Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa
File:                     34332e3232372e32362e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier:          C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=
Subject key identifier:   82:90:D8:66:38:5E:30:7B:1D:F7:DE:19:AB:05:A7:6C:6C:4F:F8:AF
Certificate issuer:       /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial:       024F2103C68400BEFEDAC0397BC45923E3A3E839
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa
Signing time:             Mon 11 May 2026 17:09:02 +0000
ROA not before:           Mon 11 May 2026 17:04:02 +0000
ROA not after:            Mon 10 May 2027 17:09:02 +0000
asID:                     38851
IP address blocks:        43.227.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
                          rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4f:21:03:c6:84:00:be:fe:da:c0:39:7b:c4:59:23:e3:a3:e8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
        Validity
            Not Before: May 11 17:04:02 2026 GMT
            Not After : May 10 17:09:02 2027 GMT
        Subject: CN=8290D866385E307B1DF7DE19AB05A76C6C4FF8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:e5:f3:5f:70:90:57:37:cb:e0:82:ca:0a:
                    30:15:93:71:bb:c9:ea:84:98:79:b0:84:d4:1c:db:
                    27:a9:29:4e:1d:04:56:6b:d0:1d:b4:bb:8a:af:42:
                    98:61:25:0f:1b:db:b3:97:8b:09:ad:38:11:14:bf:
                    4d:e7:2e:ab:20:59:ce:11:76:e5:c7:24:06:e2:b8:
                    12:cd:0d:11:9e:bc:cd:e6:4a:c4:c0:cc:57:b0:d3:
                    84:cb:d9:56:13:77:79:62:27:1a:a8:34:98:5b:60:
                    da:d2:be:de:39:6e:e7:9b:2e:15:c8:e5:be:c4:75:
                    31:8b:1b:8a:9c:fa:ca:c6:3c:52:1e:ac:f4:7e:fc:
                    47:69:00:93:1a:c3:2b:ef:78:96:56:00:a0:b9:b2:
                    e5:e6:e4:44:ff:ff:1a:77:b9:ec:90:ba:ec:62:a2:
                    ad:37:1a:4f:ae:74:39:cf:a3:2d:ac:8c:d9:be:0f:
                    58:4a:f7:bd:2d:ec:b0:13:46:b4:3a:17:20:dc:63:
                    b2:11:df:4e:9f:17:98:54:ff:e1:f7:12:9d:c4:e1:
                    a0:c4:ce:b0:78:34:b2:5c:f4:dd:eb:88:e5:14:8e:
                    fd:8d:44:d3:a5:9e:ac:9e:38:2e:b0:32:4f:bc:65:
                    a1:e5:12:53:68:f3:0a:29:a6:02:ab:a0:20:69:03:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:90:D8:66:38:5E:30:7B:1D:F7:DE:19:AB:05:A7:6C:6C:4F:F8:AF
            X509v3 Authority Key Identifier:
                keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:23:01:10:48:dd:ca:a1:ec:90:62:67:37:c5:de:37:92:56:
         9a:87:d0:4a:9b:59:c1:df:91:c1:cc:7b:e6:10:82:ab:c2:06:
         ad:db:f6:44:ee:96:f7:d5:f5:0f:79:4c:42:2d:eb:be:3a:e6:
         9a:d8:30:cc:a5:60:78:51:f0:d1:ac:e2:69:43:b3:81:11:5b:
         e7:28:94:b1:2a:2e:80:bf:6b:a6:db:a6:d6:eb:d8:e7:22:50:
         75:76:de:79:d0:64:d3:a3:05:cb:f1:68:72:67:40:29:4e:23:
         5f:60:2f:4f:ad:74:03:c5:b0:32:c9:30:96:21:5a:cd:e7:e2:
         03:e4:a0:f1:36:29:46:3e:f1:a2:26:22:36:58:22:72:ea:58:
         ed:d2:b4:79:9c:f5:85:ec:45:ad:c6:36:b5:c3:ad:6b:b8:1c:
         75:88:6c:ff:90:5f:ef:1c:14:b1:57:fe:31:5d:9d:f8:bf:16:
         a1:42:4d:4f:11:87:a7:32:5f:29:91:61:c8:32:90:5f:36:db:
         da:40:c5:df:d4:a2:b5:d8:e9:da:a4:43:1e:16:6c:3b:67:03:
         f8:07:19:a9:d1:f6:de:29:74:37:07:8c:f2:27:6e:00:47:fc:
         dd:50:f7:52:83:5f:90:20:fe:ef:49:bd:d5:f2:8c:42:ec:7b:
         e7:29:63:68
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUAk8hA8aEAL7+2sA5e8RZI+Oj6DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw
OENEMjVBRTAeFw0yNjA1MTExNzA0MDJaFw0yNzA1MTAxNzA5MDJaMDMxMTAvBgNV
BAMTKDgyOTBEODY2Mzg1RTMwN0IxREY3REUxOUFCMDVBNzZDNkM0RkY4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt+XzX3CQVzfL4ILKCjAVk3G7
yeqEmHmwhNQc2yepKU4dBFZr0B20u4qvQphhJQ8b27OXiwmtOBEUv03nLqsgWc4R
duXHJAbiuBLNDRGevM3mSsTAzFew04TL2VYTd3liJxqoNJhbYNrSvt45buebLhXI
5b7EdTGLG4qc+srGPFIerPR+/EdpAJMawyvveJZWAKC5suXm5ET//xp3ueyQuuxi
oq03Gk+udDnPoy2sjNm+D1hK970t7LATRrQ6FyDcY7IR306fF5hU/+H3Ep3E4aDE
zrB4NLJc9N3riOUUjv2NRNOlnqyeOC6wMk+8ZaHlElNo8woppgKroCBpA9Q3AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUgpDYZjheMHsd994ZqwWnbGxP+K8wHwYDVR0j
BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU
Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE
ODgxNUUwOENEMjVBRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC8zNDMzMmUzMjMy
MzcyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMzM4MzgzNTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBK+MaMA0GCSqGSIb3DQEBCwUAA4IBAQA0IwEQSN3KoeyQYmc3xd43klaa
h9BKm1nB35HBzHvmEIKrwgat2/ZE7pb31fUPeUxCLeu+Ouaa2DDMpWB4UfDRrOJp
Q7OBEVvnKJSxKi6Av2um26bW69jnIlB1dt550GTTowXL8WhyZ0ApTiNfYC9PrXQD
xbAyyTCWIVrN5+ID5KDxNilGPvGiJiI2WCJy6ljt0rR5nPWF7EWtxja1w61ruBx1
iGz/kF/vHBSxV/4xXZ34vxahQk1PEYenMl8pkWHIMpBfNtvaQMXf1KK12OnapEMe
Fmw7ZwP4Bxmp0fbeKXQ3B4zyJ24AR/zdUPdSg1+QIP7vSb3V8oxC7HvnKWNo
-----END CERTIFICATE-----
Generated at Wed May 13 21:16:14 2026 by rpki-client