Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232362e302f32342d3234203d3e203134363138.roa
File:                     3130332e3132352e3232362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          YN8Imwx/gIzv/r8D4hYzumkr0gYcwo3CDYDJov/9hTE=
Subject key identifier:   B9:2D:97:A0:A8:50:64:AC:60:64:37:1A:CA:65:F3:BB:6B:7B:26:E1
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       46610D5B2651B29F6ABC1F89693F69EE51D5FA0C
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 08 Sep 2026 17:04:01 +0000
ROA not before:           Tue 08 Sep 2026 16:59:01 +0000
ROA not after:            Tue 07 Sep 2027 17:04:01 +0000
asID:                     14618
IP address blocks:        103.125.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:61:0d:5b:26:51:b2:9f:6a:bc:1f:89:69:3f:69:ee:51:d5:fa:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Sep  8 16:59:01 2026 GMT
            Not After : Sep  7 17:04:01 2027 GMT
        Subject: CN=B92D97A0A85064AC6064371ACA65F3BB6B7B26E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:b3:f4:0f:fe:d5:5f:99:5c:37:62:79:f3:
                    4d:22:9f:9c:b4:b0:ee:7c:44:33:27:e0:f4:09:2f:
                    ee:e6:4c:9f:ed:f0:43:03:a2:2d:9b:42:00:d0:42:
                    ac:67:f7:15:5e:5f:f2:86:10:72:cb:1c:89:de:5c:
                    9d:04:14:68:55:16:f4:58:fe:4b:9b:0d:0c:9e:08:
                    7d:98:30:24:5a:16:96:bb:5b:83:18:0d:0e:71:65:
                    c6:94:0e:81:23:91:94:61:79:ff:2c:28:07:48:b3:
                    1d:b3:9b:c5:37:e6:c3:b5:fe:c6:50:5f:60:4e:77:
                    48:a2:e6:e0:f4:f9:bc:b3:48:55:6c:76:ca:1f:c6:
                    ba:2b:57:a5:41:a0:97:70:01:74:1b:38:e2:5d:23:
                    7d:c0:05:8f:40:d7:80:ab:25:6e:82:a3:35:55:23:
                    ff:00:e2:cb:74:8b:52:cd:64:a3:a1:f4:81:d2:f4:
                    90:59:ef:f2:f5:6b:26:be:e4:75:5c:e3:ee:73:98:
                    68:52:93:f3:da:0e:e6:1b:76:00:52:4c:66:53:f6:
                    53:74:94:9d:61:4c:1f:5a:e3:b3:e8:4a:c5:a0:3c:
                    f2:64:e5:bc:fa:f7:00:f1:e3:50:65:6a:40:04:3d:
                    84:d6:c8:cd:1a:87:52:e9:ae:be:5d:bb:84:e4:7f:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:97:A0:A8:50:64:AC:60:64:37:1A:CA:65:F3:BB:6B:7B:26:E1
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:4f:1f:d7:27:1c:14:f2:9b:2d:94:4b:12:5e:c5:bc:0b:56:
         ba:1a:b0:d9:28:2c:64:9a:42:e1:e8:8e:fe:7d:47:8a:2d:ef:
         17:c3:0f:ca:cb:b5:f3:48:11:6d:0a:3d:94:a0:e9:47:74:dd:
         1d:c8:fe:71:c7:45:c7:dc:e2:b4:e4:27:3b:bc:2c:1a:c6:ca:
         42:ef:4b:48:2c:e0:f3:3c:bc:e8:a9:4c:ea:ff:0a:76:86:4d:
         32:73:d0:bf:2e:eb:d3:5a:37:7e:52:a4:70:b9:14:28:01:d4:
         db:f3:7c:31:85:66:06:00:ca:bf:69:f8:ca:bf:d3:f4:64:4b:
         a2:84:e1:f7:30:29:4f:a2:24:23:ba:de:83:8a:ad:94:c8:ec:
         42:6b:35:82:d8:7c:f4:b8:4b:65:8b:78:de:13:05:01:ba:b4:
         ce:43:7a:e9:23:93:69:86:d2:ba:bc:04:a0:ab:10:5b:3f:70:
         24:02:e1:f7:c2:0d:f5:c8:f6:d0:4e:4f:12:c4:d0:64:5a:a2:
         72:b1:6d:e4:bb:8d:0d:6e:64:23:ba:1b:5f:c8:74:d1:e9:0c:
         14:01:ff:c0:36:8d:a9:16:6e:aa:22:5e:0c:f5:02:d2:33:d7:
         c5:bc:3c:88:df:e7:0c:32:ee:d3:38:23:22:9c:0b:35:cd:bc:
         64:c6:12:63
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIURmENWyZRsp9qvB+JaT9p7lHV+gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0UyOURDMTVC
QzEwMTgzRjAeFw0yNjA5MDgxNjU5MDFaFw0yNzA5MDcxNzA0MDFaMDMxMTAvBgNV
BAMTKEI5MkQ5N0EwQTg1MDY0QUM2MDY0MzcxQUNBNjVGM0JCNkI3QjI2RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKbP0D/7VX5lcN2J5800in5y0
sO58RDMn4PQJL+7mTJ/t8EMDoi2bQgDQQqxn9xVeX/KGEHLLHIneXJ0EFGhVFvRY
/kubDQyeCH2YMCRaFpa7W4MYDQ5xZcaUDoEjkZRhef8sKAdIsx2zm8U35sO1/sZQ
X2BOd0ii5uD0+byzSFVsdsofxrorV6VBoJdwAXQbOOJdI33ABY9A14CrJW6CozVV
I/8A4st0i1LNZKOh9IHS9JBZ7/L1aya+5HVc4+5zmGhSk/PaDuYbdgBSTGZT9lN0
lJ1hTB9a47PoSsWgPPJk5bz69wDx41BlakAEPYTWyM0ah1Lprr5du4Tkf5cNAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUuS2XoKhQZKxgZDcaymXzu2t7JuEwHwYDVR0j
BBgwFoAUKSO9lsez1LyqELqZzincFbwQGD8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUxZVElD
Uy8wLzI5MjNCRDk2QzdCM0Q0QkNBQTEwQkE5OUNFMjlEQzE1QkMxMDE4M0YuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0Uy
OURDMTVCQzEwMTgzRi5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01MWVRJQ1MvMC8zMTMwMzMyZTMx
MzIzNTJlMzIzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM2MzEzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd94jANBgkqhkiG9w0BAQsFAAOCAQEAwk8f1yccFPKbLZRLEl7F
vAtWuhqw2SgsZJpC4eiO/n1Hii3vF8MPysu180gRbQo9lKDpR3TdHcj+ccdFx9zi
tOQnO7wsGsbKQu9LSCzg8zy86KlM6v8KdoZNMnPQvy7r01o3flKkcLkUKAHU2/N8
MYVmBgDKv2n4yr/T9GRLooTh9zApT6IkI7reg4qtlMjsQms1gth89LhLZYt43hMF
Abq0zkN66SOTaYbSurwEoKsQWz9wJALh98IN9cj20E5PEsTQZFqicrFt5LuNDW5k
I7obX8h00ekMFAH/wDaNqRZuqiJeDPUC0jPXxbw8iN/nDDLu0zgjIpwLNc28ZMYS
Yw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:13 2026 by rpki-client