Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203134363138.roa
File:                     3130332e3132352e3232342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          OhiRWJ13rNYRsmVbHIa6E8+lbzCAV0tOw4hoQ5IuKPc=
Subject key identifier:   AE:57:E3:72:29:1A:56:07:E1:DA:30:B8:19:A0:4D:19:9F:CA:F0:7A
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       0866B9A85F7EFB856F270CE4BEC8A0F0C0917293
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 14 Sep 2026 09:24:01 +0000
ROA not before:           Mon 14 Sep 2026 09:19:01 +0000
ROA not after:            Mon 13 Sep 2027 09:24:01 +0000
asID:                     14618
IP address blocks:        103.125.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 16:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:b9:a8:5f:7e:fb:85:6f:27:0c:e4:be:c8:a0:f0:c0:91:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Sep 14 09:19:01 2026 GMT
            Not After : Sep 13 09:24:01 2027 GMT
        Subject: CN=AE57E372291A5607E1DA30B819A04D199FCAF07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:58:bf:6d:ab:eb:4a:db:57:16:e1:8d:17:
                    61:1a:d1:38:7f:03:35:62:56:1e:4d:fc:8c:39:e0:
                    82:02:97:ef:29:68:d2:44:35:0d:80:11:4c:88:d6:
                    af:f7:35:54:db:8c:62:29:87:7f:4a:9c:4c:f5:a7:
                    ee:1f:58:a6:c4:0d:d2:65:f3:65:99:18:e4:6e:8a:
                    7a:2e:27:ad:14:89:35:24:d9:fd:e0:38:66:d9:59:
                    eb:45:0e:d5:8b:6d:b7:1d:2e:19:2f:55:b8:e3:74:
                    3c:21:e4:26:51:da:ee:85:59:06:5f:7e:dc:91:50:
                    5a:79:1c:70:5a:83:b3:df:97:8f:d4:26:67:e2:ed:
                    64:a3:d7:69:a5:07:d4:a5:7b:71:ce:23:82:7d:f0:
                    fb:0c:5d:ca:53:35:96:28:41:8d:58:10:54:7f:5d:
                    b3:00:15:73:73:1c:15:ae:ec:56:7d:22:18:45:cc:
                    20:75:e9:0f:fd:e3:2f:90:74:17:fe:58:26:19:9a:
                    54:a0:37:4d:68:cc:81:cd:88:c9:a1:a6:fd:ec:1a:
                    59:10:cb:9f:1e:9b:2a:ef:07:b7:f5:4f:e1:7c:93:
                    a1:a9:d3:10:27:2b:bb:78:e0:e6:5a:9a:5a:42:9f:
                    05:99:64:95:22:2f:68:96:0a:11:ee:89:ac:17:af:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:E3:72:29:1A:56:07:E1:DA:30:B8:19:A0:4D:19:9F:CA:F0:7A
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:ce:be:2f:80:5c:4e:a0:12:ff:67:d0:50:18:a9:54:f7:
         58:f4:46:27:1d:7d:c4:a5:57:2a:66:ef:97:a9:93:54:50:a2:
         eb:1a:e8:7c:10:1a:62:60:e1:21:ee:f7:62:6e:55:50:c5:8d:
         ae:23:a9:a6:cf:17:96:27:f9:c6:98:ab:a0:d4:79:d6:75:16:
         98:a0:56:f0:42:cd:a7:6a:06:30:26:87:53:9b:9e:08:2a:12:
         54:c0:08:c6:02:f0:86:f5:08:db:73:92:ae:76:03:2c:b7:a7:
         25:05:41:59:d0:34:75:3e:f6:80:53:44:90:90:10:01:1f:c1:
         a2:22:7d:92:eb:86:53:5c:25:b8:0d:ea:dc:17:fe:26:4e:7a:
         9c:f4:c2:20:21:32:0e:8d:78:57:b0:71:95:49:64:20:14:cb:
         e6:d0:ae:20:f1:c5:84:8d:b0:7d:68:1d:42:8b:a5:84:1c:9d:
         f6:93:76:f9:fa:e1:82:61:10:de:32:91:27:1c:0c:75:7b:16:
         ff:16:a6:16:69:c4:32:5c:65:c2:35:cb:b4:6d:3b:ac:e8:3e:
         34:15:95:e0:bd:3e:20:91:49:3e:a9:e9:53:d5:13:9f:2e:b1:
         49:b2:f8:48:ed:e9:cf:6d:3b:e3:28:6e:a9:8a:17:93:9d:2d:
         45:2c:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:09:34 2026 by rpki-client