:64:D5:4A:41:B2
Certificate issuer:       /CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
Certificate serial:       78EB815810A24684B4D52AC1D8E03BCA0B1F619C
Authority key identifier: B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
Subject info access:      rsync://dev.tw/rpki/August/6/32332e3133392e34302e302f32332d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:23:25 +0000
ROA not before:           Tue 17 Oct 2023 16:18:25 +0000
ROA not after:            Tue 15 Oct 2024 16:23:25 +0000
asID:                     945
IP address blocks:        23.139.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:81:58:10:a2:46:84:b4:d5:2a:c1:d8:e0:3b:ca:0b:1f:61:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b
        Validity
            Not Before: Oct 17 16:18:25 2023 GMT
            Not After : Oct 15 16:23:25 2024 GMT
        Subject: CN=CC4B536208A11139E05DB52E9EACDF64D54A41B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:f3:c3:41:6b:e2:2b:f3:3b:e7:5a:2d:85:
                    6b:51:9a:07:61:4e:e0:1a:65:40:b8:da:d4:6a:f0:
                    03:b5:13:aa:5d:6e:f8:6d:71:4f:fc:b9:a1:c9:8e:
                    e1:0c:7c:d5:d5:8e:a9:4e:90:f3:e5:74:5d:47:a1:
                    42:76:ae:33:7f:15:30:1e:5b:a2:c7:69:c9:6c:83:
                    5c:ea:fa:b0:4a:8c:d8:fc:75:3f:aa:02:9e:7d:47:
                    6e:92:70:99:5a:7e:11:d2:da:e4:5a:9c:dc:22:0f:
                    da:2f:f9:d0:bf:be:09:76:5d:f5:35:4b:26:6f:5d:
                    fd:03:4c:38:2f:07:13:3d:21:cc:52:f7:f2:6f:ff:
                    0f:ca:24:b6:fd:c8:36:0a:10:22:d0:8b:dd:58:a5:
                    37:25:9d:81:a9:66:67:22:62:b5:bd:34:a8:63:c4:
                    24:de:3c:57:cb:3e:5e:30:32:38:8f:4c:ae:5d:7c:
                    07:74:06:33:f3:97:c6:2c:c9:15:c3:4b:58:87:6a:
                    7f:12:75:3a:af:0e:40:af:ab:cc:97:3a:c6:9d:4a:
                    c6:33:2a:2a:4a:6a:27:c5:01:fe:24:8e:d3:bb:1c:
                    80:c9:97:1d:bc:7f:e3:db:5b:f3:61:17:59:e6:f7:
                    a6:74:ff:85:30:8c:c5:17:4c:e9:ef:54:c7:9d:d1:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4B:53:62:08:A1:11:39:E0:5D:B5:2E:9E:AC:DF:64:D5:4A:41:B2
            X509v3 Authority Key Identifier:
                keyid:B1:DC:B0:69:96:94:86:DE:58:88:C9:BE:3A:E4:FB:7C:02:5B:DE:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/6/32332e3133392e34302e302f32332d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:93:7c:8e:ea:ba:9c:eb:5a:f2:81:91:de:5c:7b:66:72:fb:
         8e:5f:cd:66:07:86:68:13:30:15:7e:c3:1f:12:47:35:91:e0:
         1c:69:7e:d6:f6:04:85:b1:88:fc:87:c0:18:42:6d:71:7b:fb:
         f0:e5:1f:11:f9:e8:2d:ed:e4:07:26:0f:34:c3:ff:09:85:f8:
         83:a1:2a:7b:41:cc:7e:3f:dc:1b:7b:75:0d:a5:03:51:4d:25:
         75:5e:82:66:e6:1e:86:85:07:ed:ac:52:7c:87:f4:d9:78:48:
         cc:f5:5e:c8:bf:79:20:1c:74:32:1f:6f:79:16:9b:5f:e0:c4:
         8d:c2:71:e0:9f:19:f8:0d:b1:b4:75:db:6a:db:8f:73:f6:55:
         47:4a:2a:12:aa:4d:9a:fc:18:0f:b2:27:e5:0a:e7:3c:4e:ec:
         d4:f5:d1:82:ad:e2:fe:33:83:28:16:33:48:bd:af:41:5c:59:
         4d:f3:c0:a0:e1:14:cb:6c:4e:57:c6:05:5e:5c:6f:53:d3:9c:
         87:f3:3c:8c:5f:3f:11:ff:5a:7b:67:46:e5:01:1f:b9:62:76:
         e7:ad:11:09:54:85:5c:98:6a:0d:b7:80:70:5e:2e:69:5e:2a:
         61:77:e4:15:b6:ff:96:bb:ab:1a:17:48:a3:bd:69:e5:45:39:
         f0:6e:18:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:42 2024 by rpki-client on console-fra.rpki-client.org