Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa
File: 34332e3232372e32342e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier: sZR2upIjgJ8ucZv/gsPF7tQAoIHfXdof9Y1BIEmdMEk=
Subject key identifier: 08:C8:2C:DC:18:FD:E3:13:64:FE:88:55:90:B2:F1:D7:B2:EC:63:1F
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 30CA2D2C8A230D436463D25082345FB197BE529D
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa
Signing time: Mon 11 May 2026 17:09:02 +0000
ROA not before: Mon 11 May 2026 17:04:02 +0000
ROA not after: Mon 10 May 2027 17:09:02 +0000
asID: 38851
IP address blocks: 43.227.24.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ca:2d:2c:8a:23:0d:43:64:63:d2:50:82:34:5f:b1:97:be:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: May 11 17:04:02 2026 GMT
Not After : May 10 17:09:02 2027 GMT
Subject: CN=08C82CDC18FDE31364FE885590B2F1D7B2EC631F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:3a:f1:51:29:06:89:56:59:ed:e9:6a:3b:
a9:55:59:18:9f:48:45:6c:08:f1:90:b0:49:67:39:
d1:5a:f2:43:21:05:d1:41:ce:af:68:36:95:38:4a:
c8:0f:8f:77:38:59:bc:71:e8:c2:27:83:05:1a:a4:
07:83:48:36:c4:78:78:60:7d:b2:a4:88:ea:7b:53:
62:03:72:c6:28:40:63:f2:aa:2d:3a:19:54:39:6c:
3d:bc:29:17:21:c3:5e:0b:4c:82:98:c0:45:e5:03:
d9:d1:7d:28:fd:f8:1e:1d:9d:0b:57:44:f7:f6:6b:
ef:49:3b:cf:0b:83:24:72:73:ed:9e:a6:4d:65:43:
30:3a:c0:88:06:96:95:fc:4b:48:23:54:13:fb:a0:
ac:d2:5a:d8:25:cc:64:01:bc:a7:04:da:c6:97:e8:
e1:41:4d:31:61:cc:40:be:ba:d4:bf:5e:76:2a:ee:
44:5f:2a:d5:51:d5:e5:1d:4f:02:7a:a4:32:b2:6c:
5f:0b:f2:1a:12:f8:bd:dd:8d:05:b9:43:ae:30:29:
6b:2e:84:e7:82:3b:2a:79:d7:33:ec:88:a1:18:c0:
f0:ad:cb:c8:19:6f:13:f8:88:46:10:4e:09:43:c3:
9f:91:10:6a:87:33:d9:0c:c9:58:15:b6:1c:b7:36:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C8:2C:DC:18:FD:E3:13:64:FE:88:55:90:B2:F1:D7:B2:EC:63:1F
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32342e302f32332d3233203d3e203338383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.24.0/23
Signature Algorithm: sha256WithRSAEncryption
00:9c:de:e4:88:d9:44:ae:c5:10:df:3f:c2:d6:b4:9f:9e:58:
1b:ae:fd:a6:b1:33:12:99:35:ba:30:fd:7b:0d:43:85:3c:08:
63:46:57:d8:a1:8c:99:08:65:00:83:a4:b0:1c:9d:a3:3d:9f:
78:b1:f0:ea:2c:42:3f:55:97:7c:2e:9d:90:e0:ba:d6:30:99:
ad:9c:ce:6a:84:36:19:8d:40:48:0d:c5:ff:ae:29:92:4e:3b:
63:95:97:94:2d:bb:4e:54:1a:e6:6c:04:75:81:9e:b9:6a:ff:
2e:0e:70:0a:d7:bf:ec:f8:84:95:f1:e5:f1:bb:73:2c:5c:30:
d8:5b:f9:4a:82:4c:13:a5:06:a9:f6:1c:46:0e:f7:87:9c:92:
44:1b:6b:be:c2:4d:d1:c5:2e:e6:2a:ad:f3:19:8a:c3:61:6d:
8e:15:b8:37:94:a0:fe:ae:a1:21:5b:bc:e3:c4:83:d9:30:ea:
7b:12:de:e2:d3:8a:0c:05:a2:f9:c8:24:63:e8:f9:bc:d2:25:
ad:4d:8a:c1:10:a0:a8:ca:7b:96:9d:b9:e2:cb:fd:cc:aa:0e:
c7:4b:ca:db:60:14:59:e8:f5:69:b0:34:a1:e7:c2:ff:79:de:
07:b3:ee:91:6c:cf:90:44:53:5c:7d:81:66:6b:35:37:59:44:
1c:ec:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:51 2026 by rpki-client