Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3132382e302f31382d3234203d3e2034373830.roa
File: 3139322e37322e3132382e302f31382d3234203d3e2034373830.roa (raw, json)
Hash identifier: LzN8cI51zk5jZy8rEOcECVIZmpi8vie+TUsPNlzdXuc=
Subject key identifier: FE:2D:3A:05:EF:14:57:40:F2:11:D1:AA:A1:10:26:EF:5A:99:9D:FB
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 16D0AABC54889940A14F412F36E7BE94316C8730
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3132382e302f31382d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:31:53 +0000
ROA not before: Mon 11 May 2026 16:26:53 +0000
ROA not after: Mon 10 May 2027 16:31:53 +0000
asID: 4780
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d0:aa:bc:54:88:99:40:a1:4f:41:2f:36:e7:be:94:31:6c:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 16:26:53 2026 GMT
Not After : May 10 16:31:53 2027 GMT
Subject: CN=FE2D3A05EF145740F211D1AAA11026EF5A999DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:94:4a:43:ba:cd:90:e8:7c:2d:14:a9:de:
58:0e:68:fc:bd:cb:61:3d:f5:ac:c8:97:ce:dc:88:
a1:48:fc:38:85:af:7e:30:0b:db:bb:8b:46:20:0c:
5f:e1:e1:80:42:d6:9c:42:56:2a:77:cc:11:72:c4:
43:88:f9:5a:fe:9d:87:54:af:a3:4b:7b:a8:34:25:
b2:27:4e:f7:74:6d:f7:7a:68:54:80:f0:5a:f8:45:
1e:f9:0f:73:11:ae:4a:82:34:8b:63:fb:2f:29:74:
25:dd:e1:25:c5:7b:41:57:80:14:33:3a:bf:d7:ac:
e9:15:b2:45:34:c3:23:7f:d1:a2:87:a2:bc:9a:18:
17:f3:07:13:42:c4:93:2f:85:a7:d4:5c:f7:ac:3a:
19:98:c3:08:d3:fb:56:29:ec:6a:f9:88:c1:c3:b4:
d5:09:e7:25:54:8d:17:3e:e5:6a:f7:b7:4f:37:b4:
44:10:4f:9e:b4:92:e7:dc:d2:7c:92:3e:44:e6:34:
80:73:2d:72:5b:4d:69:29:ab:3a:f9:15:c6:4f:22:
06:8c:92:2f:35:69:a7:af:99:0a:16:27:87:73:c9:
c3:5d:a6:ab:19:29:50:a7:62:16:49:b9:69:5a:3a:
f4:fb:38:2a:44:d0:6a:71:56:dd:0e:b8:11:03:e1:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:3A:05:EF:14:57:40:F2:11:D1:AA:A1:10:26:EF:5A:99:9D:FB
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3132382e302f31382d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
72:bd:a0:8e:0b:1c:1f:fd:d0:d0:18:0b:29:a7:e4:f6:81:6d:
3c:90:e2:2d:63:29:0e:5d:43:e4:82:6c:2a:dd:84:ff:e6:45:
60:a4:4b:32:c6:b3:9b:e4:0e:4f:8b:26:2a:2b:49:9d:6d:0b:
3c:dd:5a:c3:c1:c1:b2:c4:df:63:21:cc:5d:f1:a9:15:76:42:
f0:6d:4c:39:8c:59:dd:72:79:18:0b:10:69:e7:84:00:77:b1:
54:96:0a:ac:80:ee:22:e1:fa:44:3f:80:df:00:a3:eb:09:ac:
a1:bd:95:b3:01:03:26:91:cc:93:98:21:55:53:45:50:67:06:
e5:91:37:11:74:17:17:fc:14:33:1e:09:8c:ae:14:f6:52:ad:
aa:7c:a0:81:10:cf:79:a3:96:3b:b8:0d:aa:e3:06:41:7f:41:
0d:fa:5e:07:0b:62:79:f1:ba:c4:86:b5:fd:a3:82:5f:79:05:
39:4b:f5:4a:4c:48:6c:84:43:13:18:d3:0b:a5:9c:38:10:00:
b1:d6:f6:a1:55:dc:98:c9:d1:d4:4d:4f:51:7a:a6:13:a7:f0:
50:3d:e1:67:f0:0a:d9:d9:25:ef:d7:92:f4:e5:87:b0:fd:34:
3c:b0:cf:4e:77:5e:3a:18:76:8a:f0:d1:95:6a:19:b2:47:a6:
5b:66:0a:c6
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUFtCqvFSImUChT0EvNue+lDFshzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA1MTExNjI2NTNaFw0yNzA1MTAxNjMxNTNaMDMxMTAvBgNV
BAMTKEZFMkQzQTA1RUYxNDU3NDBGMjExRDFBQUExMTAyNkVGNUE5OTlERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/pRKQ7rNkOh8LRSp3lgOaPy9
y2E99azIl87ciKFI/DiFr34wC9u7i0YgDF/h4YBC1pxCVip3zBFyxEOI+Vr+nYdU
r6NLe6g0JbInTvd0bfd6aFSA8Fr4RR75D3MRrkqCNItj+y8pdCXd4SXFe0FXgBQz
Or/XrOkVskU0wyN/0aKHoryaGBfzBxNCxJMvhafUXPesOhmYwwjT+1Yp7Gr5iMHD
tNUJ5yVUjRc+5Wr3t083tEQQT560kufc0nySPkTmNIBzLXJbTWkpqzr5FcZPIgaM
ki81aaevmQoWJ4dzycNdpqsZKVCnYhZJuWlaOvT7OCpE0GpxVt0OuBED4Zm5AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQU/i06Be8UV0DyEdGqoRAm71qZnfswHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMx
MzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM0MzczODMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG
wEiAMA0GCSqGSIb3DQEBCwUAA4IBAQByvaCOCxwf/dDQGAspp+T2gW08kOItYykO
XUPkgmwq3YT/5kVgpEsyxrOb5A5PiyYqK0mdbQs83VrDwcGyxN9jIcxd8akVdkLw
bUw5jFndcnkYCxBp54QAd7FUlgqsgO4i4fpEP4DfAKPrCayhvZWzAQMmkcyTmCFV
U0VQZwblkTcRdBcX/BQzHgmMrhT2Uq2qfKCBEM95o5Y7uA2q4wZBf0EN+l4HC2J5
8brEhrX9o4JfeQU5S/VKTEhshEMTGNMLpZw4EACx1vahVdyYydHUTU9ReqYTp/BQ
PeFn8ArZ2SXv15L05Yew/TQ8sM9Od146GHaK8NGVahmyR6ZbZgrG
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:22 2026 by rpki-client