Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/DivM_5hErPQfD9yEvXgo8sn8oFw.roa
File:                     DivM_5hErPQfD9yEvXgo8sn8oFw.roa (raw, json)
Hash identifier:          sUoiJX7M8csJ9dnepXidcZfbV//lXCujn2vC4nHK0QI=
Subject key identifier:   0E:2B:CC:FF:98:44:AC:F4:1F:0F:DC:84:BD:78:28:F2:C9:FC:A0:5C
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       128E
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/DivM_5hErPQfD9yEvXgo8sn8oFw.roa
Signing time:             Thu 02 Oct 2025 08:54:55 +0000
ROA not before:           Thu 02 Oct 2025 08:54:55 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     16509
IP address blocks:        103.125.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 13:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4750 (0x128e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Oct  2 08:54:55 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0E2BCCFF9844ACF41F0FDC84BD7828F2C9FCA05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:43:37:76:fe:c5:0f:82:83:9e:3c:b1:6a:
                    70:33:fe:90:c5:b9:0c:10:5b:65:5f:93:bc:bb:bc:
                    60:74:4b:9c:75:1e:ca:31:e4:d2:7a:99:f3:3e:7b:
                    69:b5:19:57:d1:6c:e2:5c:eb:db:65:6f:f4:00:ae:
                    89:bc:1e:f6:38:bd:05:6a:b2:68:8c:63:be:89:ba:
                    d7:68:bf:d6:50:8c:e3:21:65:d8:ea:d1:ef:2d:16:
                    6f:b4:10:ea:79:58:8d:60:d0:02:82:95:1f:80:98:
                    44:9a:dd:e0:1e:ad:79:30:bd:7f:4d:11:3f:47:1c:
                    d2:37:01:d0:e0:99:5c:f1:67:05:99:ba:be:f9:33:
                    83:8e:f0:f9:b0:3b:11:32:ad:6b:c7:d0:f1:8c:66:
                    3a:58:90:ca:d6:3a:c2:0f:26:28:53:7b:22:b2:d5:
                    ce:89:13:16:8d:12:18:5f:d1:bc:c7:b7:33:b3:8c:
                    93:15:be:c4:43:14:ed:7e:9f:aa:0e:6a:32:69:d5:
                    e6:34:77:7c:7d:99:5b:c5:70:8b:bb:99:a3:bf:d7:
                    c4:26:1c:2e:24:13:99:7e:6d:fc:f5:f1:bc:7c:22:
                    0f:46:b4:ed:06:1c:26:c2:9b:49:40:d0:77:9a:18:
                    9f:82:93:76:e0:91:da:bc:b1:b6:62:7d:31:7a:de:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:CC:FF:98:44:AC:F4:1F:0F:DC:84:BD:78:28:F2:C9:FC:A0:5C
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/DivM_5hErPQfD9yEvXgo8sn8oFw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:3c:a2:a5:24:78:5b:a4:92:55:22:c3:33:c7:d4:86:16:
         4b:40:b9:84:b3:cf:60:d9:96:eb:a7:36:6b:f0:9b:21:37:17:
         4b:9a:9b:1c:da:b0:9b:13:85:33:a8:25:f2:67:b3:ac:7b:29:
         34:81:59:0f:5e:92:7f:5d:42:cd:10:46:07:2a:c1:93:c4:1a:
         f4:d3:af:f4:9a:4f:30:81:45:15:7d:c9:fb:b4:0b:c9:2b:45:
         ff:44:a0:65:cc:f6:37:51:95:ce:95:82:a5:28:1c:f5:7c:96:
         e3:a0:03:b4:23:ea:d7:58:94:15:60:45:08:c0:92:09:df:df:
         5d:3c:36:54:6a:34:6a:3d:80:01:3b:89:5b:1b:5d:77:43:6c:
         f5:57:0c:24:fd:cc:1a:ff:aa:39:99:ad:8c:75:86:e1:e6:10:
         8c:e4:df:df:c9:64:d3:de:c9:d9:58:85:4a:67:ff:a8:ec:1b:
         c9:5a:e1:e9:f3:1d:eb:24:7a:ed:45:74:9f:4f:1e:a2:1e:3c:
         07:0d:98:11:a1:9f:3c:ee:b6:97:54:ed:33:64:95:f3:9b:a8:
         91:69:81:2b:ac:f2:fa:92:18:40:d8:d4:96:ce:09:da:1f:82:
         14:ac:2d:83:8b:d5:09:55:75:5f:f9:a4:ba:f9:8b:b2:55:e8:
         5a:56:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:44 2025 by rpki-client