Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2039393139.roa
File: 3139322e37322e382e302f32312d3234203d3e2039393139.roa (raw, json)
Hash identifier: GbQSPFutvMmuWccC6y+kxjUSwDJ1ik/mT03jQDCuwD4=
Subject key identifier: 99:09:D0:D8:E8:26:FA:4D:20:A6:B0:0B:69:50:13:C0:A0:7F:1E:BC
Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Certificate serial: 4E015CE2A7A1C3E2769E0D5A535F0F55E12624C5
Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2039393139.roa
Signing time: Mon 11 May 2026 17:07:44 +0000
ROA not before: Mon 11 May 2026 17:02:44 +0000
ROA not after: Mon 10 May 2027 17:07:44 +0000
asID: 9919
IP address blocks: 192.72.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:01:5c:e2:a7:a1:c3:e2:76:9e:0d:5a:53:5f:0f:55:e1:26:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B
Validity
Not Before: May 11 17:02:44 2026 GMT
Not After : May 10 17:07:44 2027 GMT
Subject: CN=9909D0D8E826FA4D20A6B00B695013C0A07F1EBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:2c:71:98:36:1a:6f:a3:4a:e8:13:e2:e2:
72:51:b3:72:ed:9e:a4:fb:37:0a:16:ce:c1:5c:90:
e8:17:9a:0a:a1:f8:dd:b7:1f:d8:e5:d7:11:41:cb:
6f:5a:50:18:4f:8a:d7:71:23:b3:96:0b:4a:59:b6:
64:d5:05:7b:ac:ea:f9:e5:b7:3c:97:49:36:42:2e:
36:7e:88:41:55:7a:a1:43:c0:b2:e0:63:a1:27:d3:
4f:6f:67:8e:14:c6:00:71:33:fb:09:81:be:0e:4c:
ca:b4:01:80:82:00:9e:14:43:2c:fd:67:ca:fb:6b:
a0:2e:64:d7:46:f4:ee:39:bc:c9:ff:05:80:02:d2:
80:54:df:e8:43:d4:2b:78:1e:51:eb:94:18:75:97:
2b:68:ce:0b:dd:a8:25:ed:73:55:88:42:41:10:fc:
a6:bf:4b:ab:ae:e3:1a:b6:c2:4e:ce:06:56:39:c7:
20:38:ce:bf:e0:f4:26:60:8b:be:be:1f:d9:26:81:
d7:d5:ca:ba:93:da:af:1f:b9:b8:36:1f:3d:87:26:
29:c2:f1:eb:34:db:7b:5f:d0:f4:02:b7:aa:26:68:
7a:68:af:1a:0b:f1:9a:a1:04:f8:a7:3e:4c:12:d1:
cc:15:1a:d3:c8:8c:3c:1c:45:5b:5e:d9:3e:78:b3:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:D0:D8:E8:26:FA:4D:20:A6:B0:0B:69:50:13:C0:A0:7F:1E:BC
X509v3 Authority Key Identifier:
keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e382e302f32312d3234203d3e2039393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.72.8.0/21
Signature Algorithm: sha256WithRSAEncryption
42:b0:25:68:11:94:cc:bb:27:a9:cc:b8:6d:7d:29:1f:ff:e6:
31:f9:fe:ad:cb:3a:9b:e2:e8:f2:1d:3e:74:88:d9:3b:f6:c5:
57:e7:fb:ea:ab:4e:c7:ee:a9:e0:ab:46:09:26:b2:d9:0a:89:
6c:a9:3c:90:b4:20:75:9b:12:22:46:75:ce:a0:cf:3e:59:b2:
dc:c8:8c:9f:65:c5:97:07:dc:26:21:4d:d8:63:6e:e7:3c:13:
55:07:1a:fc:e1:31:f2:64:33:ff:f4:0c:44:44:53:ed:9e:fa:
23:4b:41:b9:b2:8a:42:36:57:da:c2:3f:d8:68:fc:c1:46:5e:
e9:81:1e:0a:61:83:d0:d6:be:9f:c5:96:bb:35:8c:9e:0d:45:
a0:44:17:ce:61:fc:c6:fc:ce:53:f5:65:77:b4:ac:98:73:95:
82:e0:e8:2f:0c:71:fb:68:ee:51:f6:47:0c:27:f2:3d:df:07:
e8:a7:25:c3:0d:44:1a:1f:ce:81:a8:1b:02:4d:25:89:49:aa:
48:91:9c:84:01:60:01:4c:36:9d:69:df:18:f9:b4:4c:f4:27:
fa:19:60:cf:c2:67:66:9f:c3:59:30:01:53:b3:3b:42:90:40:
8c:24:6e:0c:96:dd:ab:d4:62:a5:7c:c9:73:b1:d7:4b:4f:16:
c7:c9:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:18 2026 by rpki-client