Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2034373830.roa
File: 3139322e37322e31362e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier: 9ZGrNp+VsLlXW7PeBXw8YpqEX/WVDXlTYIwuby9ILk4=
Subject key identifier: 04:3A:B9:2C:6C:FE:ED:05:DF:91:9C:26:F4:8C:40:31:B3:A5:85:07
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 3849EE5F44CDDFA6EE1D64F0BCFCF74F777E3D63
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:31:54 +0000
ROA not before: Mon 11 May 2026 16:26:54 +0000
ROA not after: Mon 10 May 2027 16:31:54 +0000
asID: 4780
IP address blocks: 192.72.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:49:ee:5f:44:cd:df:a6:ee:1d:64:f0:bc:fc:f7:4f:77:7e:3d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 16:26:54 2026 GMT
Not After : May 10 16:31:54 2027 GMT
Subject: CN=043AB92C6CFEED05DF919C26F48C4031B3A58507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:5e:21:a6:fa:77:e8:dd:86:0b:1f:8d:05:
ed:24:5e:43:dc:bf:a0:90:e0:18:85:6f:c0:2b:2e:
44:12:84:d8:1f:e0:b4:22:5f:08:60:96:d2:01:d2:
fe:cd:7d:25:63:27:ef:63:dc:1c:9e:a0:e9:20:df:
8c:a4:2a:1b:c4:bd:74:92:34:32:40:3d:20:5d:71:
0c:e2:89:85:d6:42:be:6e:f2:f6:7f:e8:4d:21:3b:
07:ee:45:fa:05:f2:c8:89:41:4f:a3:a4:02:eb:78:
08:cc:33:30:03:d3:2b:42:ba:43:12:75:c8:73:93:
28:0d:d3:91:84:16:d4:66:c8:85:a3:ad:11:48:28:
75:4d:09:65:20:e8:5d:14:4e:fd:0e:eb:18:1f:e4:
da:be:c5:f2:48:02:40:aa:fa:7e:c2:b5:79:0e:17:
72:06:41:eb:07:d5:1e:6a:b3:bb:81:3c:e9:9f:1f:
c9:45:d6:ac:ef:ca:d7:a0:ef:cb:66:b8:f5:ff:ed:
28:02:cb:79:76:f3:d6:73:cc:1f:db:c1:3a:d7:31:
56:61:af:a3:54:d1:3d:c2:79:32:b3:22:b8:30:ca:
0f:8e:13:4e:50:cb:71:eb:88:27:bf:cd:d2:4e:5b:
c9:26:db:f5:36:8b:cf:2c:6f:d2:83:33:ec:65:99:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:B9:2C:6C:FE:ED:05:DF:91:9C:26:F4:8C:40:31:B3:A5:85:07
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:60:7b:1c:1a:31:a2:13:06:66:03:46:80:3e:7f:ec:b9:38:
fe:d2:50:ca:8e:f1:50:94:5e:7d:28:67:0e:18:b0:9d:7c:d2:
56:c0:3b:ab:45:9e:f7:73:68:24:dd:57:bb:65:d2:99:0b:a6:
47:19:57:68:e0:3e:13:40:cb:8a:23:4f:b4:20:44:c7:1d:0f:
db:f1:b4:de:eb:41:d8:a6:60:c9:95:76:19:ce:3d:e5:1f:a8:
b9:88:46:63:e5:66:34:ac:b2:69:45:e4:ee:02:2e:de:63:a2:
e6:42:1f:67:91:ad:8f:c6:af:40:5d:cd:46:7c:5a:78:24:bc:
ae:1e:25:b7:7b:91:bb:3a:a4:76:12:ce:f5:41:9a:97:20:b6:
93:0a:97:68:a8:a1:6c:28:5b:a3:e3:04:77:dd:64:b4:b3:5a:
d9:03:9e:99:6c:6c:07:5b:3f:c3:2f:66:b8:17:48:3c:8e:05:
62:55:cd:aa:a4:9a:54:b1:ac:d6:54:76:0b:db:90:71:d4:50:
2b:6e:91:96:17:df:b7:98:c8:7c:d2:d2:f0:bf:90:ef:71:42:
56:b4:f5:5d:7b:79:40:2c:d0:18:b1:dd:1e:5b:7d:e1:65:7a:
d2:ea:7a:47:99:ff:6f:fe:a1:51:23:8c:f8:a3:12:84:39:8d:
f8:fb:7e:5c
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUOEnuX0TN36buHWTwvPz3T3d+PWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA1MTExNjI2NTRaFw0yNzA1MTAxNjMxNTRaMDMxMTAvBgNV
BAMTKDA0M0FCOTJDNkNGRUVEMDVERjkxOUMyNkY0OEM0MDMxQjNBNTg1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKA14hpvp36N2GCx+NBe0kXkPc
v6CQ4BiFb8ArLkQShNgf4LQiXwhgltIB0v7NfSVjJ+9j3ByeoOkg34ykKhvEvXSS
NDJAPSBdcQziiYXWQr5u8vZ/6E0hOwfuRfoF8siJQU+jpALreAjMMzAD0ytCukMS
dchzkygN05GEFtRmyIWjrRFIKHVNCWUg6F0UTv0O6xgf5Nq+xfJIAkCq+n7CtXkO
F3IGQesH1R5qs7uBPOmfH8lF1qzvyteg78tmuPX/7SgCy3l289ZzzB/bwTrXMVZh
r6NU0T3CeTKzIrgwyg+OE05Qy3HriCe/zdJOW8km2/U2i88sb9KDM+xlmX3JAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUBDq5LGz+7QXfkZwm9IxAMbOlhQcwHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMx
MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMBI
EDANBgkqhkiG9w0BAQsFAAOCAQEAHGB7HBoxohMGZgNGgD5/7Lk4/tJQyo7xUJRe
fShnDhiwnXzSVsA7q0We93NoJN1Xu2XSmQumRxlXaOA+E0DLiiNPtCBExx0P2/G0
3utB2KZgyZV2Gc495R+ouYhGY+VmNKyyaUXk7gIu3mOi5kIfZ5Gtj8avQF3NRnxa
eCS8rh4lt3uRuzqkdhLO9UGalyC2kwqXaKihbChbo+MEd91ktLNa2QOemWxsB1s/
wy9muBdIPI4FYlXNqqSaVLGs1lR2C9uQcdRQK26Rlhfft5jIfNLS8L+Q73FCVrT1
XXt5QCzQGLHdHlt94WV60up6R5n/b/6hUSOM+KMShDmN+Pt+XA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:06 2026 by rpki-client