Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232372e302f32342d3234203d3e203134363138.roa
File:                     3130332e3132352e3232372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          ASCj8PRus0HYWwNJzl5wW8DPgY68GZzbGSNxcgLCM/0=
Subject key identifier:   0C:D7:D8:E6:42:B0:33:91:F9:54:3F:08:60:AC:9B:46:1F:9C:89:4F
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       0D38835D1C4AE7CE0526730C8A9B8DD5739726E7
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232372e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 08 Sep 2026 17:04:02 +0000
ROA not before:           Tue 08 Sep 2026 16:59:02 +0000
ROA not after:            Tue 07 Sep 2027 17:04:02 +0000
asID:                     14618
IP address blocks:        103.125.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:38:83:5d:1c:4a:e7:ce:05:26:73:0c:8a:9b:8d:d5:73:97:26:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Sep  8 16:59:02 2026 GMT
            Not After : Sep  7 17:04:02 2027 GMT
        Subject: CN=0CD7D8E642B03391F9543F0860AC9B461F9C894F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:db:80:11:55:7b:5f:14:f3:e5:b2:59:5e:
                    70:ea:32:eb:4e:56:5b:c3:d7:85:a2:7e:ea:ac:4a:
                    9d:fc:5f:56:6b:21:35:89:0c:4b:81:b7:0b:34:af:
                    8d:e9:16:97:26:85:f9:55:56:72:34:4c:3a:b1:27:
                    53:ea:56:2d:9f:b7:c0:df:73:20:9b:06:96:d0:c9:
                    d2:c9:8f:11:b4:8e:b7:63:52:bf:cf:92:78:3d:1d:
                    57:fc:a1:4e:f3:93:ca:9a:46:fe:d2:44:00:0a:9d:
                    a5:db:c8:c9:06:f8:57:05:f5:85:82:21:ca:44:7d:
                    76:73:bf:8a:8b:aa:b0:be:13:bc:02:14:54:1e:bf:
                    3f:d1:fd:80:ba:e2:ac:21:d8:95:d1:e0:70:71:f7:
                    fa:3b:01:87:32:27:02:f1:28:5e:c4:87:1e:24:a3:
                    05:8a:2f:29:93:e3:45:67:ef:12:2d:b1:ba:3c:01:
                    58:a1:d4:07:be:ac:81:f0:c4:50:ae:6b:bb:f3:a6:
                    f6:f0:18:e4:5e:a0:58:aa:5c:0b:54:9f:f1:d1:2d:
                    77:c5:62:a9:61:2d:cd:64:84:11:50:65:d7:a3:9f:
                    f4:4f:e2:5c:08:52:29:3c:3f:fa:bb:99:14:4a:80:
                    5b:96:ef:ee:a4:07:af:ab:94:b8:da:be:a4:c9:cc:
                    d7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:D8:E6:42:B0:33:91:F9:54:3F:08:60:AC:9B:46:1F:9C:89:4F
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3130332e3132352e3232372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:83:76:20:18:35:1a:c9:df:fc:3b:37:6e:3b:53:1f:71:07:
         ef:db:0a:9a:45:f6:7f:d2:31:6a:4d:14:e5:0b:e6:d1:bf:15:
         2d:77:28:e6:1f:d9:47:2e:fe:35:ab:51:03:3e:24:6d:76:92:
         71:e3:09:97:5b:b6:6e:85:09:24:25:4f:63:3b:28:95:6b:ae:
         85:40:9c:0d:29:95:7e:98:4e:4d:8c:75:12:86:b1:e6:3c:1b:
         65:61:ff:bf:04:57:ca:82:dc:0e:82:0e:94:c1:45:f0:95:c1:
         89:aa:3b:73:2b:b6:5f:e5:b5:b6:0b:3a:99:55:cd:d2:71:2e:
         76:d8:02:15:23:2b:6b:7e:10:58:29:36:3c:db:fd:dd:fc:0f:
         e7:75:9c:4c:ac:fa:3e:60:e4:c0:b2:e4:86:c8:87:6b:96:b1:
         13:c8:b0:02:ee:5c:87:12:9d:10:e7:98:1a:d1:96:8a:5e:a7:
         f5:ea:7e:e5:6c:7d:81:3e:7e:20:60:b8:60:0a:c1:8d:83:e7:
         e6:0e:aa:94:94:ee:9a:70:98:0e:8b:0d:6e:ec:12:49:f9:ba:
         be:64:54:b6:94:34:a8:2b:e3:32:04:5c:48:92:25:ad:5f:9d:
         4d:3d:6d:05:1e:c1:21:fe:c2:dc:3a:21:18:57:d6:98:84:5e:
         fd:a0:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:09 2026 by rpki-client