Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2034373830.roa
File: 3139322e37322e382e302f32312d3234203d3e2034373830.roa (raw, json)
Hash identifier: 1Hh6x51Jeg1BSF3NwDHjHunpz1y1V3E8ygnYaLHBszo=
Subject key identifier: 30:A3:0D:C3:F9:86:A5:37:62:C1:51:0D:FC:4B:09:D0:8F:C6:A1:2F
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 153FA4B8C7BE51CD59E43EB60CA6818F6F709C5A
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:32:01 +0000
ROA not before: Mon 11 May 2026 16:27:01 +0000
ROA not after: Mon 10 May 2027 16:32:01 +0000
asID: 4780
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3f:a4:b8:c7:be:51:cd:59:e4:3e:b6:0c:a6:81:8f:6f:70:9c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 16:27:01 2026 GMT
Not After : May 10 16:32:01 2027 GMT
Subject: CN=30A30DC3F986A53762C1510DFC4B09D08FC6A12F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:7c:f0:e9:6a:4a:b3:8c:b1:7a:34:10:fe:
72:9e:1b:ed:39:fd:a7:4e:33:b6:84:05:e7:54:e0:
88:13:71:a3:1c:e1:25:08:d0:91:1f:e8:d2:34:8f:
8f:91:76:ab:89:f3:34:6c:9d:a4:b2:c0:bf:32:e0:
63:1d:9f:c5:c0:7f:d0:18:2d:23:a1:74:07:3b:02:
a4:2e:62:44:41:cd:d6:5a:e2:7d:79:5c:b6:c7:36:
82:dd:1a:9d:aa:05:3d:32:f0:de:fd:a4:f3:45:59:
3b:49:af:b3:e5:35:74:7e:b9:55:90:cb:9e:5f:cd:
4f:18:ab:6e:10:0c:9f:b0:6e:4d:79:ca:9f:db:e3:
37:67:0d:ff:bf:c4:a4:c7:33:fa:86:a1:62:99:73:
f8:d7:0f:5a:79:fe:73:1f:95:b1:b3:e8:b5:f5:b7:
e4:d9:64:ed:66:f3:b8:2f:db:71:37:74:b3:c8:b9:
4b:d8:2c:46:bb:2e:5c:b5:b2:eb:fb:d6:4e:db:91:
b2:72:2e:c7:22:d5:2f:4f:17:98:2f:a1:bb:ce:c4:
96:33:b5:d5:2f:cd:7c:f0:8b:f1:45:09:7b:bb:2d:
68:b0:ef:f2:17:a3:5c:50:ed:7d:d5:db:ed:1d:5e:
d8:bb:64:ba:e7:c0:88:28:24:bf:35:35:c3:ef:6b:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A3:0D:C3:F9:86:A5:37:62:C1:51:0D:FC:4B:09:D0:8F:C6:A1:2F
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
87:cb:07:2d:b8:1f:19:13:d1:ef:f4:6f:ae:07:d5:70:e7:c3:
0c:c3:f1:ad:d9:3e:58:c7:c7:36:10:7e:a1:30:01:b1:51:27:
4f:2a:d5:67:cd:4c:43:98:de:cb:e4:c9:33:5a:ce:d4:62:46:
3e:aa:df:f4:3b:53:96:35:2d:eb:6c:51:3d:b2:a6:4d:0e:d0:
49:bb:c0:20:4d:9a:11:04:c3:d7:e2:8c:0e:58:ee:45:59:de:
31:10:ac:49:00:ef:dc:bb:26:be:76:bd:e0:40:0d:72:7c:ee:
58:90:38:55:49:60:c3:c8:72:e7:56:62:36:63:24:ec:f0:0f:
4a:71:39:9b:a5:36:87:82:13:38:ea:90:be:b9:40:a2:a5:db:
0e:58:75:1e:c4:58:bb:a0:dd:db:d2:fe:99:d2:2b:83:aa:a6:
d3:7e:22:aa:e2:a8:bc:68:45:d3:44:e5:b7:d0:56:e7:80:97:
49:1c:a4:d8:c9:d6:1d:c3:21:86:6a:43:7d:e8:0e:c7:61:76:
65:27:18:12:0d:e3:eb:39:dd:21:22:8a:4a:49:33:95:0c:48:
9c:69:4a:c6:8b:5e:5c:cb:7f:19:e0:00:60:33:7b:1f:67:5b:
7f:62:46:64:e8:ee:54:4f:e4:b2:c7:53:54:72:68:8f:82:ed:
22:d3:e5:ce
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUFT+kuMe+Uc1Z5D62DKaBj29wnFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5
NjEyQzczQjAeFw0yNjA1MTExNjI3MDFaFw0yNzA1MTAxNjMyMDFaMDMxMTAvBgNV
BAMTKDMwQTMwREMzRjk4NkE1Mzc2MkMxNTEwREZDNEIwOUQwOEZDNkExMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYHzw6WpKs4yxejQQ/nKeG+05
/adOM7aEBedU4IgTcaMc4SUI0JEf6NI0j4+RdquJ8zRsnaSywL8y4GMdn8XAf9AY
LSOhdAc7AqQuYkRBzdZa4n15XLbHNoLdGp2qBT0y8N79pPNFWTtJr7PlNXR+uVWQ
y55fzU8Yq24QDJ+wbk15yp/b4zdnDf+/xKTHM/qGoWKZc/jXD1p5/nMflbGz6LX1
t+TZZO1m87gv23E3dLPIuUvYLEa7Lly1suv71k7bkbJyLsci1S9PF5gvobvOxJYz
tdUvzXzwi/FFCXu7LWiw7/IXo1xQ7X3V2+0dXti7ZLrnwIgoJL81NcPva1czAgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUMKMNw/mGpTdiwVEN/EsJ0I/GoS8wHwYDVR0j
BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x
L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4
ODU5NjEyQzczQi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTM4
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzQzNzM4MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPASAgw
DQYJKoZIhvcNAQELBQADggEBAIfLBy24HxkT0e/0b64H1XDnwwzD8a3ZPljHxzYQ
fqEwAbFRJ08q1WfNTEOY3svkyTNaztRiRj6q3/Q7U5Y1LetsUT2ypk0O0Em7wCBN
mhEEw9fijA5Y7kVZ3jEQrEkA79y7Jr52veBADXJ87liQOFVJYMPIcudWYjZjJOzw
D0pxOZulNoeCEzjqkL65QKKl2w5YdR7EWLug3dvS/pnSK4OqptN+IqriqLxoRdNE
5bfQVueAl0kcpNjJ1h3DIYZqQ33oDsdhdmUnGBIN4+s53SEiikpJM5UMSJxpSsaL
XlzLfxngAGAzex9nW39iRmTo7lRP5LLHU1RyaI+C7SLT5c4=
-----END CERTIFICATE-----
Generated at Wed May 13 02:38:02 2026 by rpki-client