Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/l94c8zZpOJuArApluSxf40Rmr-M.roa
File:                     l94c8zZpOJuArApluSxf40Rmr-M.roa (raw, json)
Hash identifier:          kF8pCI4FVL8RYpcw7PxRUFgY6PVZ5idU+06zVfnrXRs=
Subject key identifier:   97:DE:1C:F3:36:69:38:9B:80:AC:0A:65:B9:2C:5F:E3:44:66:AF:E3
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1320
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/l94c8zZpOJuArApluSxf40Rmr-M.roa
Signing time:             Thu 30 Apr 2026 02:23:08 +0000
ROA not before:           Thu 30 Apr 2026 02:23:08 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     16509
IP address blocks:        211.79.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 18:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4896 (0x1320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Apr 30 02:23:08 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=97DE1CF33669389B80AC0A65B92C5FE34466AFE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:b2:fe:d7:28:da:aa:4a:13:91:34:63:a1:
                    84:31:29:b4:83:da:bd:2d:1a:09:eb:f5:3b:5e:f4:
                    66:7a:c4:1d:fc:18:d7:a0:b5:f3:80:10:ea:de:dd:
                    10:20:80:a1:c3:c8:51:04:b5:3a:56:1f:4a:b7:8e:
                    1e:14:9c:53:50:fb:7c:25:46:7b:e4:18:c0:29:d5:
                    60:d3:cc:10:e5:04:81:b3:7d:10:40:61:99:7d:29:
                    d4:63:f8:b1:9e:a9:68:0f:bc:86:a3:69:16:ec:a4:
                    51:77:ff:7d:21:7d:ca:d2:cc:e6:69:5e:ab:ee:bb:
                    ef:d5:a0:56:c8:3b:4a:46:dd:d7:52:ae:9d:bf:24:
                    3c:c2:ab:44:14:f5:fe:b1:8b:b6:04:bc:65:3f:43:
                    c8:c2:0e:3a:f8:dd:96:36:f5:eb:f4:6e:9b:ae:2e:
                    94:45:78:4b:bd:3e:3d:5a:74:44:03:42:b5:99:f5:
                    fc:75:df:86:c4:02:64:10:ff:67:76:33:9e:3c:91:
                    23:38:51:2f:4c:34:b5:98:f6:dc:67:e5:43:4e:0f:
                    ae:6f:48:49:26:2d:76:d8:70:c5:15:c1:74:1b:6b:
                    a4:db:a7:49:6a:e7:b1:c6:79:d5:35:96:78:93:be:
                    b2:d8:3a:32:cd:cb:0e:2e:46:30:5d:6f:45:71:8e:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:1C:F3:36:69:38:9B:80:AC:0A:65:B9:2C:5F:E3:44:66:AF:E3
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/l94c8zZpOJuArApluSxf40Rmr-M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:68:b0:40:24:dc:e8:ce:af:19:bb:7f:87:f7:69:c2:54:
         56:6d:9b:cb:7d:4e:69:05:0d:61:c2:4a:3c:94:44:49:43:77:
         51:e6:60:b6:1b:68:9e:b9:d3:8d:6c:c8:65:7b:4b:a1:35:74:
         02:1e:1f:e8:d3:28:1d:db:cb:79:fd:4f:57:ae:9f:d5:e2:8f:
         8d:3e:2c:70:b1:76:2f:d8:e0:fa:fb:21:13:ba:e7:f4:da:bb:
         fe:f5:05:70:9f:f6:c1:bd:00:7b:82:55:21:32:ea:93:59:38:
         b8:aa:62:53:54:9c:b6:a3:d4:ee:83:f9:e8:ae:28:7d:0a:3e:
         77:ad:bf:7c:71:55:25:d0:7a:20:00:58:c4:5c:76:74:29:80:
         a6:db:3f:a4:7c:c3:5b:93:1b:fd:bc:04:75:ac:ee:c7:6f:49:
         85:15:06:3e:22:d4:c6:8f:ef:03:e6:38:e8:f6:82:53:b7:48:
         85:ff:da:43:9a:f0:fe:8b:c6:f5:ab:91:cf:14:82:76:b5:c5:
         3c:56:d7:2c:af:70:be:0b:0e:ae:57:49:7e:a2:ee:d0:b1:3c:
         0a:26:19:45:fb:3d:e2:99:54:84:74:3a:80:6f:53:00:9e:a7:
         77:d5:66:6f:18:c4:86:55:20:f6:33:4a:21:53:86:ab:f3:72:
         d3:ea:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:58 2026 by rpki-client