Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa
File:                     34332e3232372e32342e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier:          sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=
Subject key identifier:   08:C8:2C:DC:18:FD:E3:13:64:FE:88:55:90:B2:F1:D7:B2:EC:63:1F
Certificate issuer:       /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial:       30CA2D2C8A230D436463D25082345FB197BE529D
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa
Signing time:             Mon 11 May 2026 17:09:02 +0000
ROA not before:           Mon 11 May 2026 17:04:02 +0000
ROA not after:            Mon 10 May 2027 17:09:02 +0000
asID:                     38851
IP address blocks:        43.227.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
                          rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ca:2d:2c:8a:23:0d:43:64:63:d2:50:82:34:5f:b1:97:be:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
        Validity
            Not Before: May 11 17:04:02 2026 GMT
            Not After : May 10 17:09:02 2027 GMT
        Subject: CN=08C82CDC18FDE31364FE885590B2F1D7B2EC631F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:3a:f1:51:29:06:89:56:59:ed:e9:6a:3b:
                    a9:55:59:18:9f:48:45:6c:08:f1:90:b0:49:67:39:
                    d1:5a:f2:43:21:05:d1:41:ce:af:68:36:95:38:4a:
                    c8:0f:8f:77:38:59:bc:71:e8:c2:27:83:05:1a:a4:
                    07:83:48:36:c4:78:78:60:7d:b2:a4:88:ea:7b:53:
                    62:03:72:c6:28:40:63:f2:aa:2d:3a:19:54:39:6c:
                    3d:bc:29:17:21:c3:5e:0b:4c:82:98:c0:45:e5:03:
                    d9:d1:7d:28:fd:f8:1e:1d:9d:0b:57:44:f7:f6:6b:
                    ef:49:3b:cf:0b:83:24:72:73:ed:9e:a6:4d:65:43:
                    30:3a:c0:88:06:96:95:fc:4b:48:23:54:13:fb:a0:
                    ac:d2:5a:d8:25:cc:64:01:bc:a7:04:da:c6:97:e8:
                    e1:41:4d:31:61:cc:40:be:ba:d4:bf:5e:76:2a:ee:
                    44:5f:2a:d5:51:d5:e5:1d:4f:02:7a:a4:32:b2:6c:
                    5f:0b:f2:1a:12:f8:bd:dd:8d:05:b9:43:ae:30:29:
                    6b:2e:84:e7:82:3b:2a:79:d7:33:ec:88:a1:18:c0:
                    f0:ad:cb:c8:19:6f:13:f8:88:46:10:4e:09:43:c3:
                    9f:91:10:6a:87:33:d9:0c:c9:58:15:b6:1c:b7:36:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C8:2C:DC:18:FD:E3:13:64:FE:88:55:90:B2:F1:D7:B2:EC:63:1F
            X509v3 Authority Key Identifier:
                keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:de:e4:88:d9:44:ae:c5:10:df:3f:c2:d6:b4:9f:9e:58:
         1b:ae:fd:a6:b1:33:12:99:35:ba:30:fd:7b:0d:43:85:3c:08:
         63:46:57:d8:a1:8c:99:08:65:00:83:a4:b0:1c:9d:a3:3d:9f:
         78:b1:f0:ea:2c:42:3f:55:97:7c:2e:9d:90:e0:ba:d6:30:99:
         ad:9c:ce:6a:84:36:19:8d:40:48:0d:c5:ff:ae:29:92:4e:3b:
         63:95:97:94:2d:bb:4e:54:1a:e6:6c:04:75:81:9e:b9:6a:ff:
         2e:0e:70:0a:d7:bf:ec:f8:84:95:f1:e5:f1:bb:73:2c:5c:30:
         d8:5b:f9:4a:82:4c:13:a5:06:a9:f6:1c:46:0e:f7:87:9c:92:
         44:1b:6b:be:c2:4d:d1:c5:2e:e6:2a:ad:f3:19:8a:c3:61:6d:
         8e:15:b8:37:94:a0:fe:ae:a1:21:5b:bc:e3:c4:83:d9:30:ea:
         7b:12:de:e2:d3:8a:0c:05:a2:f9:c8:24:63:e8:f9:bc:d2:25:
         ad:4d:8a:c1:10:a0:a8:ca:7b:96:9d:b9:e2:cb:fd:cc:aa:0e:
         c7:4b:ca:db:60:14:59:e8:f5:69:b0:34:a1:e7:c2:ff:79:de:
         07:b3:ee:91:6c:cf:90:44:53:5c:7d:81:66:6b:35:37:59:44:
         1c:ec:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:58 2026 by rpki-client