Route Origin Authorization

$ rpki-client -vvf dev.tw/rpki/August/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
File:                     32332e3135302e382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          l7lh182nytMo6pe3hGs62nJgg6klWc9BknGVVD2PHhc=
Subject key identifier:   37:DA:C0:16:5D:E2:74:97:0C:A3:AA:F0:FB:0F:C2:A7:F7:1B:8B:8C
Certificate issuer:       /CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
Certificate serial:       4DB3044549256C2BB6018AB3E028060DF5B0BF6B
Authority key identifier: 97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer
Subject info access:      rsync://dev.tw/rpki/August/9/32332e3135302e382e302f32322d3234203d3e20393435.roa
Signing time:             Tue 17 Oct 2023 16:18:21 +0000
ROA not before:           Tue 17 Oct 2023 16:13:21 +0000
ROA not after:            Tue 15 Oct 2024 16:18:21 +0000
asID:                     945
IP address blocks:        23.150.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.crl
                          rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 15:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b3:04:45:49:25:6c:2b:b6:01:8a:b3:e0:28:06:0d:f5:b0:bf:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132
        Validity
            Not Before: Oct 17 16:13:21 2023 GMT
            Not After : Oct 15 16:18:21 2024 GMT
        Subject: CN=37DAC0165DE274970CA3AAF0FB0FC2A7F71B8B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:47:8c:7c:27:91:22:27:3a:61:10:38:bc:
                    37:e5:40:9b:6f:81:fa:89:62:15:f2:c0:86:30:ab:
                    01:57:99:8e:2b:4a:68:9d:f1:cf:a1:0d:b4:86:af:
                    2a:b5:aa:ad:b9:1d:46:25:c7:c3:34:99:1a:b2:16:
                    2b:af:1c:d6:3d:78:2a:b1:e3:44:5a:c1:1d:3f:33:
                    ab:ff:43:46:be:4a:c6:c3:37:65:d0:eb:17:47:52:
                    36:19:08:d4:5d:99:20:a4:0a:8e:d3:02:fe:3a:66:
                    99:2c:3e:88:e4:90:88:2d:c2:f4:d4:13:75:74:91:
                    32:a6:35:d5:1e:96:cf:53:75:ca:c7:5f:91:c0:46:
                    e3:07:59:11:ac:e3:7a:36:d5:65:7b:c6:81:d3:cc:
                    c0:4f:2d:2e:99:78:b8:09:ed:57:39:a0:b3:30:8b:
                    2d:c5:ba:ac:ca:67:13:aa:cf:8f:30:dc:99:99:a2:
                    47:d2:05:ae:05:3e:1a:90:be:44:cc:43:27:01:64:
                    c5:20:c9:14:b7:50:10:19:6a:4a:33:76:04:c5:57:
                    81:16:7f:82:1b:42:c7:97:a6:4b:99:a8:be:c4:4c:
                    c3:1a:63:c1:fa:96:7a:9b:70:11:b0:3d:14:26:25:
                    e5:a5:c7:82:2b:88:2c:a4:96:cf:f4:3d:c1:0c:5c:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:C0:16:5D:E2:74:97:0C:A3:AA:F0:FB:0F:C2:A7:F7:1B:8B:8C
            X509v3 Authority Key Identifier:
                keyid:97:F0:EC:C3:07:F1:DF:82:8A:E1:27:E2:D0:FB:B1:34:68:3D:29:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer

            Subject Information Access:
                Signed Object - URI:rsync://dev.tw/rpki/August/9/32332e3135302e382e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:ba:fa:85:00:cc:28:b7:a3:46:03:59:03:2a:b4:2d:99:ad:
         ef:3e:b4:51:bd:7b:f4:de:96:c4:db:f8:39:79:7f:f8:54:ee:
         7e:71:f5:72:3e:20:d7:57:4a:bc:b7:4b:ef:4b:59:82:9a:bd:
         dd:5b:f3:f9:9b:b5:2c:c0:4d:b9:8b:54:fd:44:76:ff:1d:c3:
         bd:5b:77:13:4b:d6:1f:bc:6c:4b:b8:22:de:a4:ab:fb:0a:bb:
         77:ad:fe:f0:d5:57:cf:05:7a:43:19:3f:32:63:ea:c3:43:25:
         c5:e2:b2:cb:e1:b5:41:da:a9:f6:09:09:db:da:1c:46:99:1c:
         99:6f:64:2f:a1:34:24:53:f5:13:19:05:aa:82:6e:22:62:e1:
         48:02:c2:22:79:29:c0:bf:26:0b:6d:64:34:16:97:29:52:9d:
         66:01:2b:5c:84:4e:e7:48:85:e0:13:c6:65:7a:c3:3e:f0:f6:
         bf:e3:b5:ec:ad:16:2e:ba:7b:33:52:b5:fb:41:91:d7:3a:60:
         4f:a6:55:29:77:69:9c:cb:bb:9d:53:6c:23:94:4d:d5:c6:24:
         f1:8e:94:c2:48:b6:fa:0a:4f:df:1f:14:d1:a1:51:dc:0d:7c:
         83:9a:c4:89:a0:7c:29:cf:04:b0:0d:04:e1:5d:07:e4:f4:bc:
         da:f8:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:45 2024 by rpki-client on console-ams.rpki-client.org