Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130362e302f32342d3234203d3e203136353039.roa
File:                     3231312e37392e3130362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          ChYOUadKkOPkyOsEvqDqF4mp00sueJFLaUXSsLjiDAw=
Subject key identifier:   4A:D1:EF:6B:02:6D:83:4D:97:80:49:26:14:1E:E7:76:23:23:65:12
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       2C92CDF802A2F8C37F2989F109DFB4432EA45E55
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130362e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 11 May 2026 17:59:03 +0000
ROA not before:           Mon 11 May 2026 17:54:03 +0000
ROA not after:            Mon 10 May 2027 17:59:03 +0000
asID:                     16509
IP address blocks:        211.79.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:92:cd:f8:02:a2:f8:c3:7f:29:89:f1:09:df:b4:43:2e:a4:5e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: May 11 17:54:03 2026 GMT
            Not After : May 10 17:59:03 2027 GMT
        Subject: CN=4AD1EF6B026D834D97804926141EE77623236512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:30:5c:5f:31:dd:e2:a9:35:83:d4:4b:d8:
                    bb:d5:0d:4d:60:84:a8:5f:46:1a:cd:22:f6:cb:e4:
                    51:f1:d4:b9:9c:e1:d4:1b:03:25:8f:2a:cf:95:87:
                    ab:ce:1d:b9:43:a6:99:4c:89:d3:82:77:c2:8c:15:
                    df:20:b3:8d:d8:46:21:8e:cd:71:90:e7:a3:1f:e5:
                    d1:a9:3d:57:d5:08:e2:88:58:88:dc:55:1c:11:53:
                    97:3c:e9:9d:15:d0:45:22:6a:db:9e:b5:bd:eb:81:
                    bb:85:06:6b:d1:89:33:4c:84:7c:c1:88:85:a1:85:
                    b3:be:25:76:98:65:af:6f:d1:69:3b:17:ad:24:84:
                    70:1f:03:da:13:25:1e:0a:af:6b:16:02:88:5f:07:
                    22:9f:01:8d:04:fc:32:ca:94:90:a0:6b:e1:9c:15:
                    46:84:7d:7a:be:48:98:58:1d:98:3e:f0:c4:7c:f1:
                    32:37:4b:9f:b2:6a:57:05:b9:e7:df:11:a9:15:c1:
                    f2:d1:13:01:3f:52:6b:22:4a:b5:a8:ec:1e:41:0f:
                    6e:af:26:ac:8a:82:81:e1:15:bd:40:8e:3f:3c:72:
                    b5:1f:f3:0d:96:3c:3b:14:6b:c8:8c:e2:c0:b0:d1:
                    e0:f0:0b:1c:8d:7f:79:39:b9:30:52:f1:ee:0f:f5:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:EF:6B:02:6D:83:4D:97:80:49:26:14:1E:E7:76:23:23:65:12
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:cd:29:d6:60:b0:62:d9:21:98:f5:29:1d:92:2f:fb:a3:ec:
         a7:0d:22:f2:ca:2c:bc:02:65:aa:a7:74:20:74:5b:74:35:63:
         fd:41:2b:08:84:a5:2c:bd:4a:a3:3f:29:29:69:3f:81:f6:5e:
         d7:e2:3b:fe:57:fe:88:12:e6:cf:9a:90:c6:e5:c6:24:05:10:
         c2:5f:e4:3e:af:5d:ba:42:a0:a6:63:f7:1a:d8:e3:2f:c4:22:
         6f:ab:66:14:3b:1f:9d:64:e5:61:e7:ae:eb:cd:1a:58:e2:1e:
         cf:1a:6d:ef:a4:bf:76:1e:32:04:5b:ec:52:0b:37:95:86:e0:
         80:14:d8:73:3a:c8:2e:94:84:70:76:04:fe:cd:a9:3d:a1:02:
         21:41:bd:c9:ac:db:78:9c:fa:ad:67:41:20:3c:a3:42:4d:86:
         a5:41:2b:30:f1:10:04:e7:8d:9f:8f:11:ce:43:06:d7:ba:d8:
         b1:8f:84:7d:0e:f0:57:aa:90:88:68:28:8e:d7:e8:b7:df:0b:
         84:53:27:a1:01:da:57:db:b6:a1:02:3f:92:9f:b5:5f:45:01:
         90:8b:e8:58:9b:3d:68:74:d2:e4:a6:6b:42:c4:f9:68:e6:b3:
         4d:d2:fe:a7:98:0d:37:74:2d:f7:13:b5:8c:d2:fe:47:ff:bf:
         0e:36:9b:be
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIULJLN+AKi+MN/KYnxCd+0Qy6kXlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0UyOURDMTVC
QzEwMTgzRjAeFw0yNjA1MTExNzU0MDNaFw0yNzA1MTAxNzU5MDNaMDMxMTAvBgNV
BAMTKDRBRDFFRjZCMDI2RDgzNEQ5NzgwNDkyNjE0MUVFNzc2MjMyMzY1MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbkDBcXzHd4qk1g9RL2LvVDU1g
hKhfRhrNIvbL5FHx1Lmc4dQbAyWPKs+Vh6vOHblDpplMidOCd8KMFd8gs43YRiGO
zXGQ56Mf5dGpPVfVCOKIWIjcVRwRU5c86Z0V0EUiatuetb3rgbuFBmvRiTNMhHzB
iIWhhbO+JXaYZa9v0Wk7F60khHAfA9oTJR4Kr2sWAohfByKfAY0E/DLKlJCga+Gc
FUaEfXq+SJhYHZg+8MR88TI3S5+yalcFueffEakVwfLREwE/UmsiSrWo7B5BD26v
JqyKgoHhFb1Ajj88crUf8w2WPDsUa8iM4sCw0eDwCxyNf3k5uTBS8e4P9VtLAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUStHvawJtg02XgEkmFB7ndiMjZRIwHwYDVR0j
BBgwFoAUKSO9lsez1LyqELqZzincFbwQGD8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUxZVElD
Uy8wLzI5MjNCRDk2QzdCM0Q0QkNBQTEwQkE5OUNFMjlEQzE1QkMxMDE4M0YuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0Uy
OURDMTVCQzEwMTgzRi5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01MWVRJQ1MvMC8zMjMxMzEyZTM3
MzkyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzNTMwMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTT2owDQYJKoZIhvcNAQELBQADggEBAA3NKdZgsGLZIZj1KR2SL/uj
7KcNIvLKLLwCZaqndCB0W3Q1Y/1BKwiEpSy9SqM/KSlpP4H2XtfiO/5X/ogS5s+a
kMblxiQFEMJf5D6vXbpCoKZj9xrY4y/EIm+rZhQ7H51k5WHnruvNGljiHs8abe+k
v3YeMgRb7FILN5WG4IAU2HM6yC6UhHB2BP7NqT2hAiFBvcms23ic+q1nQSA8o0JN
hqVBKzDxEATnjZ+PEc5DBte62LGPhH0O8FeqkIhoKI7X6LffC4RTJ6EB2lfbtqEC
P5KftV9FAZCL6FibPWh00uSma0LE+Wjms03S/qeYDTd0LfcTtYzS/kf/vw42m74=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:12 2026 by rpki-client