
$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463313a3a2f34382d3438203d3e203138303430.roa
File: 323430323a343365303a6463313a3a2f34382d3438203d3e203138303430.roa (raw, json)
Hash identifier: 1ynMD9wwolFM/r1eysYUiMZsjCeofw/IUFu0vOHJA8M=
Subject key identifier: 64:8E:A8:8E:B2:3E:58:23:47:4E:9F:59:C4:56:1A:6A:4F:0B:BD:DD
Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial: 74A55DAAF0ED8DBCE82CE030F78CEAD8698D4AA3
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463313a3a2f34382d3438203d3e203138303430.roa
Signing time: Mon 09 Nov 2026 17:44:01 +0000
ROA not before: Mon 09 Nov 2026 17:39:01 +0000
ROA not after: Mon 08 Nov 2027 17:44:01 +0000
asID: 18040
IP address blocks: 2402:43e0:dc1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 04:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a5:5d:aa:f0:ed:8d:bc:e8:2c:e0:30:f7:8c:ea:d8:69:8d:4a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Validity
Not Before: Nov 9 17:39:01 2026 GMT
Not After : Nov 8 17:44:01 2027 GMT
Subject: CN=648EA88EB23E5823474E9F59C4561A6A4F0BBDDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:86:46:49:36:67:cc:6c:59:8f:25:bd:3e:
93:4f:5c:11:79:27:dd:07:09:8a:6e:d8:a1:f4:f7:
9a:94:c6:30:4d:34:c9:78:92:d0:c3:67:8c:07:3b:
35:d1:36:0c:bc:62:c6:05:3b:57:f6:60:f4:49:8f:
23:7e:4c:60:f7:94:0a:43:c4:f2:78:18:3c:2f:1d:
4f:1c:0f:f6:b9:64:2d:d6:75:09:bc:6c:05:b0:60:
96:e9:30:42:75:d4:fe:12:bd:08:45:d1:ec:95:b1:
c4:f6:89:08:52:4f:7f:c7:74:59:92:5a:e3:b5:31:
43:0e:d1:f7:3f:e6:64:f4:b2:1f:22:45:6c:29:57:
93:3a:3e:43:31:a1:37:f3:a5:91:8f:2e:e4:41:a2:
8f:90:9a:d9:76:8a:46:41:e2:0d:21:67:98:c5:e0:
60:45:bb:93:7b:12:b2:38:ba:d0:3c:6c:80:b8:5f:
fe:88:93:4e:f7:ab:84:30:27:7c:de:85:90:01:f1:
11:7c:1f:b6:9f:39:e2:21:03:0d:fb:7e:c7:40:18:
68:6e:3a:fd:8d:e5:e0:a4:ec:e4:ba:45:64:4c:51:
a7:68:ca:60:a5:4c:b1:2f:55:ed:6e:84:3b:d8:22:
f9:ea:bc:37:b5:bf:14:5e:bb:9b:02:47:a1:31:fd:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8E:A8:8E:B2:3E:58:23:47:4E:9F:59:C4:56:1A:6A:4F:0B:BD:DD
X509v3 Authority Key Identifier:
keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463313a3a2f34382d3438203d3e203138303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
91:58:3c:a3:4f:c1:8a:58:3b:de:c3:96:b7:19:69:92:1b:09:
5b:69:92:ba:19:25:48:b2:25:21:da:ce:14:3e:6f:ec:6b:33:
d8:8b:46:4b:2b:a7:4d:21:f5:d5:23:72:97:05:51:30:09:14:
72:8d:5b:df:51:ab:42:e2:36:24:f1:fa:ef:71:56:14:2d:65:
75:4f:84:90:c8:a1:9a:68:a2:80:0e:e5:3b:85:aa:84:a9:48:
a1:33:cf:a5:3b:54:28:a6:11:5d:69:9b:98:7e:96:77:bd:3b:
d1:1c:62:5a:68:65:ef:58:ef:da:1f:63:cd:d3:b3:6c:1c:c7:
28:44:50:89:9b:bf:17:6c:44:c6:a3:31:d1:42:ab:7d:17:08:
bb:9c:77:c4:d9:9b:a6:e0:42:6c:23:f6:f7:46:13:8e:23:3e:
96:8b:bd:ae:c8:19:e0:04:29:48:80:dd:4c:d4:d0:01:78:0b:
23:3a:2f:3d:e6:9d:a8:0f:4b:d5:d0:c5:48:e6:d6:cd:19:24:
4b:35:3f:dc:5a:6e:9d:46:0a:b9:f1:70:dc:29:03:d5:53:bd:
ac:91:29:10:d3:60:65:aa:46:fd:9f:ba:11:6d:0e:3c:5c:17:
fe:2d:dc:5a:cf:8f:25:bf:e8:04:e2:10:00:d2:fe:be:19:ce:
35:21:de:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:36 2026 by rpki-client