Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e332e302f32342d3234203d3e2039393139.roa
File: 3139322e37322e332e302f32342d3234203d3e2039393139.roa (raw, json)
Hash identifier: qMTF96rAy8wZ4NUEpq4S8Q/4tASEMCoJMKXrGLo6KtQ=
Subject key identifier: 53:17:1C:25:42:34:91:26:52:39:69:F1:6C:5C:89:9A:9C:62:A9:D5
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 5D786570A5DC3719F5C059CA6969FA8E918F7527
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e332e302f32342d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:19:23 +0000
ROA not before: Mon 11 May 2026 17:14:23 +0000
ROA not after: Mon 10 May 2027 17:19:23 +0000
asID: 9919
IP address blocks: 192.72.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:78:65:70:a5:dc:37:19:f5:c0:59:ca:69:69:fa:8e:91:8f:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:14:23 2026 GMT
Not After : May 10 17:19:23 2027 GMT
Subject: CN=53171C2542349126523969F16C5C899A9C62A9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:cd:bc:92:17:d4:e8:1c:ab:ba:62:f7:db:
70:0b:31:a6:8b:67:1a:68:db:4c:3a:88:ab:70:1e:
5e:d5:9d:58:b1:82:30:fd:aa:0c:ed:d3:64:20:46:
61:43:65:76:ec:b5:2a:18:43:85:2e:65:0b:10:63:
52:6e:0c:2e:b3:00:95:12:11:c7:b9:3f:82:c1:0f:
66:0c:98:83:51:a6:3c:b9:a6:fb:a0:fb:36:69:98:
c4:3c:90:b8:1b:57:99:28:46:cc:35:7f:f9:40:24:
80:b6:45:8f:ae:b7:e6:de:43:c5:57:e1:3a:50:15:
82:4b:1b:b3:21:d7:27:fa:27:97:26:31:ec:33:d6:
9c:0c:db:5d:b0:5f:b9:6d:af:61:79:c0:f7:ab:59:
bc:12:bd:fc:bf:bb:7a:5e:05:2a:c8:b4:47:ef:e6:
bc:d6:9b:b8:48:71:d0:9a:2a:9b:94:4d:c9:3a:23:
68:50:7d:de:2b:c6:75:f2:f8:a5:56:ac:0e:28:4b:
c2:e9:f6:06:44:02:a9:6d:56:d7:ef:6e:49:37:49:
e2:28:52:ae:72:c5:fe:29:04:0a:06:76:f3:10:97:
bb:93:f4:6a:c9:0c:cf:c9:87:4a:3f:3d:13:de:29:
6b:43:7e:86:e0:87:93:25:d5:9b:a1:eb:f4:6b:9e:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:1C:25:42:34:91:26:52:39:69:F1:6C:5C:89:9A:9C:62:A9:D5
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e332e302f32342d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.3.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b1:e0:13:ef:a5:4f:48:84:3d:4d:75:ab:6e:ba:8b:fa:1e:
49:87:cb:ca:a8:b1:81:af:c9:ad:3f:de:3e:36:39:b4:96:f7:
55:f5:ae:1f:c1:34:3a:15:68:b4:fe:2b:59:c9:fa:16:7f:c3:
d2:26:b7:3a:41:50:55:4b:46:4d:ac:5d:0a:57:da:b6:32:d6:
15:4f:f1:fa:9b:6f:10:04:7b:e8:10:be:23:a2:17:3e:50:a0:
49:d4:96:5c:90:32:db:b6:d2:11:b2:74:e9:52:62:f0:4d:e5:
da:81:ea:3f:5e:f0:bf:c1:4b:3b:5e:e5:89:91:bd:47:39:5d:
e7:89:93:a2:d0:70:08:92:b4:b8:64:70:8f:27:8b:ad:b7:aa:
e2:f7:d1:f8:ce:2a:1f:c7:84:75:7b:dd:08:60:60:c0:14:ad:
bf:4a:5c:9b:16:13:26:77:60:f9:b7:08:33:71:df:21:dc:b5:
89:ee:4f:f9:3c:63:c2:a1:c1:19:da:5b:85:4d:bf:eb:1f:33:
64:ab:82:ad:53:4b:2c:2f:27:bb:2a:1e:06:c1:95:74:cd:3a:
08:ae:ee:17:2f:0b:e7:f7:cc:aa:88:0f:fe:63:2a:6e:03:79:
55:64:87:0c:7b:fc:33:e9:ca:e8:f5:a8:83:9a:40:fb:ed:27:
24:eb:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:59 2026 by rpki-client