
$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa
File: 323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (raw, json)
Hash identifier: NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=
Subject key identifier: BB:7A:19:3E:51:B9:C1:37:02:B5:41:33:FD:7C:2E:CF:77:5F:E6:06
Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial: 2664540566AB9F86163D9795143AF12905658B14
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa
Signing time: Mon 11 May 2026 17:58:36 +0000
ROA not before: Mon 11 May 2026 17:53:36 +0000
ROA not after: Mon 10 May 2027 17:58:36 +0000
asID: 216198
IP address blocks: 2402:43e0:9000::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:64:54:05:66:ab:9f:86:16:3d:97:95:14:3a:f1:29:05:65:8b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Validity
Not Before: May 11 17:53:36 2026 GMT
Not After : May 10 17:58:36 2027 GMT
Subject: CN=BB7A193E51B9C13702B54133FD7C2ECF775FE606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:21:a2:23:8e:81:ed:83:d1:89:ff:6d:5c:
68:73:01:a2:15:5f:01:05:9d:fc:04:c2:01:3a:61:
5c:08:99:db:71:57:83:f3:cc:ab:6b:d1:ba:1e:7c:
f1:dd:b7:d1:a9:72:b5:fe:32:df:3f:ae:24:2e:57:
8e:1a:c4:01:71:5c:48:24:44:6a:27:bb:1a:24:d6:
f5:6b:60:31:74:3c:89:60:1d:91:1a:a6:5d:ee:16:
4c:dc:72:10:94:bd:c8:fc:9a:0d:62:08:c2:8a:bf:
e2:1f:89:fd:8e:85:69:a3:50:16:7d:6e:07:f7:e4:
42:05:aa:7d:68:76:57:92:fc:ea:7c:b5:46:28:c2:
28:2a:2b:3c:33:30:b2:12:b4:88:dd:cb:7a:0d:d7:
f8:3c:5c:26:4d:ce:f6:e8:9f:39:2c:bf:c1:c9:ff:
ce:77:16:d9:ea:56:14:2d:5e:52:ec:3e:a0:e2:67:
cb:20:5d:80:bc:b9:12:1f:52:53:df:32:d9:e9:88:
23:7b:62:72:fe:3d:dd:99:5f:26:84:5e:30:3c:54:
07:f9:bb:52:32:e7:ea:56:bb:d6:d0:70:8c:29:17:
26:c6:bc:bf:54:95:3a:e2:ad:a7:15:d3:b0:19:b2:
ee:4a:c1:be:e7:6f:7c:d3:fd:df:7b:e0:8b:3b:db:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:19:3E:51:B9:C1:37:02:B5:41:33:FD:7C:2E:CF:77:5F:E6:06
X509v3 Authority Key Identifier:
keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:9000::/48
Signature Algorithm: sha256WithRSAEncryption
cf:20:8a:ea:68:6a:65:19:39:95:cc:e2:3c:86:ea:c5:fa:51:
d9:96:ee:fd:a4:aa:23:88:a1:d0:fb:00:79:6a:98:0f:40:1d:
13:1e:8e:e4:c3:51:25:50:bc:07:19:66:3f:53:d8:43:42:4a:
01:31:24:9c:8d:14:ca:c1:45:d0:1e:f6:b5:a7:15:f4:f0:87:
d3:bb:cc:a9:51:04:c4:b2:62:00:88:5e:e8:15:12:dc:e5:cc:
65:49:e5:cd:6e:74:83:6a:82:f8:8c:f4:8d:e3:21:ca:47:4d:
08:bb:a4:e1:30:df:c8:ae:a1:65:fb:94:c9:0e:bb:ef:a4:e7:
36:d9:57:ea:4a:17:1a:e3:e9:97:07:cd:74:fd:83:76:28:73:
52:14:af:8c:5b:c8:5e:ab:95:51:0e:58:ab:b1:f7:56:22:52:
f4:39:89:8c:9e:4e:78:68:54:f8:4c:d3:84:24:e5:9f:c6:07:
36:a7:a0:87:a9:f2:ae:60:8c:dd:5b:18:f7:32:cf:0e:fd:f6:
22:14:7c:88:e1:9b:4c:8b:c9:22:be:b8:17:74:30:1c:44:72:
39:c2:2b:41:80:90:2c:82:75:49:c5:52:90:d9:fb:b5:ab:17:
ce:72:08:2c:d0:ef:0f:c0:65:e7:84:0a:a9:72:9c:46:3f:88:
bf:ef:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:45 2026 by rpki-client