Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2039393139.roa
File: 3139322e37322e31362e302f32302d3234203d3e2039393139.roa (raw, json)
Hash identifier: YfF/tC6LRnh/bsWMphOM4qUtQ57nFavnsqtfTl2of/U=
Subject key identifier: 04:B2:31:24:12:3A:6A:C4:FE:DE:EC:2A:76:31:64:5C:2C:FF:4F:1C
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 44E6F9682030848AA7FA606739A41FD41962253D
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:07:47 +0000
ROA not before: Mon 11 May 2026 17:02:47 +0000
ROA not after: Mon 10 May 2027 17:07:47 +0000
asID: 9919
IP address blocks: 192.72.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e6:f9:68:20:30:84:8a:a7:fa:60:67:39:a4:1f:d4:19:62:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:02:47 2026 GMT
Not After : May 10 17:07:47 2027 GMT
Subject: CN=04B23124123A6AC4FEDEEC2A7631645C2CFF4F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:c7:c9:07:0f:ec:69:70:a3:39:72:e0:ac:
7f:55:8b:f1:2b:2d:49:9f:cc:34:62:6f:82:a9:08:
4e:a1:23:2b:38:62:8c:5d:ba:b6:4a:ee:85:f4:87:
75:a0:af:b4:03:4d:4c:5c:58:fe:b6:b1:6b:b1:85:
9e:80:b9:d2:9f:13:ae:16:67:c8:34:bc:24:69:a3:
4b:95:f2:41:8c:71:e4:f6:21:41:a0:ee:d4:5e:95:
01:08:8e:af:c0:ce:9e:72:d2:77:88:04:01:41:4d:
13:b8:b9:1b:0f:4b:d0:56:cd:e5:f5:4f:22:fe:06:
af:41:6c:8a:77:d6:1c:63:f1:d3:e7:84:ef:72:f5:
23:77:32:76:c5:78:18:fe:49:39:8c:fc:03:ef:ac:
99:4f:8e:c8:c4:98:36:2b:3f:8a:2e:f7:c3:c6:bf:
fa:eb:d2:70:e7:a6:c7:10:4d:5a:ad:9b:8b:33:4c:
46:e4:aa:7e:72:41:ca:2f:9d:f9:c8:53:9a:c6:ba:
05:29:44:64:60:6d:96:08:37:14:fa:de:1f:32:64:
c6:59:b4:1a:31:81:42:61:fd:50:66:ae:89:ff:8b:
22:09:8a:37:c8:9f:bb:99:cc:27:36:8b:f4:65:91:
fc:8c:a1:c0:e9:29:71:75:9d:92:9d:fe:94:c5:f9:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:31:24:12:3A:6A:C4:FE:DE:EC:2A:76:31:64:5C:2C:FF:4F:1C
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e31362e302f32302d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:4d:ca:e3:a3:b0:cd:bf:48:99:77:c3:82:d1:c0:d2:1e:57:
91:7a:eb:f7:4b:82:e1:08:e5:46:03:7a:9c:e0:39:aa:55:5c:
d7:ab:80:9a:3a:df:a2:38:fe:87:3b:f9:16:fe:05:0c:dc:54:
26:b7:4c:57:06:11:7e:fe:89:6a:19:02:d8:0c:ca:a9:0e:3f:
97:f6:8b:f4:43:3d:9f:d0:2e:27:44:18:3b:1c:a5:4e:a3:d9:
77:dd:a1:0b:a4:0c:cc:de:10:6a:fa:33:1b:8a:21:d0:34:86:
c5:9a:0b:be:f7:e4:f6:37:bc:c8:71:1b:01:2d:09:f7:3b:9e:
29:52:ae:91:8a:21:98:78:98:a9:11:d2:57:a3:9d:25:16:ea:
53:60:0f:b3:d3:e5:61:3c:56:e7:de:3d:3e:dc:fc:ca:c0:e0:
41:85:55:63:11:17:4c:5c:b5:4c:7a:2c:4a:5b:02:f3:de:f7:
19:75:6a:ee:e3:ff:b8:ea:77:dc:45:26:e8:39:1f:80:c4:f0:
c3:06:4b:80:9f:cd:dc:a7:61:14:3c:cd:4f:0e:91:fe:28:85:
3c:4b:65:33:45:10:1b:2f:bc:f1:9d:48:b7:0b:bc:de:ca:5e:
6e:dd:5a:ce:36:9f:f7:37:9b:4f:b9:ad:88:b8:38:f0:b9:70:
f8:63:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:35 2026 by rpki-client