Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/eJMtLY15VyCxbYcYILDjnY-2Fis.roa
File:                     eJMtLY15VyCxbYcYILDjnY-2Fis.roa (raw, json)
Hash identifier:          jV61P/LzPLSzmtskMtGhXBaRjAq4yuDMYLudrY94GxE=
Subject key identifier:   78:93:2D:2D:8D:79:57:20:B1:6D:87:18:20:B0:E3:9D:8F:B6:16:2B
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       106F
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/eJMtLY15VyCxbYcYILDjnY-2Fis.roa
Signing time:             Tue 06 Feb 2024 09:40:29 +0000
ROA not before:           Tue 06 Feb 2024 09:40:29 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     16509
IP address blocks:        103.125.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 11:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4207 (0x106f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb  6 09:40:29 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=78932D2D8D795720B16D871820B0E39D8FB6162B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:28:ca:45:8d:6d:0a:2d:fc:6d:4e:a9:ba:
                    b0:8a:ee:9a:a8:7e:90:93:db:c6:ef:5b:52:2c:ed:
                    17:d0:0e:63:e4:f9:9f:75:ad:86:eb:b2:ef:76:3e:
                    40:75:4e:b1:4f:a5:a0:cc:a7:ee:bd:c3:73:7a:4f:
                    87:49:4d:20:27:f3:c2:96:c0:bd:28:fa:5e:b9:5d:
                    38:a5:0b:2f:c0:b6:76:ab:03:21:56:0d:ca:38:3c:
                    0d:54:f8:ba:98:ea:61:d6:48:c6:8b:25:fd:9d:bf:
                    e2:b7:aa:a1:4c:73:a1:23:22:5e:b6:fe:82:11:8e:
                    24:48:d5:b9:1c:80:2b:16:f4:f1:3c:cf:3e:20:e8:
                    31:5d:d7:d8:47:6d:b7:cb:2b:e6:6c:42:9c:8a:7f:
                    f3:de:60:9d:ee:50:9b:f8:0a:23:3e:6f:fb:63:8c:
                    fc:16:11:76:e6:7c:48:14:22:06:7b:6f:a2:df:53:
                    54:04:af:bd:b6:7a:a0:6d:fe:a5:f7:54:04:da:75:
                    9a:90:ee:59:6e:f6:de:c5:53:31:86:f5:77:a9:9e:
                    e0:9e:f6:86:28:0f:a3:e5:5e:6c:43:17:87:4d:89:
                    09:d7:9b:7a:ba:00:1e:ec:a5:ea:14:c2:df:06:75:
                    b3:64:cb:42:e3:bb:75:bd:12:2f:f3:05:60:a3:cf:
                    95:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:2D:2D:8D:79:57:20:B1:6D:87:18:20:B0:E3:9D:8F:B6:16:2B
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/eJMtLY15VyCxbYcYILDjnY-2Fis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:fb:c6:1e:d9:da:02:10:a4:35:ca:ba:c2:a1:3e:17:a4:
         dc:fc:42:91:67:02:c8:09:7a:80:fc:e4:01:3d:ff:cc:5a:76:
         89:d3:e5:c7:2f:6f:09:57:bd:ba:72:b2:61:80:0b:7f:e4:a0:
         84:67:ba:8f:ea:d2:ff:a0:fc:ad:09:d8:5f:26:05:9b:20:49:
         ab:f3:25:89:e4:24:06:45:3c:37:f3:a7:3b:ba:c8:45:28:1d:
         8c:fd:27:62:e5:cc:f5:a6:4d:1c:79:21:98:ed:ad:67:6c:92:
         86:77:d4:8b:03:f5:3e:d6:b7:62:97:4d:c3:70:c1:0b:00:74:
         c5:8f:f1:c6:19:9b:4e:97:f8:0c:ae:9b:dd:43:09:15:2b:c3:
         26:00:04:95:cb:f6:9f:91:33:07:40:33:eb:65:de:e8:8e:f0:
         1f:89:2c:b0:48:5d:ee:8d:6d:cb:85:c4:bf:10:1a:ee:86:df:
         fd:b7:08:e6:83:33:46:96:e9:c2:f9:dd:1f:19:ee:04:57:61:
         d9:6f:a4:eb:99:9c:93:c6:1a:7c:2a:60:ac:9d:d0:51:8b:31:
         71:b8:a0:8a:2f:e6:a2:65:7d:48:18:db:68:d9:c0:6e:29:b8:
         2e:e4:75:13:2f:19:6e:b9:a4:0c:e1:9b:10:20:ae:66:f9:95:
         56:57:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:39:38 2024 by rpki-client on console-ams.rpki-client.org