Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203136353039.roa
File:                     3130332e3132352e3232342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          Uaaj8glTt92vBChg1qAJKeMk8/i0jbLn1S5lZ1L09eI=
Subject key identifier:   B4:F0:37:F6:5D:07:3E:A6:4C:5C:02:BD:FE:40:C6:10:C2:31:BB:C8
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       5C230B40617506116B7BD0758F7D6677BBD6A12F
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 14 Sep 2026 09:24:01 +0000
ROA not before:           Mon 14 Sep 2026 09:19:01 +0000
ROA not after:            Mon 13 Sep 2027 09:24:01 +0000
asID:                     16509
IP address blocks:        103.125.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 16:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:0b:40:61:75:06:11:6b:7b:d0:75:8f:7d:66:77:bb:d6:a1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Sep 14 09:19:01 2026 GMT
            Not After : Sep 13 09:24:01 2027 GMT
        Subject: CN=B4F037F65D073EA64C5C02BDFE40C610C231BBC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:d6:78:16:b8:bc:2b:fe:c7:c9:69:72:3f:
                    e3:64:9d:c1:78:2c:c5:6e:bf:03:a7:32:3d:64:d6:
                    74:c0:71:77:2c:8d:db:78:4a:0d:f0:81:81:40:7e:
                    12:f3:9a:f5:eb:07:e9:52:a1:6c:db:31:55:67:28:
                    2e:30:e1:b1:20:5f:ec:4c:92:63:ff:66:a2:03:cd:
                    2b:0e:1f:aa:eb:f8:c7:5a:e5:93:9f:38:37:ca:e7:
                    78:39:6f:86:3e:64:46:ca:51:8f:47:16:43:2b:2a:
                    aa:70:a9:4b:d3:52:8e:1f:7c:79:72:4f:38:87:1b:
                    11:61:79:a9:60:93:de:32:01:cb:7b:57:ed:d2:74:
                    c3:79:de:ad:16:cd:07:39:9f:c3:cb:ce:82:d8:37:
                    7d:bf:a9:6d:f6:03:a3:55:04:2b:c1:65:8f:dd:4a:
                    56:62:a3:e2:b4:ab:bf:91:f6:49:c7:c5:ab:49:92:
                    20:9a:b6:f3:e8:4d:49:4c:cb:4f:8d:c4:5f:69:19:
                    c6:ca:45:45:3c:d3:35:5d:17:ca:f7:83:32:d6:d1:
                    b8:cc:8c:79:af:b3:d0:2f:bb:83:59:e6:3e:10:21:
                    d4:f2:c0:0a:0e:5a:27:ee:cc:51:2e:13:bd:12:c4:
                    96:3a:41:77:38:b9:f2:a3:18:c2:ec:d7:46:71:51:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:37:F6:5D:07:3E:A6:4C:5C:02:BD:FE:40:C6:10:C2:31:BB:C8
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e3:bc:89:ee:7d:1b:20:cc:1f:d6:fa:94:e2:8d:d1:c6:0c:
         c3:4b:b4:a6:a7:89:db:15:c6:43:8c:5d:a7:38:54:74:c5:20:
         40:59:08:75:5d:11:a0:fa:67:62:bd:a4:51:07:b5:90:e9:74:
         24:f5:b6:a2:8f:b6:f3:e3:be:bc:37:76:b9:8d:d4:7e:c8:fc:
         89:68:bd:27:02:45:64:d4:d8:26:07:08:18:5c:18:e9:8c:f6:
         68:68:bd:f0:27:45:6f:4e:2c:ce:80:b1:6d:03:4e:ae:d7:ef:
         1c:c0:76:07:c3:ad:7a:ab:bb:b5:92:3c:77:07:dd:9c:ff:57:
         ef:46:ed:27:2b:f7:46:cb:45:76:4f:c7:e0:b5:a2:c0:bd:e3:
         f7:b9:cc:d1:d7:3b:7e:11:46:c3:71:de:d4:75:8e:f5:14:af:
         f7:8a:e0:b8:dc:84:c8:44:14:61:7f:64:e8:32:bc:06:c8:b7:
         d9:a1:c0:e2:ab:b4:05:88:49:91:86:4d:c3:7e:77:60:01:51:
         48:05:9e:c8:50:d7:df:a3:ef:3e:92:f9:4e:7e:13:bf:78:33:
         8b:1f:53:13:6b:d9:1f:22:3d:14:02:63:f5:e8:17:13:c8:59:
         f3:93:32:6f:b6:8c:6f:88:a3:cd:73:32:63:04:6f:52:58:44:
         33:cb:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:09:32 2026 by rpki-client