Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2039393139.roa
File: 3139322e37322e342e302f32322d3234203d3e2039393139.roa (raw, json)
Hash identifier: Mc3y+NW93aC6lat66PDBZYR8qmh9c+fZPRpk7bBYllo=
Subject key identifier: 29:35:80:DC:AB:D8:8B:C7:A5:70:B9:0F:49:48:4B:23:5F:EE:CB:19
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 4024964F7E39AFB573CCCC628ECEF89ED85DDF36
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:19:25 +0000
ROA not before: Mon 11 May 2026 17:14:25 +0000
ROA not after: Mon 10 May 2027 17:19:25 +0000
asID: 9919
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:24:96:4f:7e:39:af:b5:73:cc:cc:62:8e:ce:f8:9e:d8:5d:df:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:14:25 2026 GMT
Not After : May 10 17:19:25 2027 GMT
Subject: CN=293580DCABD88BC7A570B90F49484B235FEECB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:72:40:b4:73:3d:dd:c3:a8:c9:38:fd:55:a5:
64:1d:a5:c4:0b:ad:14:d9:13:2e:c3:05:f3:70:d1:
02:53:1b:ec:b4:3e:33:75:d6:7f:94:39:99:f8:6a:
aa:35:8c:a8:07:99:d8:ac:6e:27:e1:94:f3:93:f4:
45:b2:09:5b:53:36:70:dc:b9:08:63:0f:94:5d:ba:
3c:97:cd:fc:0c:e8:21:37:37:c3:ee:60:5d:d2:12:
b9:95:56:e1:a8:c5:24:e1:a5:31:c6:2b:7a:50:77:
b7:f7:03:49:37:8d:77:26:2e:a2:b1:37:7b:39:13:
9e:46:bf:0d:74:d5:ec:13:f2:1b:05:c3:3c:e7:e1:
57:14:b1:18:c6:1f:35:1f:17:c0:2f:d8:fb:8f:a4:
fd:6c:c5:4a:5a:74:9f:06:cb:5b:aa:c3:19:19:8c:
a7:24:0f:22:d8:d5:1b:67:44:49:f5:f7:12:a4:f0:
61:b3:16:80:c5:9d:ca:45:c3:87:41:29:99:83:9e:
65:3b:89:37:05:cb:7c:16:50:a8:8c:4c:ea:93:c4:
c4:77:b8:0e:8d:a7:88:c2:b8:54:b3:46:f8:c6:31:
97:d2:66:cf:c8:48:44:1a:da:14:01:40:a3:dd:a9:
8b:bf:bc:de:4a:af:29:8a:e7:a8:ce:dc:46:e8:76:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:80:DC:AB:D8:8B:C7:A5:70:B9:0F:49:48:4B:23:5F:EE:CB:19
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e342e302f32322d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ab:d0:db:e7:87:4f:90:27:cd:27:59:69:b3:60:be:fb:91:
b2:29:fc:36:b9:74:6a:17:26:c2:9d:a0:e4:85:46:73:0f:79:
50:f6:1e:7c:bd:95:93:1c:5a:3a:b8:af:10:5d:44:cb:3f:15:
bd:53:9b:2d:be:e7:ce:aa:ad:e2:3a:13:1b:de:45:5f:7a:1c:
88:4b:a5:9e:25:d0:78:f9:ed:d0:64:cd:ad:e8:68:80:e7:8e:
1d:2b:9f:f5:9e:de:2d:4d:30:0a:0b:02:e2:9a:c3:45:90:83:
07:69:3b:ec:52:10:8f:49:83:3d:7e:8b:ea:0d:3b:87:e1:4a:
8b:eb:b0:2b:9d:ca:38:bd:f8:76:1e:5a:d4:59:16:5a:cd:49:
00:13:56:fb:2b:6f:38:b7:e1:6e:dd:51:91:b8:c7:3a:c1:ea:
b4:fb:18:08:99:b8:99:66:60:22:9c:7a:a5:40:9e:ee:1c:c4:
28:78:ce:65:0c:3a:d1:b8:9a:41:d4:7b:f7:5f:01:ed:a5:25:
30:9a:4b:80:b5:ff:0b:6e:d2:4d:4a:2c:4f:45:9e:7f:7f:df:
05:9c:af:54:e5:23:dc:f4:b8:8a:28:6e:33:29:7e:a0:ac:17:
7e:d9:8c:48:91:24:68:8d:62:42:b1:60:ac:a3:bb:d1:4b:d3:
49:f8:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:27 2026 by rpki-client