Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/-KwngU-KQF3v8H52WdwQUrTvEPc.roa
File:                     -KwngU-KQF3v8H52WdwQUrTvEPc.roa (raw, json)
Hash identifier:          Z6HQ64PUTsERlDxpqf2y8gtXrcx7Bcw4/GyKocpoLUM=
Subject key identifier:   F8:AC:27:81:4F:8A:40:5D:EF:F0:7E:76:59:DC:10:52:B4:EF:10:F7
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1184
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/-KwngU-KQF3v8H52WdwQUrTvEPc.roa
Signing time:             Mon 10 Feb 2025 13:57:18 +0000
ROA not before:           Mon 10 Feb 2025 13:57:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     16509
IP address blocks:        103.125.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 17:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4484 (0x1184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb 10 13:57:18 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F8AC27814F8A405DEFF07E7659DC1052B4EF10F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:92:72:09:cb:7e:38:b5:83:46:94:26:ce:
                    f8:47:1f:19:92:1d:ea:de:d8:ec:4f:e0:c9:85:3a:
                    41:41:fa:19:e6:16:83:5d:c8:99:99:61:0e:65:c0:
                    1b:c9:03:8d:08:3d:fe:b2:70:43:db:ca:90:c2:58:
                    c5:aa:3d:43:94:3a:73:62:03:c9:59:11:7e:2a:b5:
                    ff:e9:7c:2c:50:dd:3b:4e:de:57:99:53:f2:96:6b:
                    6c:68:05:2b:27:6b:a6:1c:f9:1c:5d:0c:af:83:1e:
                    78:c5:66:6c:5c:87:82:50:b6:66:a9:5d:c3:d4:bd:
                    fa:46:6f:cc:7a:b4:da:ed:07:40:76:74:27:4f:2a:
                    07:b0:f9:34:ae:4c:b5:24:4b:d9:46:82:e3:42:56:
                    29:13:18:91:3d:81:8e:2e:d2:fa:d1:1e:6a:ba:f5:
                    30:1b:75:d4:38:87:0f:3a:9e:bd:84:40:83:26:a4:
                    94:99:49:09:0a:c0:bb:43:13:06:7a:b5:c4:38:0a:
                    04:ae:c1:f6:e3:8c:ed:a7:49:7c:f2:7b:9a:86:cb:
                    f5:64:41:19:9e:0a:87:24:89:b3:d5:fb:c6:36:52:
                    ac:5d:d0:29:53:9c:e9:77:53:86:4d:cc:99:36:17:
                    c5:4d:56:a4:b2:ff:19:9f:d7:7a:9b:a9:15:da:99:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AC:27:81:4F:8A:40:5D:EF:F0:7E:76:59:DC:10:52:B4:EF:10:F7
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/-KwngU-KQF3v8H52WdwQUrTvEPc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:6e:d5:2e:1b:c5:50:8b:a5:d0:f7:08:ca:17:4a:45:2a:76:
         87:42:0c:40:f3:4f:f5:75:16:28:9f:3c:c8:36:10:8f:b1:d6:
         9d:9a:03:91:c4:30:a0:26:f9:ae:35:76:66:b5:d1:0e:ff:22:
         6e:3a:72:4f:63:71:1b:0a:2f:e0:72:ed:f4:8d:07:3c:6e:2a:
         05:d7:a2:30:a9:57:4f:62:4e:d6:90:bf:d1:8f:cb:90:83:02:
         16:58:b6:e2:83:76:c8:60:9a:73:c9:ab:74:20:9d:5c:ca:6b:
         34:4b:de:71:5e:32:d9:10:cf:bc:fd:1d:5b:52:05:97:62:bc:
         d5:2f:20:a9:ce:ad:15:de:c9:51:c6:40:99:91:f5:4d:e5:f0:
         d9:51:6c:92:06:6e:11:ba:22:35:f8:cb:4c:e4:ee:c8:c5:e3:
         61:30:7b:7e:92:c5:62:01:dc:2a:52:00:ec:83:48:3c:bd:a5:
         e4:e6:43:46:2a:b9:ac:56:6b:e4:69:87:91:e8:93:52:47:1f:
         bc:1b:cf:e0:66:f0:c7:9f:5c:53:bc:01:b2:1a:95:14:a4:63:
         56:66:c9:42:e0:d6:91:54:d8:a2:91:92:0e:b4:40:3f:ce:ec:
         12:bc:3c:cd:e2:bf:3c:4a:93:0d:f5:4f:37:8c:a2:d3:90:49:
         61:47:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:47 2025 by rpki-client