Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2034373830.roa
File: 3139322e37322e33322e302f31392d3234203d3e2034373830.roa (raw, json)
Hash identifier: IAJDcSfRLpjVsd3ilJuaUqAl0u4sdr8+zfKeB8N1STk=
Subject key identifier: 5A:5E:49:60:13:DF:13:CE:02:03:00:7E:3C:94:C2:22:D2:59:35:55
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 6C22F67A7AB514666CB2DABEDB77F8EB4F8B5FF1
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:31:58 +0000
ROA not before: Mon 11 May 2026 16:26:58 +0000
ROA not after: Mon 10 May 2027 16:31:58 +0000
asID: 4780
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:22:f6:7a:7a:b5:14:66:6c:b2:da:be:db:77:f8:eb:4f:8b:5f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 16:26:58 2026 GMT
Not After : May 10 16:31:58 2027 GMT
Subject: CN=5A5E496013DF13CE0203007E3C94C222D2593555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:08:3f:a7:c7:83:cf:17:f9:16:b5:4a:90:
51:34:ca:9a:29:50:b2:12:c9:bf:fd:fb:e3:be:dd:
5f:8a:39:e9:b7:0d:30:02:6b:d3:86:70:2d:3a:40:
3b:60:75:18:3c:5a:71:c8:d6:ba:21:77:47:22:dc:
2a:33:6c:ee:64:b7:7c:50:07:ff:ed:13:17:4b:cb:
5b:21:41:ad:81:0f:2b:3f:aa:8f:87:76:14:c4:48:
fe:c3:6a:58:e9:39:d9:05:79:70:1b:38:e5:56:da:
97:32:c0:7f:d7:ca:1d:fc:76:e0:18:14:1e:b1:0d:
a9:18:82:ae:f9:69:f0:f3:88:ec:27:38:e4:7c:44:
66:b1:5f:63:56:04:da:67:35:78:4e:66:77:59:61:
ba:5b:74:4b:99:62:75:09:39:f3:c4:06:bb:a2:7a:
3c:80:d5:c6:fe:21:32:c7:49:4f:c2:64:ee:ba:3c:
13:21:50:55:68:cb:be:80:2e:5d:0e:0d:75:2a:c1:
9b:e6:30:79:bd:84:dc:b8:3d:c2:70:a7:b8:80:45:
dc:42:e9:30:83:22:47:17:99:90:22:b3:e7:4f:c9:
87:78:ee:a7:ee:f9:8d:90:f8:17:db:fe:d2:fb:0a:
5f:65:57:a7:71:b6:ee:df:dc:c3:08:c6:90:ec:55:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:49:60:13:DF:13:CE:02:03:00:7E:3C:94:C2:22:D2:59:35:55
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
92:b3:c8:89:5e:80:1c:24:be:01:54:02:b3:83:11:c2:2d:50:
f8:b0:b5:ea:b7:5f:e4:3c:04:75:06:02:1e:2a:90:76:10:bd:
39:01:45:d8:6a:89:f4:2b:d2:1a:31:10:8a:1e:d9:8a:e0:f2:
16:8d:56:2a:80:a0:8c:46:ec:3e:29:70:16:c9:05:cd:d9:27:
04:ce:8a:d4:de:63:4e:fd:89:8d:1d:ba:98:03:9c:8f:d1:14:
14:fc:45:30:16:09:17:75:9a:f9:02:fc:47:96:7b:fa:7f:c8:
d6:39:36:35:5b:64:9e:90:85:23:b6:6a:7e:1c:4b:0c:ef:3e:
e4:d4:fd:6b:55:2c:ba:f2:28:4c:3f:80:82:b3:92:bb:08:f6:
ce:1c:2c:0e:61:a4:01:90:51:03:cc:b1:d0:5f:eb:43:3f:df:
57:95:66:87:2f:f1:2c:ba:10:54:4e:0b:18:61:3f:d9:eb:6b:
b7:f1:83:16:4a:49:9f:6b:c7:fa:78:75:39:f2:8e:3c:08:93:
d8:10:b5:d3:3e:da:36:ab:f8:3f:b0:e7:bd:3c:63:43:08:3d:
69:17:1d:56:5e:25:16:46:73:5b:9c:e5:e9:28:c6:42:4d:29:
d1:83:3e:b8:76:5f:69:9b:d0:9d:a6:aa:33:e8:f6:cb:c9:59:
a0:78:24:8f
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUbCL2enq1FGZsstq+23f460+LX/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA1MTExNjI2NThaFw0yNzA1MTAxNjMxNThaMDMxMTAvBgNV
BAMTKDVBNUU0OTYwMTNERjEzQ0UwMjAzMDA3RTNDOTRDMjIyRDI1OTM1NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblwg/p8eDzxf5FrVKkFE0ypop
ULISyb/9++O+3V+KOem3DTACa9OGcC06QDtgdRg8WnHI1rohd0ci3CozbO5kt3xQ
B//tExdLy1shQa2BDys/qo+HdhTESP7DaljpOdkFeXAbOOVW2pcywH/Xyh38duAY
FB6xDakYgq75afDziOwnOOR8RGaxX2NWBNpnNXhOZndZYbpbdEuZYnUJOfPEBrui
ejyA1cb+ITLHSU/CZO66PBMhUFVoy76ALl0ODXUqwZvmMHm9hNy4PcJwp7iARdxC
6TCDIkcXmZAis+dPyYd47qfu+Y2Q+Bfb/tL7Cl9lV6dxtu7f3MMIxpDsVZNlAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUWl5JYBPfE84CAwB+PJTCItJZNVUwHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMz
MzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBI
IDANBgkqhkiG9w0BAQsFAAOCAQEAkrPIiV6AHCS+AVQCs4MRwi1Q+LC16rdf5DwE
dQYCHiqQdhC9OQFF2GqJ9CvSGjEQih7ZiuDyFo1WKoCgjEbsPilwFskFzdknBM6K
1N5jTv2JjR26mAOcj9EUFPxFMBYJF3Wa+QL8R5Z7+n/I1jk2NVtknpCFI7ZqfhxL
DO8+5NT9a1UsuvIoTD+AgrOSuwj2zhwsDmGkAZBRA8yx0F/rQz/fV5Vmhy/xLLoQ
VE4LGGE/2etrt/GDFkpJn2vH+nh1OfKOPAiT2BC10z7aNqv4P7DnvTxjQwg9aRcd
Vl4lFkZzW5zl6SjGQk0p0YM+uHZfaZvQnaaqM+j2y8lZoHgkjw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:53 2026 by rpki-client