Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3232342e302f32302d3234203d3e2039393139.roa
File: 3139322e37322e3232342e302f32302d3234203d3e2039393139.roa (raw, json)
Hash identifier: IbJvzNWqowT9ss8SkDFFbTJBrs2hceylDNcxXN29XFI=
Subject key identifier: 9C:DB:87:91:3A:3F:70:0F:E6:ED:BB:15:83:57:B3:82:90:60:00:B0
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 24F6F51F526D8F2B467F9B9959E038091A32621C
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3232342e302f32302d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:19:20 +0000
ROA not before: Mon 11 May 2026 17:14:20 +0000
ROA not after: Mon 10 May 2027 17:19:20 +0000
asID: 9919
IP address blocks: 192.72.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f6:f5:1f:52:6d:8f:2b:46:7f:9b:99:59:e0:38:09:1a:32:62:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:14:20 2026 GMT
Not After : May 10 17:19:20 2027 GMT
Subject: CN=9CDB87913A3F700FE6EDBB158357B382906000B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:a6:fe:07:82:08:a2:46:5a:b7:0f:e1:d4:
35:4b:36:ff:84:8d:c8:0d:59:25:7b:e9:20:5d:bf:
4c:c4:f3:d1:c9:c8:3d:4f:e9:c6:6e:d0:89:89:fa:
9c:08:83:e9:55:6a:30:01:98:ae:ca:e8:bc:70:46:
6f:9b:11:68:2d:2a:6b:d2:5b:1f:28:6e:3d:2c:2c:
e5:d2:b9:99:10:f7:9d:86:3f:ab:24:2c:a2:04:3c:
40:30:62:b3:59:e4:5b:98:5d:0e:c7:46:bc:d6:53:
b9:de:8c:e7:f7:ef:74:37:3e:2c:ea:21:17:88:36:
bf:06:ee:99:79:42:dd:da:b7:b5:78:dd:0c:0b:4b:
82:64:79:90:2b:99:9d:dd:45:a7:d3:a1:f4:b2:17:
91:fc:84:4e:8b:4d:73:1c:46:03:90:c2:b8:19:ca:
c9:a0:78:0f:aa:49:a4:70:ae:66:5e:ac:7f:b2:b1:
42:98:40:32:27:5b:12:b8:aa:af:db:eb:76:92:ee:
cc:41:0c:73:b7:52:3d:7a:4a:df:50:50:de:2f:fc:
2d:96:f3:0a:04:4b:2a:dd:39:dc:c6:4c:29:58:87:
8f:e8:4a:52:5e:dd:51:1a:48:69:c5:4c:e6:4b:8d:
a0:b7:1e:2d:07:c4:8d:dd:ad:ea:6b:c9:9d:d1:bf:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:87:91:3A:3F:70:0F:E6:ED:BB:15:83:57:B3:82:90:60:00:B0
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3232342e302f32302d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.224.0/20
Signature Algorithm: sha256WithRSAEncryption
15:f2:c2:49:50:dd:b8:87:eb:56:01:aa:de:1d:21:de:72:0d:
08:5e:90:64:38:2e:61:a9:76:d3:22:4b:6f:e3:fa:d7:2f:a1:
c5:36:f4:29:1a:b7:cf:ed:f3:25:70:f0:2a:65:c4:ae:ac:ad:
e3:f0:ef:7a:df:70:2e:02:12:86:fe:66:e0:c3:f7:bd:c9:3e:
41:67:52:d1:24:de:87:d8:22:c2:5a:0a:37:3e:34:62:50:c5:
55:fe:20:55:e0:9a:c9:0d:4a:17:4f:1e:f0:a8:e2:4c:96:40:
b8:06:24:bd:ac:5e:31:4a:55:e2:fc:ae:48:1a:13:23:c2:e9:
8b:db:26:b4:48:e8:ac:6d:d7:0d:09:25:72:1a:cc:bb:9d:40:
f4:76:5c:d5:95:41:ba:d6:bc:18:a0:54:56:8a:63:7d:80:1b:
15:99:b7:c9:75:95:2a:6f:25:fb:24:0b:a0:7b:e9:e0:f6:89:
9b:ba:19:ad:5e:67:02:52:4d:60:cf:bc:2b:3b:c6:b6:b7:7d:
ec:8e:e6:10:35:0b:ff:3e:07:7d:44:b2:2d:d8:f3:fd:23:87:
79:01:af:d5:70:e9:59:63:d5:f1:d6:bf:3b:9a:62:42:df:8d:
f9:cc:e2:09:63:04:f8:0e:6b:15:c9:b9:ac:5e:e2:ea:1a:13:
4b:79:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:32 2026 by rpki-client