Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/459Y0KXsXfTLiZ4zp7wAjsCF-1Q.roa
File:                     459Y0KXsXfTLiZ4zp7wAjsCF-1Q.roa (raw, json)
Hash identifier:          4FxEw0iQaAC7QsT+SYr3y/un9hRkr1C9/TpjkM6W9Bw=
Subject key identifier:   E3:9F:58:D0:A5:EC:5D:F4:CB:89:9E:33:A7:BC:00:8E:C0:85:FB:54
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1110
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/459Y0KXsXfTLiZ4zp7wAjsCF-1Q.roa
Signing time:             Mon 26 Aug 2024 05:21:08 +0000
ROA not before:           Mon 26 Aug 2024 05:21:08 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     16509
IP address blocks:        103.125.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 06:54:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4368 (0x1110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Aug 26 05:21:08 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E39F58D0A5EC5DF4CB899E33A7BC008EC085FB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5c:c5:78:dc:fd:98:53:b2:bc:7f:ee:4e:91:
                    ac:38:4d:a0:cd:22:0f:fb:65:aa:0f:32:1e:11:bb:
                    d3:f8:78:93:bd:85:66:b0:82:df:05:21:65:b1:9c:
                    eb:50:c1:89:43:e2:e0:a9:82:09:6b:12:b4:e3:5a:
                    52:98:5b:63:a5:57:75:24:f4:6d:ba:d0:f9:4d:3b:
                    73:7c:2d:4f:74:c3:71:40:5d:8a:bb:25:a0:09:91:
                    f0:f8:4f:59:cd:fe:7a:77:6a:43:1b:96:30:22:5a:
                    f6:5e:bb:3a:ae:a6:ba:71:dd:d3:00:4f:df:bb:d6:
                    c9:6f:79:55:57:54:ff:0b:86:ea:29:26:b7:73:f0:
                    19:ce:b7:0f:24:d2:e1:8c:7e:99:6d:50:90:1a:14:
                    09:00:12:52:f7:f9:c1:7c:d8:fe:fe:83:a4:ef:38:
                    1a:b1:6d:3e:b0:c8:d2:48:92:54:aa:fa:03:aa:27:
                    de:b7:f2:99:6a:ad:1b:25:01:cb:8c:0e:c9:03:85:
                    6b:06:a4:13:fb:6c:2c:48:90:d7:16:cf:b8:72:c2:
                    83:5e:3c:f1:de:92:8f:3f:35:43:1c:ea:e2:12:e4:
                    48:8a:f7:ae:a2:18:63:b1:0d:0a:89:17:56:24:c1:
                    ef:4a:70:86:e0:d0:b9:94:42:65:84:c2:05:5a:9d:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9F:58:D0:A5:EC:5D:F4:CB:89:9E:33:A7:BC:00:8E:C0:85:FB:54
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/459Y0KXsXfTLiZ4zp7wAjsCF-1Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:45:04:8a:9d:41:4c:16:35:a6:b6:8d:35:bd:93:10:fb:2f:
         67:4e:68:23:5a:bb:aa:4d:83:a2:99:88:fb:d0:c9:cb:7d:9b:
         7d:d6:a3:44:68:8e:4e:bd:35:71:29:61:43:37:ca:87:c8:e4:
         9a:8f:bd:6a:66:0a:41:1e:88:c8:be:73:32:75:2e:01:1b:1f:
         bc:af:52:44:3a:d4:31:7f:f2:82:d2:65:eb:80:96:c9:bf:11:
         c8:8c:5f:6e:a0:9c:99:99:e7:ce:d4:fd:f6:d8:f9:a0:ab:49:
         89:5f:b0:19:17:67:ea:c3:32:da:fd:62:bd:51:eb:7e:9e:7b:
         a3:5d:3d:55:3f:e6:ca:df:5f:0d:07:b5:96:66:db:c4:37:b3:
         a9:f2:16:ef:03:49:25:55:3c:bc:87:cb:aa:ef:d8:79:50:18:
         6f:26:7f:3c:67:d6:db:bc:f6:fc:b1:78:53:d2:05:e3:d9:1b:
         92:e9:64:69:28:fc:4c:29:0f:31:5d:7a:6e:13:fb:a4:23:09:
         8b:d7:4d:36:3c:f4:4b:94:05:8a:b4:5d:38:38:8c:2f:49:cd:
         af:77:9d:70:99:d0:58:b9:3e:5d:4c:78:56:2a:d8:00:c8:82:
         57:3a:f7:c2:1e:fe:79:aa:ff:33:72:a8:f3:0d:f8:de:c8:d3:
         f9:ab:c6:dd
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICERAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUx
ODEwODU5MDJGODk2Mjk0NjAyRDhCMTIxQzFFMkUyMkI1OENFNzAeFw0yNDA4MjYw
NTIxMDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzOUY1OEQwQTVFQzVE
RjRDQjg5OUUzM0E3QkMwMDhFQzA4NUZCNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwXMV43P2YU7K8f+5Okaw4TaDNIg/7ZaoPMh4Ru9P4eJO9hWaw
gt8FIWWxnOtQwYlD4uCpgglrErTjWlKYW2OlV3Uk9G260PlNO3N8LU90w3FAXYq7
JaAJkfD4T1nN/np3akMbljAiWvZeuzquprpx3dMAT9+71slveVVXVP8LhuopJrdz
8BnOtw8k0uGMfpltUJAaFAkAElL3+cF82P7+g6TvOBqxbT6wyNJIklSq+gOqJ963
8plqrRslAcuMDskDhWsGpBP7bCxIkNcWz7hywoNePPHeko8/NUMc6uIS5EiK966i
GGOxDQqJF1Ykwe9KcIbg0LmUQmWEwgVanUSJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU459Y0KXsXfTLiZ4zp7wAjsCF+1QwHwYDVR0jBBgwFoAUbhgQhZAviWKUYC2L
EhweLiK1jOcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUxZVElD
Uy9iaGdRaFpBdmlXS1VZQzJMRWh3ZUxpSzFqT2MuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL2JoZ1FoWkF2aVdLVVlDMkxFaHdlTGlLMWpPYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL01MWVRJQ1MvNDU5WTBLWHNYZlRMaVo0
enA3d0Fqc0NGLTFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGd94TANBgkqhkiG9w0BAQsFAAOCAQEAZkUEip1BTBY1praNNb2TEPsvZ05oI1q7
qk2DopmI+9DJy32bfdajRGiOTr01cSlhQzfKh8jkmo+9amYKQR6IyL5zMnUuARsf
vK9SRDrUMX/ygtJl64CWyb8RyIxfbqCcmZnnztT99tj5oKtJiV+wGRdn6sMy2v1i
vVHrfp57o109VT/myt9fDQe1lmbbxDezqfIW7wNJJVU8vIfLqu/YeVAYbyZ/PGfW
27z2/LF4U9IF49kbkulkaSj8TCkPMV16bhP7pCMJi9dNNjz0S5QFirRdODiML0nN
r3edcJnQWLk+XUx4VirYAMiCVzr3wh7+ear/M3Ko8w343sjT+avG3Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:27 2024 by rpki-client on console-fra.rpki-client.org