Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa
File: 34332e3232372e32362e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier: C2usZixthQiIE+xeQ3sCGdfoDlrvv1uF2zFJ8tVVXIc=
Subject key identifier: 82:90:D8:66:38:5E:30:7B:1D:F7:DE:19:AB:05:A7:6C:6C:4F:F8:AF
Certificate issuer: /CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Certificate serial: 024F2103C68400BEFEDAC0397BC45923E3A3E839
Authority key identifier: B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa
Signing time: Mon 11 May 2026 17:09:02 +0000
ROA not before: Mon 11 May 2026 17:04:02 +0000
ROA not after: Mon 10 May 2027 17:09:02 +0000
asID: 38851
IP address blocks: 43.227.26.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4f:21:03:c6:84:00:be:fe:da:c0:39:7b:c4:59:23:e3:a3:e8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B621735E324046FFFC1DD75D4ED8815E08CD25AE
Validity
Not Before: May 11 17:04:02 2026 GMT
Not After : May 10 17:09:02 2027 GMT
Subject: CN=8290D866385E307B1DF7DE19AB05A76C6C4FF8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:e5:f3:5f:70:90:57:37:cb:e0:82:ca:0a:
30:15:93:71:bb:c9:ea:84:98:79:b0:84:d4:1c:db:
27:a9:29:4e:1d:04:56:6b:d0:1d:b4:bb:8a:af:42:
98:61:25:0f:1b:db:b3:97:8b:09:ad:38:11:14:bf:
4d:e7:2e:ab:20:59:ce:11:76:e5:c7:24:06:e2:b8:
12:cd:0d:11:9e:bc:cd:e6:4a:c4:c0:cc:57:b0:d3:
84:cb:d9:56:13:77:79:62:27:1a:a8:34:98:5b:60:
da:d2:be:de:39:6e:e7:9b:2e:15:c8:e5:be:c4:75:
31:8b:1b:8a:9c:fa:ca:c6:3c:52:1e:ac:f4:7e:fc:
47:69:00:93:1a:c3:2b:ef:78:96:56:00:a0:b9:b2:
e5:e6:e4:44:ff:ff:1a:77:b9:ec:90:ba:ec:62:a2:
ad:37:1a:4f:ae:74:39:cf:a3:2d:ac:8c:d9:be:0f:
58:4a:f7:bd:2d:ec:b0:13:46:b4:3a:17:20:dc:63:
b2:11:df:4e:9f:17:98:54:ff:e1:f7:12:9d:c4:e1:
a0:c4:ce:b0:78:34:b2:5c:f4:dd:eb:88:e5:14:8e:
fd:8d:44:d3:a5:9e:ac:9e:38:2e:b0:32:4f:bc:65:
a1:e5:12:53:68:f3:0a:29:a6:02:ab:a0:20:69:03:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:D8:66:38:5E:30:7B:1D:F7:DE:19:AB:05:A7:6C:6C:4F:F8:AF
X509v3 Authority Key Identifier:
keyid:B6:21:73:5E:32:40:46:FF:FC:1D:D7:5D:4E:D8:81:5E:08:CD:25:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/B621735E324046FFFC1DD75D4ED8815E08CD25AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B621735E324046FFFC1DD75D4ED8815E08CD25AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCCATV/0/34332e3232372e32362e302f32332d3233203d3e203338383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.26.0/23
Signature Algorithm: sha256WithRSAEncryption
34:23:01:10:48:dd:ca:a1:ec:90:62:67:37:c5:de:37:92:56:
9a:87:d0:4a:9b:59:c1:df:91:c1:cc:7b:e6:10:82:ab:c2:06:
ad:db:f6:44:ee:96:f7:d5:f5:0f:79:4c:42:2d:eb:be:3a:e6:
9a:d8:30:cc:a5:60:78:51:f0:d1:ac:e2:69:43:b3:81:11:5b:
e7:28:94:b1:2a:2e:80:bf:6b:a6:db:a6:d6:eb:d8:e7:22:50:
75:76:de:79:d0:64:d3:a3:05:cb:f1:68:72:67:40:29:4e:23:
5f:60:2f:4f:ad:74:03:c5:b0:32:c9:30:96:21:5a:cd:e7:e2:
03:e4:a0:f1:36:29:46:3e:f1:a2:26:22:36:58:22:72:ea:58:
ed:d2:b4:79:9c:f5:85:ec:45:ad:c6:36:b5:c3:ad:6b:b8:1c:
75:88:6c:ff:90:5f:ef:1c:14:b1:57:fe:31:5d:9d:f8:bf:16:
a1:42:4d:4f:11:87:a7:32:5f:29:91:61:c8:32:90:5f:36:db:
da:40:c5:df:d4:a2:b5:d8:e9:da:a4:43:1e:16:6c:3b:67:03:
f8:07:19:a9:d1:f6:de:29:74:37:07:8c:f2:27:6e:00:47:fc:
dd:50:f7:52:83:5f:90:20:fe:ef:49:bd:d5:f2:8c:42:ec:7b:
e7:29:63:68
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUAk8hA8aEAL7+2sA5e8RZI+Oj6DkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVEODgxNUUw
OENEMjVBRTAeFw0yNjA1MTExNzA0MDJaFw0yNzA1MTAxNzA5MDJaMDMxMTAvBgNV
BAMTKDgyOTBEODY2Mzg1RTMwN0IxREY3REUxOUFCMDVBNzZDNkM0RkY4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt+XzX3CQVzfL4ILKCjAVk3G7
yeqEmHmwhNQc2yepKU4dBFZr0B20u4qvQphhJQ8b27OXiwmtOBEUv03nLqsgWc4R
duXHJAbiuBLNDRGevM3mSsTAzFew04TL2VYTd3liJxqoNJhbYNrSvt45buebLhXI
5b7EdTGLG4qc+srGPFIerPR+/EdpAJMawyvveJZWAKC5suXm5ET//xp3ueyQuuxi
oq03Gk+udDnPoy2sjNm+D1hK970t7LATRrQ6FyDcY7IR306fF5hU/+H3Ep3E4aDE
zrB4NLJc9N3riOUUjv2NRNOlnqyeOC6wMk+8ZaHlElNo8woppgKroCBpA9Q3AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUgpDYZjheMHsd994ZqwWnbGxP+K8wHwYDVR0j
BBgwFoAUtiFzXjJARv/8HdddTtiBXgjNJa4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlRDQ0FU
Vi8wL0I2MjE3MzVFMzI0MDQ2RkZGQzFERDc1RDRFRDg4MTVFMDhDRDI1QUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQjYyMTczNUUzMjQwNDZGRkZDMURENzVENEVE
ODgxNUUwOENEMjVBRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05UQ0NBVFYvMC8zNDMzMmUzMjMy
MzcyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMzM4MzgzNTMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBK+MaMA0GCSqGSIb3DQEBCwUAA4IBAQA0IwEQSN3KoeyQYmc3xd43klaa
h9BKm1nB35HBzHvmEIKrwgat2/ZE7pb31fUPeUxCLeu+Ouaa2DDMpWB4UfDRrOJp
Q7OBEVvnKJSxKi6Av2um26bW69jnIlB1dt550GTTowXL8WhyZ0ApTiNfYC9PrXQD
xbAyyTCWIVrN5+ID5KDxNilGPvGiJiI2WCJy6ljt0rR5nPWF7EWtxja1w61ruBx1
iGz/kF/vHBSxV/4xXZ34vxahQk1PEYenMl8pkWHIMpBfNtvaQMXf1KK12OnapEMe
Fmw7ZwP4Bxmp0fbeKXQ3B4zyJ24AR/zdUPdSg1+QIP7vSb3V8oxC7HvnKWNo
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:39 2026 by rpki-client