Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2034373830.roa
File: 3139322e37322e342e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier: Ba5i8ude16dQiEfcAiO+btSj/eH4uGS0xcFo7grp3x0=
Subject key identifier: C8:FD:E5:DA:EF:1D:67:56:96:B0:C1:CE:57:00:D2:ED:24:22:63:9F
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 20CAB6EA7218EF23991AEF770BDA2B04C30BC206
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:31:59 +0000
ROA not before: Mon 11 May 2026 16:26:59 +0000
ROA not after: Mon 10 May 2027 16:31:59 +0000
asID: 4780
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ca:b6:ea:72:18:ef:23:99:1a:ef:77:0b:da:2b:04:c3:0b:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 16:26:59 2026 GMT
Not After : May 10 16:31:59 2027 GMT
Subject: CN=C8FDE5DAEF1D675696B0C1CE5700D2ED2422639F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:49:f0:14:28:56:75:54:11:34:c8:cc:96:
d2:1d:88:5e:f8:ff:00:a4:61:27:90:49:aa:58:62:
7c:9f:2f:80:a6:5c:51:ab:66:34:da:91:31:17:12:
1b:47:5f:2a:23:15:bf:d5:9b:06:e2:25:da:b0:fb:
23:1e:c4:d4:42:45:8f:50:eb:df:13:65:71:88:10:
fd:33:31:4a:e6:94:a9:1f:0b:07:d4:9e:32:33:62:
d6:ab:e1:32:6b:a5:0f:ea:d5:0b:e2:86:e3:30:4c:
f1:d9:7a:ac:c3:71:cd:22:c1:e8:89:ef:e6:79:0c:
04:c2:b7:df:86:a7:93:8f:07:5e:49:95:16:28:d0:
16:74:e9:f5:2f:34:52:61:0b:01:5c:fe:84:65:8c:
fa:d0:3f:7a:33:5e:b5:4d:71:e8:b6:84:45:a0:8e:
be:17:ff:b4:a5:57:59:8f:fd:73:63:b4:7d:6b:6a:
76:1f:05:f8:03:94:37:15:29:a0:c1:d9:f1:75:d9:
84:8b:61:57:67:07:1c:7e:c8:c0:41:45:ff:7b:f8:
e0:a8:59:5a:3b:ab:7c:5e:dc:1b:79:a6:70:cc:44:
e6:d9:a0:93:f0:43:4d:09:f4:ac:4d:be:01:ff:c4:
37:4b:9d:f5:a9:82:22:25:f0:c1:65:7a:f6:05:43:
b7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:E5:DA:EF:1D:67:56:96:B0:C1:CE:57:00:D2:ED:24:22:63:9F
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
55:1a:d6:1c:3b:f4:f1:69:a4:ca:11:38:3e:c2:bf:e5:d0:86:
ed:50:47:7c:28:0e:2b:65:81:bd:0e:52:e6:d4:51:5f:a3:2f:
ec:5a:4d:81:65:86:f7:2f:a4:f7:30:bc:4d:7a:26:99:93:5f:
5d:8e:24:f7:33:21:74:da:3d:86:11:e7:0f:e0:54:47:3a:10:
5b:b4:d2:bb:7d:81:af:bd:ef:8c:21:1c:ba:9f:37:8d:95:11:
ee:62:b3:55:07:3a:d5:ca:13:6f:a5:52:1e:74:28:17:a7:dc:
2c:6a:a5:6a:39:1a:67:f1:1f:90:04:d0:10:3e:5c:54:3c:ec:
c1:16:50:0e:ad:cd:ad:cf:1a:e5:0e:af:50:1b:8f:1b:78:a2:
58:7f:99:44:ab:8b:af:85:41:c1:b4:5b:bd:92:31:ba:ed:c6:
d7:6e:c3:dc:80:2a:7c:34:d9:fa:a2:a8:31:bf:b1:51:eb:00:
b6:45:0f:28:b3:62:88:eb:6f:aa:84:a8:3e:21:2c:c2:e1:bd:
df:09:27:00:e0:de:5a:b9:8d:43:5d:83:a9:05:6d:ec:c7:db:
f0:1e:2d:83:c1:0c:db:7a:8f:e0:89:9c:da:6f:0a:ca:71:93:
73:fb:04:77:54:cd:a6:35:ed:d8:d0:18:e7:c9:37:d1:c3:80:
2c:f7:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:05 2026 by rpki-client