Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e36342e302f31382d3234203d3e2039393139.roa
File:                     3139322e37322e36342e302f31382d3234203d3e2039393139.roa (raw, json)
Hash identifier:          6ubqZ+h8/1xZM/Z1mXArWRioq7/yui3/nMg9Ngz6hKA=
Subject key identifier:   4F:B5:CB:8F:04:01:F4:39:C9:C3:2A:10:30:D5:CC:F3:EF:6B:5A:44
Certificate issuer:       /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial:       214DE82032C1E0498554571795697A65A01DED01
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e36342e302f31382d3234203d3e2039393139.roa
Signing time:             Mon 11 May 2026 17:07:38 +0000
ROA not before:           Mon 11 May 2026 17:02:38 +0000
ROA not after:            Mon 10 May 2027 17:07:38 +0000
asID:                     9919
IP address blocks:        192.72.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4d:e8:20:32:c1:e0:49:85:54:57:17:95:69:7a:65:a0:1d:ed:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
        Validity
            Not Before: May 11 17:02:38 2026 GMT
            Not After : May 10 17:07:38 2027 GMT
        Subject: CN=4FB5CB8F0401F439C9C32A1030D5CCF3EF6B5A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:7f:a8:cf:65:45:69:05:cb:39:cc:e1:61:
                    fb:43:1c:a6:a1:b0:3c:72:47:1e:74:dc:cd:e4:68:
                    23:6a:3b:3d:48:cc:32:d6:b8:69:8d:8b:94:1e:1a:
                    4a:8b:53:e7:2c:c2:98:7d:a2:7f:48:7f:23:8a:e6:
                    37:27:ea:f2:94:42:bc:08:ec:a7:2c:a3:05:ac:0a:
                    90:3c:de:ea:5e:6c:5d:7e:35:61:d9:b7:4a:a5:61:
                    32:82:2e:49:89:12:6f:6f:8e:2c:71:5c:f3:a1:40:
                    64:2d:10:55:d3:d2:1e:56:41:d6:46:ca:13:45:56:
                    8e:7b:af:98:79:0f:82:17:01:b8:da:24:f3:12:5d:
                    4a:5b:c6:71:88:81:e3:87:35:60:60:96:27:fc:73:
                    1c:83:2e:1d:7f:e0:ed:52:81:df:09:96:d4:ba:98:
                    c0:54:4f:e1:56:5d:11:74:2b:1c:7b:b4:49:d6:84:
                    6d:c5:af:90:95:db:94:c8:94:4d:c2:04:7c:d4:70:
                    c6:75:8a:97:74:4d:67:71:1e:fe:28:e1:7a:6c:fb:
                    ab:df:56:71:b8:5d:33:d3:f1:d6:f1:f6:31:86:0e:
                    8b:91:bd:36:b1:91:88:67:af:e5:c0:3f:d1:d8:ff:
                    11:34:00:e8:0f:55:60:0e:87:93:e0:92:00:bd:b9:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:CB:8F:04:01:F4:39:C9:C3:2A:10:30:D5:CC:F3:EF:6B:5A:44
            X509v3 Authority Key Identifier:
                keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e36342e302f31382d3234203d3e2039393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:07:dd:b6:e5:35:a5:30:ba:0a:77:5c:b7:27:f1:7a:95:fc:
         c3:1a:f1:94:8f:fa:da:47:06:de:64:da:1d:e6:be:e9:44:48:
         28:52:84:9a:60:e5:fa:32:77:98:5d:93:1e:34:fa:aa:69:5f:
         47:15:42:fa:69:73:89:ef:a7:ab:ef:15:66:e3:96:08:33:52:
         b5:99:67:cd:24:07:ad:ab:c1:85:27:b4:64:8a:20:9c:4b:3f:
         08:6e:6c:b9:85:63:c4:d7:dc:e9:9b:ce:47:af:d0:d4:d9:e9:
         f8:96:7b:91:d8:19:35:7f:70:6d:27:3a:ec:25:89:54:ce:76:
         41:6d:b3:da:25:3f:86:6c:53:3b:e7:5d:39:85:1d:a7:d6:aa:
         46:a1:56:3f:d1:78:e5:fd:e9:b0:f7:63:cc:fc:b7:26:0f:f3:
         d6:68:0d:8b:74:fb:41:28:e8:a2:12:90:d6:17:95:91:d1:9d:
         e4:60:3f:4c:59:74:bd:3e:ec:f6:db:f7:36:79:50:cf:52:44:
         61:14:fe:6a:13:80:2e:47:a8:59:23:6d:94:ae:8b:93:05:5f:
         2d:cd:39:96:ea:3e:b4:19:24:20:c3:da:7f:fe:ed:c2:9e:cf:
         eb:a4:f3:a6:76:03:78:46:2f:db:84:92:8c:ec:d7:4b:eb:56:
         05:9a:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:05 2026 by rpki-client