Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3133392e3137352e302e302f31362d3234203d3e2039393139.roa
File: 3133392e3137352e302e302f31362d3234203d3e2039393139.roa (raw, json)
Hash identifier: 3pZVp3TNQ/sRl3TjQTLvkQ3q6JCaq0d/zamjf+77kx8=
Subject key identifier: 3D:A8:1D:18:4B:45:D9:70:10:91:61:97:54:33:FF:9B:0D:3E:A0:84
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 24B12FACD00DB60C6CD105499ECFE4AAB2F2FDA2
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3133392e3137352e302e302f31362d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:19:13 +0000
ROA not before: Mon 11 May 2026 17:14:13 +0000
ROA not after: Mon 10 May 2027 17:19:13 +0000
asID: 9919
IP address blocks: 139.175.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b1:2f:ac:d0:0d:b6:0c:6c:d1:05:49:9e:cf:e4:aa:b2:f2:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:14:13 2026 GMT
Not After : May 10 17:19:13 2027 GMT
Subject: CN=3DA81D184B45D970109161975433FF9B0D3EA084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2e:5f:97:90:81:56:20:9e:de:8f:ea:00:78:
9a:ab:e8:6e:a2:f8:19:b5:19:87:7f:14:40:d7:4a:
3b:b0:94:fe:11:72:71:b8:63:ae:67:06:bd:d9:47:
9d:e5:35:6d:56:0a:c0:94:fb:43:0f:62:65:90:b0:
12:19:53:7b:7f:1f:65:c2:e1:5f:47:97:7d:ce:88:
17:08:c8:ec:cf:f4:70:37:08:99:15:cd:f0:cf:cd:
85:53:28:26:05:99:b0:f0:af:8c:e5:84:ba:93:d0:
31:7f:39:ab:e2:03:79:44:a3:f6:eb:10:2e:43:23:
70:51:a1:45:83:da:c0:12:c7:4e:a8:87:df:a2:1e:
e3:96:73:10:10:fd:8e:47:f4:94:cf:0a:2b:43:98:
f5:63:df:bf:65:62:72:b2:3e:55:fc:c9:95:9b:e0:
7f:41:0f:fb:53:42:3d:e6:91:d0:cf:e4:1a:fa:db:
b1:9b:d3:bb:d1:f0:e0:5b:8a:11:5c:e2:71:ed:8a:
7c:21:4e:e1:c7:3c:61:19:34:c4:c0:76:04:30:5d:
80:0b:02:52:c4:2b:bd:e2:12:a9:e2:8b:2e:7f:c9:
7f:a1:3f:68:35:d1:95:ee:03:05:43:10:10:4c:f1:
fd:3e:64:23:da:52:b5:08:22:1a:5e:8b:1b:37:51:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:1D:18:4B:45:D9:70:10:91:61:97:54:33:FF:9B:0D:3E:A0:84
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3133392e3137352e302e302f31362d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:67:2b:06:74:ed:95:51:40:16:b7:67:af:90:fe:94:c2:30:
57:05:ac:e9:db:b9:cf:16:42:69:c3:d7:ad:39:ad:6b:a8:56:
67:6d:a5:aa:bd:49:d6:da:6f:a4:22:41:84:b9:75:65:74:7b:
88:a4:f4:35:50:75:b2:fb:4b:bd:61:df:bc:ef:f2:4e:46:dc:
13:b2:78:a5:b4:80:3a:30:02:04:06:62:fe:ad:e4:bb:40:0e:
79:a5:85:88:56:38:37:6c:14:4a:d0:07:1d:22:17:11:60:b9:
1d:27:17:45:d3:db:76:cc:fc:71:54:a1:4b:a8:e6:1d:94:44:
8f:eb:b0:49:30:e8:a2:dd:47:12:ed:00:4d:30:75:17:80:f4:
bb:45:52:38:37:b2:05:03:db:c8:1d:c9:0b:f5:b2:be:eb:6a:
c8:3a:d7:fc:da:b3:00:66:6e:b1:b0:1a:ad:04:f2:d2:bb:c3:
ff:65:66:18:fa:d8:05:e9:55:2d:3e:73:72:d8:aa:ec:99:3e:
53:5a:32:e9:31:ae:9d:1f:d5:40:95:24:a7:71:e9:96:40:e2:
e3:f2:b3:33:97:1d:47:68:11:b3:c4:14:3e:4a:4b:63:cc:d2:
d3:e6:e1:d7:49:35:c5:56:6c:66:08:17:b6:16:82:e9:e7:70:
c8:48:a4:52
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIUJLEvrNANtgxs0QVJns/kqrLy/aIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA1MTExNzE0MTNaFw0yNzA1MTAxNzE5MTNaMDMxMTAvBgNV
BAMTKDNEQTgxRDE4NEI0NUQ5NzAxMDkxNjE5NzU0MzNGRjlCMEQzRUEwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLl+XkIFWIJ7ej+oAeJqr6G6i
+Bm1GYd/FEDXSjuwlP4RcnG4Y65nBr3ZR53lNW1WCsCU+0MPYmWQsBIZU3t/H2XC
4V9Hl33OiBcIyOzP9HA3CJkVzfDPzYVTKCYFmbDwr4zlhLqT0DF/OaviA3lEo/br
EC5DI3BRoUWD2sASx06oh9+iHuOWcxAQ/Y5H9JTPCitDmPVj379lYnKyPlX8yZWb
4H9BD/tTQj3mkdDP5Br627Gb07vR8OBbihFc4nHtinwhTuHHPGEZNMTAdgQwXYAL
AlLEK73iEqniiy5/yX+hP2g10ZXuAwVDEBBM8f0+ZCPaUrUIIhpeixs3UW4ZAgMB
AAGjggHaMIIB1jAdBgNVHQ4EFgQUPagdGEtF2XAQkWGXVDP/mw0+oIQwHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTMzMzkyZTMxMzczNTJl
MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzOTM5MzEzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAIuv
MA0GCSqGSIb3DQEBCwUAA4IBAQA9ZysGdO2VUUAWt2evkP6UwjBXBazp27nPFkJp
w9etOa1rqFZnbaWqvUnW2m+kIkGEuXVldHuIpPQ1UHWy+0u9Yd+87/JORtwTsnil
tIA6MAIEBmL+reS7QA55pYWIVjg3bBRK0AcdIhcRYLkdJxdF09t2zPxxVKFLqOYd
lESP67BJMOii3UcS7QBNMHUXgPS7RVI4N7IFA9vIHckL9bK+62rIOtf82rMAZm6x
sBqtBPLSu8P/ZWYY+tgF6VUtPnNy2KrsmT5TWjLpMa6dH9VAlSSncemWQOLj8rMz
lx1HaBGzxBQ+SktjzNLT5uHXSTXFVmxmCBe2FoLp53DISKRS
-----END CERTIFICATE-----
Generated at Wed May 13 03:48:05 2026 by rpki-client