Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          pvhn/11vbEfPYQeIZWX0lKagdht/Hhql1nvHB5jhlaQ=
Subject key identifier:   BA:D5:38:23:9E:21:AE:84:C8:0C:52:76:80:58:DB:4D:2B:DB:3E:FC
Certificate issuer:       /CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
Certificate serial:       7E553A54D084AF665EA85417543DD572E9C1B5C5
Authority key identifier: 47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
Subject info access:      rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:24:05 +0000
ROA not before:           Tue 17 Oct 2023 16:19:05 +0000
ROA not after:            Tue 15 Oct 2024 16:24:05 +0000
asID:                     945
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:55:3a:54:d0:84:af:66:5e:a8:54:17:54:3d:d5:72:e9:c1:b5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504
        Validity
            Not Before: Oct 17 16:19:05 2023 GMT
            Not After : Oct 15 16:24:05 2024 GMT
        Subject: CN=BAD538239E21AE84C80C52768058DB4D2BDB3EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:61:0c:96:c7:4c:28:51:da:8b:c0:8c:3b:
                    d3:97:27:39:7f:e7:4f:73:6c:7d:ff:9b:ba:75:02:
                    d9:6b:5f:2f:91:21:4c:46:42:70:9e:00:70:fe:6a:
                    56:8e:63:50:f3:0b:2e:cd:25:e6:4f:04:65:3f:82:
                    4b:be:b0:e4:ae:98:71:15:a9:d5:54:34:95:27:d9:
                    56:65:34:3a:77:cd:98:55:64:57:92:6f:4f:66:60:
                    d7:19:bd:c9:05:b1:5a:32:14:f4:0d:ac:1b:14:92:
                    3a:8c:0e:8d:da:51:67:b6:72:85:2e:db:d1:ea:4f:
                    75:66:e4:af:f9:a3:ab:12:22:76:37:ff:e7:9c:b5:
                    81:55:94:42:c2:8d:11:77:d5:b9:ec:d2:fc:82:25:
                    d1:a2:c9:1f:53:6a:f0:ba:b6:c5:a8:05:9a:bd:0b:
                    cb:10:0d:9c:56:9f:0c:73:db:e9:77:2d:9b:e8:f5:
                    2a:5b:87:ae:2b:0b:d7:81:0d:95:fb:2c:71:d1:11:
                    f5:6a:aa:b0:8c:24:41:51:9e:38:a4:31:8b:4b:bf:
                    49:be:b9:ea:eb:2d:97:04:3e:2a:d8:3d:d2:83:fa:
                    e4:b0:4c:da:63:16:b7:1a:ff:f1:47:bb:c7:45:05:
                    b0:85:b4:46:94:e8:a9:ac:b7:a2:02:2c:78:86:e4:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D5:38:23:9E:21:AE:84:C8:0C:52:76:80:58:DB:4D:2B:DB:3E:FC
            X509v3 Authority Key Identifier:
                keyid:47:C7:20:D8:09:18:A7:69:C2:CF:D8:42:7C:33:4E:AE:64:83:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/8/32332e3134392e3234382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:c5:e3:47:02:96:5e:fa:39:48:11:1e:7b:47:f6:5e:7b:02:
         25:03:db:0e:51:ce:76:a1:59:bd:8c:4f:34:99:4a:17:94:b8:
         dd:92:58:b8:51:ac:97:17:91:c0:72:09:ee:8b:2d:f9:79:ac:
         ab:f9:73:60:78:bd:bf:7c:77:80:fa:b5:fe:f7:10:e8:a0:52:
         21:97:9f:c6:4f:7b:8d:e0:89:b4:e6:d5:17:e5:9d:7e:4b:af:
         c1:83:74:62:fd:fb:01:4b:ee:d4:3f:52:06:9b:be:de:09:a6:
         29:ac:aa:92:b9:e3:01:0d:b3:80:34:a9:d8:62:f7:79:3c:3f:
         3d:60:6c:04:e3:2a:25:84:8c:d8:25:eb:5e:d2:d4:b1:bc:ad:
         8c:72:1f:39:d9:80:e9:a0:4f:a3:bb:3a:5a:a8:cd:a9:fe:ea:
         86:12:73:fe:65:3f:d9:34:ae:43:a7:61:73:de:7c:98:66:c2:
         43:d1:4a:c9:9d:ac:69:69:a2:76:04:33:19:21:6c:fe:0a:7f:
         1e:fc:d5:86:de:0d:32:57:f9:54:af:23:b8:96:55:07:0e:0f:
         f1:8b:80:c2:1f:32:d5:69:2c:33:0b:cc:c0:ad:41:22:43:9f:
         56:0d:01:2f:26:cf:f5:c4:94:25:7d:fe:af:42:60:af:cb:d4:
         1a:df:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:28:48 2024 by rpki-client on console-fra.rpki-client.org