Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/3130332e34362e3139302e302f32332d3233203d3e203338383531.roa
File:                     3130332e34362e3139302e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier:          s3NIqrucGxxXoVh7k9P2N6l5jBGUlMpH1t4x77/+R9g=
Subject key identifier:   F0:CF:EF:05:BE:79:4D:45:F3:EB:C9:18:E5:34:5B:0F:3E:CF:7A:AF
Certificate issuer:       /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial:       08420AC62CD04DB2ED71810229F057122D5CD678
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCCATV/0/3130332e34362e3139302e302f32332d3233203d3e203338383531.roa
Signing time:             Mon 11 May 2026 17:09:05 +0000
ROA not before:           Mon 11 May 2026 17:04:05 +0000
ROA not after:            Mon 10 May 2027 17:09:05 +0000
asID:                     38851
IP address blocks:        103.46.190.0/23 maxlen: 23
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:0a:c6:2c:d0:4d:b2:ed:71:81:02:29:f0:57:12:2d:5c:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
        Validity
            Not Before: May 11 17:04:05 2026 GMT
            Not After : May 10 17:09:05 2027 GMT
        Subject: CN=F0CFEF05BE794D45F3EBC918E5345B0F3ECF7AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:f0:19:ac:5b:7c:72:af:1f:a5:1f:b4:b6:
                    ae:3a:7a:91:65:4f:03:22:47:56:f6:66:75:6b:93:
                    f0:bf:cb:11:73:00:d7:c4:d5:7c:37:1e:30:f4:e2:
                    bd:f5:4d:78:da:82:cc:99:5d:f5:e9:cd:64:64:f7:
                    08:09:70:57:d6:35:76:50:6d:2e:45:8e:04:a2:7c:
                    2b:d8:81:bf:5f:b3:5a:ef:65:a8:89:b5:5c:e2:6b:
                    7d:5b:3c:54:40:e5:6b:6f:fb:07:5c:f3:36:63:ac:
                    2c:0f:d7:83:83:f1:5a:fb:55:aa:20:ae:dd:ac:37:
                    c8:d8:39:d7:3d:69:e8:3c:ed:3a:ba:0b:bb:8c:ba:
                    bb:46:c4:86:40:b9:2a:ba:2a:6c:5d:ae:41:73:84:
                    a4:a1:09:34:86:1f:9d:1e:06:7e:1c:19:c9:2b:b6:
                    26:c7:76:32:62:23:a8:c8:bd:59:6e:8c:6b:18:46:
                    5f:19:f2:36:72:51:57:74:c4:05:33:4e:16:b3:48:
                    74:30:3f:bb:03:6e:32:b2:46:b5:5c:01:7d:db:a1:
                    6d:5d:e6:d6:ce:33:1c:aa:e3:fa:c5:90:95:e7:8f:
                    cf:74:f8:7d:01:ac:a1:fe:9d:90:30:5c:77:37:25:
                    2a:49:d2:bb:45:a6:50:c0:8e:de:c9:75:28:c6:5f:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:EF:05:BE:79:4D:45:F3:EB:C9:18:E5:34:5B:0F:3E:CF:7A:AF
            X509v3 Authority Key Identifier:
                keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/3130332e34362e3139302e302f32332d3233203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:34:48:36:38:2a:e8:ae:f5:5e:11:09:34:17:5e:89:a8:49:
         7f:0a:3e:92:2b:65:46:a9:f7:a5:3a:95:a4:92:5a:80:4a:aa:
         64:5f:5f:6b:f8:8f:9a:8d:9e:75:bd:6a:aa:3a:b8:5f:33:f9:
         2b:a0:03:88:7b:e1:11:9f:bd:1c:8d:f7:d3:01:1a:f9:e8:b7:
         b2:bc:2e:f3:0a:8d:e4:68:8a:3d:1a:ee:90:88:2b:c1:eb:b0:
         99:3c:7d:f6:5f:d9:ed:ca:c7:f6:12:ce:3c:6c:fb:58:a5:80:
         29:2e:e8:13:2c:e3:7f:2c:a9:d3:eb:05:13:88:73:b9:21:6f:
         41:94:af:65:c6:bb:c3:5f:c2:22:fe:83:09:ca:e9:9d:90:2d:
         c9:2c:ec:50:62:13:2d:b6:65:55:58:1f:b1:a6:d6:f9:33:98:
         0b:4d:07:a0:1f:1e:9b:66:7c:3b:c6:a0:49:da:9d:f7:41:ad:
         5b:6f:78:a4:fd:cf:9b:d4:8e:c6:e0:4d:52:b7:9b:7c:56:2e:
         cb:25:28:5a:55:e7:12:05:f0:bd:d8:d7:5b:f8:63:bc:cf:7b:
         b7:32:a0:b0:53:fb:b4:b4:86:4a:34:b6:e8:98:fc:4e:44:05:
         fe:1d:51:ca:0e:ff:9c:12:7f:1c:9a:39:6e:fc:18:4a:0b:9c:
         6d:1c:40:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:17 2026 by rpki-client