Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130372e302f32342d3234203d3e203134363138.roa
File:                     3231312e37392e3130372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          tiSqL0IOQjGeCstsQvk72XZA3gPu7Rsw7DPWZiQxvx0=
Subject key identifier:   E1:60:2E:25:68:9C:7E:ED:31:83:FB:B1:6F:9E:DB:E9:E0:B0:54:61
Certificate issuer:       /CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
Certificate serial:       5450F2E417D69261EBD0B1156F7FAD8DD774B19E
Authority key identifier: 29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130372e302f32342d3234203d3e203134363138.roa
Signing time:             Sat 15 Aug 2026 00:44:00 +0000
ROA not before:           Sat 15 Aug 2026 00:39:00 +0000
ROA not after:            Sat 14 Aug 2027 00:44:00 +0000
asID:                     14618
IP address blocks:        211.79.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl
                          rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 02:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:50:f2:e4:17:d6:92:61:eb:d0:b1:15:6f:7f:ad:8d:d7:74:b1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F
        Validity
            Not Before: Aug 15 00:39:00 2026 GMT
            Not After : Aug 14 00:44:00 2027 GMT
        Subject: CN=E1602E25689C7EED3183FBB16F9EDBE9E0B05461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:09:8a:50:59:a2:7f:df:7b:d3:ef:73:bd:
                    ee:6d:fb:25:7e:ed:06:d6:37:1f:5d:33:79:db:30:
                    92:c9:78:3f:53:a1:dc:db:9f:74:47:96:ff:55:5a:
                    84:23:c2:56:35:32:7a:58:8a:79:82:e2:67:74:2e:
                    81:ff:98:f1:a8:e3:7b:16:78:9a:4e:a0:c6:b5:bc:
                    da:de:3f:79:11:0e:35:89:70:31:60:86:29:97:83:
                    3d:70:b6:71:9c:23:6e:87:6f:2e:87:f6:56:06:17:
                    11:30:bc:4d:12:01:c4:37:7a:93:9e:28:54:d6:ba:
                    8e:b3:89:b6:ca:86:c4:c8:d0:3f:82:bd:9e:4f:a6:
                    9e:9d:3b:87:5d:ed:ba:50:92:bd:fe:ee:a4:b1:9a:
                    fe:e8:8b:68:9f:33:99:29:e9:59:9c:7d:ec:38:91:
                    f8:21:41:cb:7e:d9:88:3c:d1:c9:46:87:ca:c9:99:
                    84:55:bc:ea:83:4f:12:cc:17:bb:7f:da:03:31:b6:
                    d9:1f:23:a8:93:df:be:24:0b:f3:94:43:10:b2:ed:
                    2e:0c:ad:8b:87:5c:3a:44:72:1c:94:d5:6f:46:67:
                    86:8c:5a:58:26:64:99:e7:48:03:18:53:d2:09:d5:
                    5b:12:c9:e4:d0:8e:e2:92:72:01:c5:07:30:c0:e3:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:2E:25:68:9C:7E:ED:31:83:FB:B1:6F:9E:DB:E9:E0:B0:54:61
            X509v3 Authority Key Identifier:
                keyid:29:23:BD:96:C7:B3:D4:BC:AA:10:BA:99:CE:29:DC:15:BC:10:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2923BD96C7B3D4BCAA10BA99CE29DC15BC10183F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MLYTICS/0/3231312e37392e3130372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:94:98:98:8a:a2:74:7f:86:68:de:32:08:96:80:6c:58:d3:
         09:5c:e8:6a:d7:d0:f2:95:80:e1:91:ce:98:29:be:76:43:9e:
         7b:61:15:12:cd:76:91:c3:96:ff:cc:db:8b:6c:2f:46:91:4a:
         8b:b0:04:80:5c:0d:9b:cd:ff:bc:1a:9f:a5:04:e1:f4:95:5c:
         96:ff:bd:d8:9c:4f:ad:a0:56:2f:80:5f:8e:b2:6e:fe:4b:c1:
         b3:c2:5a:78:3c:45:a0:01:31:47:14:e5:19:c5:17:5a:61:1b:
         fc:47:82:cd:3a:28:88:e0:af:76:71:41:a3:05:c9:26:9c:69:
         15:05:ce:04:35:12:13:5d:d2:69:37:19:2e:75:c9:26:f4:e1:
         f7:d3:bb:15:06:61:7a:77:06:d4:33:d3:83:4e:10:35:43:a2:
         2a:92:ea:80:b6:37:ae:50:bf:28:73:9f:ea:8e:7a:ab:3c:cb:
         02:3b:8b:a2:76:04:43:fc:41:3d:b4:da:36:36:58:f1:36:c8:
         5d:87:74:4e:d5:50:1b:f6:7d:26:b3:02:a5:26:34:4d:a8:42:
         7f:d7:c4:c5:88:33:78:e1:10:ed:a4:7b:fa:c6:d5:a5:8f:4a:
         6b:22:aa:21:77:8c:44:5f:51:ce:fb:bd:21:3c:de:1d:fa:c8:
         d4:cd:24:c5
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUVFDy5BfWkmHr0LEVb3+tjdd0sZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0UyOURDMTVC
QzEwMTgzRjAeFw0yNjA4MTUwMDM5MDBaFw0yNzA4MTQwMDQ0MDBaMDMxMTAvBgNV
BAMTKEUxNjAyRTI1Njg5QzdFRUQzMTgzRkJCMTZGOUVEQkU5RTBCMDU0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdAmKUFmif9970+9zve5t+yV+
7QbWNx9dM3nbMJLJeD9Todzbn3RHlv9VWoQjwlY1MnpYinmC4md0LoH/mPGo43sW
eJpOoMa1vNreP3kRDjWJcDFghimXgz1wtnGcI26Hby6H9lYGFxEwvE0SAcQ3epOe
KFTWuo6zibbKhsTI0D+CvZ5Ppp6dO4dd7bpQkr3+7qSxmv7oi2ifM5kp6Vmcfew4
kfghQct+2Yg80clGh8rJmYRVvOqDTxLMF7t/2gMxttkfI6iT374kC/OUQxCy7S4M
rYuHXDpEchyU1W9GZ4aMWlgmZJnnSAMYU9IJ1VsSyeTQjuKScgHFBzDA4yIhAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU4WAuJWicfu0xg/uxb57b6eCwVGEwHwYDVR0j
BBgwFoAUKSO9lsez1LyqELqZzincFbwQGD8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUxZVElD
Uy8wLzI5MjNCRDk2QzdCM0Q0QkNBQTEwQkE5OUNFMjlEQzE1QkMxMDE4M0YuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjkyM0JEOTZDN0IzRDRCQ0FBMTBCQTk5Q0Uy
OURDMTVCQzEwMTgzRi5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01MWVRJQ1MvMC8zMjMxMzEyZTM3
MzkyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjMxMzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTT2swDQYJKoZIhvcNAQELBQADggEBABWUmJiKonR/hmjeMgiWgGxY
0wlc6GrX0PKVgOGRzpgpvnZDnnthFRLNdpHDlv/M24tsL0aRSouwBIBcDZvN/7wa
n6UE4fSVXJb/vdicT62gVi+AX46ybv5LwbPCWng8RaABMUcU5RnFF1phG/xHgs06
KIjgr3ZxQaMFySacaRUFzgQ1EhNd0mk3GS51ySb04ffTuxUGYXp3BtQz04NOEDVD
oiqS6oC2N65Qvyhzn+qOeqs8ywI7i6J2BEP8QT202jY2WPE2yF2HdE7VUBv2fSaz
AqUmNE2oQn/XxMWIM3jhEO2ke/rG1aWPSmsiqiF3jERfUc77vSE83h36yNTNJMU=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:14 2026 by rpki-client