Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa
File:                     3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa (raw, json)
Hash identifier:          wAf5rAvxkIVF2EmVrtaklm33SqKTtuxnUU+SmUZADj8=
Subject key identifier:   7E:82:8C:7E:8D:5C:7C:26:99:12:6A:73:E4:E3:BD:E7:F1:B7:22:5D
Certificate issuer:       /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial:       3302578A5F8A468D805977AF6AF4EFE045B082AF
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCCATV/0/3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa
Signing time:             Mon 11 May 2026 17:09:05 +0000
ROA not before:           Mon 11 May 2026 17:04:05 +0000
ROA not after:            Mon 10 May 2027 17:09:05 +0000
asID:                     38851
IP address blocks:        103.131.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
                          rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:02:57:8a:5f:8a:46:8d:80:59:77:af:6a:f4:ef:e0:45:b0:82:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
        Validity
            Not Before: May 11 17:04:05 2026 GMT
            Not After : May 10 17:09:05 2027 GMT
        Subject: CN=7E828C7E8D5C7C2699126A73E4E3BDE7F1B7225D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:66:7c:de:11:96:89:ff:2e:92:ac:36:2f:
                    25:54:09:f2:f8:ce:7e:b2:e6:08:33:3e:d3:31:30:
                    85:e6:8a:9b:ba:24:a4:03:ea:7b:30:db:1f:63:f0:
                    6f:45:88:3f:0e:d9:df:f8:5c:3b:48:69:e9:e2:31:
                    a5:b6:78:3d:e7:bb:38:a1:e3:c9:04:22:43:61:8c:
                    39:a1:21:0d:3b:98:b5:12:e2:1a:81:ef:07:e2:3f:
                    cb:26:75:11:6c:e1:c1:8a:3b:94:8f:a7:65:5a:f7:
                    ba:3a:c3:74:63:e0:ce:8c:e7:bf:b0:8e:05:4f:d1:
                    be:1f:a0:e0:4b:7b:8b:dc:27:a1:6a:8c:35:6a:42:
                    6d:13:78:98:82:34:a4:01:55:fa:77:7b:dc:fe:94:
                    e4:97:30:b7:88:d7:72:2f:9e:1f:ec:6c:5b:98:78:
                    3d:a3:89:4f:e2:aa:d2:f5:dc:3c:10:14:cf:c4:59:
                    2d:95:6c:b4:f7:8f:65:76:cb:8b:0d:93:14:f8:f7:
                    91:bd:c4:b3:51:13:69:47:e2:5c:f9:f6:7b:24:b8:
                    c6:a4:80:d9:86:a8:a8:bb:3f:51:3e:29:55:02:d3:
                    ad:7b:98:07:e4:42:01:28:4a:3a:72:c7:72:7a:e7:
                    e8:f3:fb:a7:ca:fe:8b:23:e2:2d:39:2e:55:56:e6:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:82:8C:7E:8D:5C:7C:26:99:12:6A:73:E4:E3:BD:E7:F1:B7:22:5D
            X509v3 Authority Key Identifier:
                keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/3130332e3133312e3137322e302f32322d3232203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:f7:1e:05:cc:60:b6:c3:4d:0a:8d:4e:5a:3e:d7:15:a0:
         d9:26:f9:4d:0b:5b:48:4a:bf:ee:71:55:e8:0e:88:e5:f4:f6:
         fa:96:76:6d:c9:17:e4:a1:4c:c3:15:b8:66:32:04:33:1f:1a:
         c4:6b:12:c0:06:1f:90:c2:52:b4:79:ed:fa:5e:29:dd:ba:a6:
         e3:3f:5f:cf:32:67:a5:f8:a4:16:db:e8:ea:78:a4:07:82:f3:
         db:59:4c:7d:17:f9:56:b4:1f:2f:b0:ec:c4:ad:bc:97:fc:27:
         2a:9a:bc:be:7f:f4:43:54:3e:1f:23:3f:9e:0a:ea:db:c0:1f:
         eb:20:9f:85:a4:6c:ca:bb:b8:cd:57:a9:71:60:82:fd:99:f1:
         27:63:93:b3:3f:9d:4f:10:af:08:06:47:78:a9:6e:ee:25:97:
         16:db:6b:2e:38:fd:5d:28:53:c8:73:e7:b8:02:0a:e3:81:c3:
         3b:12:61:7f:03:81:d8:64:f8:63:d3:00:94:00:f8:ff:cb:30:
         a2:4f:26:0f:c5:4c:86:75:35:3e:32:0c:0a:ca:bd:a4:b9:96:
         a6:30:7b:5b:08:54:df:67:a6:86:da:62:a6:b0:4a:9c:49:63:
         ed:c3:24:63:4d:53:fb:d5:97:6a:af:c0:b7:27:c4:d5:50:ef:
         15:f8:8b:9f
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUMwJXil+KRo2AWXevavTv4EWwgq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw
OENEMjVBRTAeFw0yNjA1MTExNzA0MDVaFw0yNzA1MTAxNzA5MDVaMDMxMTAvBgNV
BAMTKDdFODI4QzdFOEQ1QzdDMjY5OTEyNkE3M0U0RTNCREU3RjFCNzIyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoGZ83hGWif8ukqw2LyVUCfL4
zn6y5ggzPtMxMIXmipu6JKQD6nsw2x9j8G9FiD8O2d/4XDtIaeniMaW2eD3nuzih
48kEIkNhjDmhIQ07mLUS4hqB7wfiP8smdRFs4cGKO5SPp2Va97o6w3Rj4M6M57+w
jgVP0b4foOBLe4vcJ6FqjDVqQm0TeJiCNKQBVfp3e9z+lOSXMLeI13Ivnh/sbFuY
eD2jiU/iqtL13DwQFM/EWS2VbLT3j2V2y4sNkxT495G9xLNRE2lH4lz59nskuMak
gNmGqKi7P1E+KVUC0617mAfkQgEoSjpyx3J65+jz+6fK/osj4i05LlVW5pbpAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUfoKMfo1cfCaZEmpz5OO95/G3Il0wHwYDVR0j
BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU
Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE
ODgxNUUwOENEMjVBRS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC8zMTMwMzMyZTMx
MzMzMTJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODM4MzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmeDrDANBgkqhkiG9w0BAQsFAAOCAQEApIL3HgXMYLbDTQqNTlo+
1xWg2Sb5TQtbSEq/7nFV6A6I5fT2+pZ2bckX5KFMwxW4ZjIEMx8axGsSwAYfkMJS
tHnt+l4p3bqm4z9fzzJnpfikFtvo6nikB4Lz21lMfRf5VrQfL7DsxK28l/wnKpq8
vn/0Q1Q+HyM/ngrq28Af6yCfhaRsyru4zVepcWCC/ZnxJ2OTsz+dTxCvCAZHeKlu
7iWXFttrLjj9XShTyHPnuAIK44HDOxJhfwOB2GT4Y9MAlAD4/8swok8mD8VMhnU1
PjIMCsq9pLmWpjB7WwhU32emhtpiprBKnElj7cMkY01T+9WXaq/AtyfE1VDvFfiL
nw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:16:30 2026 by rpki-client