Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232352e302f32342d3234203d3e203134363138.roa
File:                     3130332e3132352e3232352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          xmzSPnnf97fXex+jItEPgl5QnYbV8QhLwbj3PIn3Cf4=
Subject key identifier:   56:CD:A6:26:FF:AF:FD:34:B8:21:BA:55:73:72:4C:E9:34:15:C0:D4
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       3B3350B069A7B4F835B4B530E6F52C19CFA34D1F
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232352e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 08 Sep 2026 17:04:00 +0000
ROA not before:           Tue 08 Sep 2026 16:59:00 +0000
ROA not after:            Tue 07 Sep 2027 17:04:00 +0000
asID:                     14618
IP address blocks:        103.125.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:33:50:b0:69:a7:b4:f8:35:b4:b5:30:e6:f5:2c:19:cf:a3:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Sep  8 16:59:00 2026 GMT
            Not After : Sep  7 17:04:00 2027 GMT
        Subject: CN=56CDA626FFAFFD34B821BA5573724CE93415C0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:1b:b9:31:17:8d:bf:25:71:63:45:e4:f7:
                    53:bd:97:f1:c7:4b:76:5d:99:a1:6c:d9:e6:07:97:
                    1b:81:3a:43:51:35:a3:dc:e6:3b:10:b7:f7:39:16:
                    16:31:3f:51:ae:f3:1a:eb:b0:87:98:13:7a:56:63:
                    e9:2c:a2:4d:fa:fb:34:c3:13:18:b9:f4:5c:37:9e:
                    04:fe:dc:7c:9d:fd:b8:c4:40:4f:34:8c:25:17:38:
                    87:17:3f:c4:f2:f4:69:a3:fb:bd:8f:d3:9e:c0:54:
                    04:c9:9a:71:e0:4d:1a:5b:f0:1b:a9:1b:00:36:5c:
                    36:f2:bb:b9:a5:f6:bd:36:0c:86:6e:2b:25:71:f4:
                    88:c2:e6:6e:21:a7:5d:c7:9f:7b:76:f6:a5:b1:b5:
                    91:af:6e:4e:a5:bd:76:34:f3:66:fa:cd:37:fa:2f:
                    2e:17:04:c5:25:08:73:8b:3a:44:f2:c4:7b:4f:54:
                    51:7d:f6:47:56:c3:d5:cb:6f:0f:2e:ed:2c:0f:18:
                    d1:b3:36:54:45:03:da:bf:c7:e2:30:bb:f2:5d:a1:
                    2b:37:6b:5d:95:80:ee:a5:c1:af:20:48:c9:cb:95:
                    8c:ff:2c:8a:b8:a6:c8:65:20:f8:65:6b:60:60:2d:
                    3c:b5:c0:5f:3d:84:dd:3a:23:47:24:28:58:b1:4b:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:A6:26:FF:AF:FD:34:B8:21:BA:55:73:72:4C:E9:34:15:C0:D4
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232352e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:ec:f7:da:61:9a:cb:a2:4a:73:86:5b:32:ef:62:ef:43:
         31:37:43:fd:72:d2:16:bf:6e:92:05:c8:77:28:7d:d9:9e:97:
         b3:36:73:ab:19:59:77:33:eb:ec:e3:0f:72:f5:95:0c:24:ed:
         1b:d4:d5:41:06:1f:70:45:b5:45:e4:19:83:ae:91:41:d9:01:
         ea:b2:d4:38:e6:7a:fd:25:53:74:aa:d7:d3:55:e2:b0:2c:6a:
         eb:01:1a:53:b6:52:96:41:a8:4c:69:72:45:83:81:e9:a8:5e:
         8b:18:26:04:73:38:9e:e3:03:f5:a5:75:b6:ac:b0:b1:66:80:
         5a:52:46:44:a3:63:d3:01:59:48:04:12:cc:1f:d6:08:69:00:
         f8:87:45:b4:6a:6b:7b:42:29:63:76:c4:ac:84:42:a1:f0:1d:
         56:52:19:58:16:77:8d:03:5a:cb:14:62:3c:2f:f4:17:ad:08:
         59:e1:4a:71:f2:04:c3:ff:ac:64:a2:a9:56:95:3d:af:83:bd:
         54:52:0b:f1:84:ff:55:d2:d7:ef:48:16:03:06:9c:8f:ee:62:
         81:b5:55:bf:a1:25:77:51:b2:eb:ae:ac:14:48:81:1f:31:3c:
         81:bf:08:aa:d3:7a:24:23:6e:0a:e2:35:6a:65:ed:09:c5:93:
         83:0b:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:11 2026 by rpki-client