
$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3332203d3e203138303430.roa
File: 3134342e37392e3233362e302f32342d3332203d3e203138303430.roa (raw, json)
Hash identifier: 1FIFjMBcizShdvw6u5phvDGtZhnMBusqAuzpJLq+G90=
Subject key identifier: 1A:4B:FB:48:E8:2F:43:95:4B:CB:74:D7:E9:29:FD:4C:C5:47:7C:B5
Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Certificate serial: 18F17CDDEA77319555A491196C003A9415D21424
Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3332203d3e203138303430.roa
Signing time: Mon 11 May 2026 17:58:43 +0000
ROA not before: Mon 11 May 2026 17:53:43 +0000
ROA not after: Mon 10 May 2027 17:58:43 +0000
asID: 18040
IP address blocks: 144.79.236.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 01:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f1:7c:dd:ea:77:31:95:55:a4:91:19:6c:00:3a:94:15:d2:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Validity
Not Before: May 11 17:53:43 2026 GMT
Not After : May 10 17:58:43 2027 GMT
Subject: CN=1A4BFB48E82F43954BCB74D7E929FD4CC5477CB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:b2:7f:9b:c2:fc:07:3e:d1:d1:d6:89:a0:
cb:96:14:00:35:12:2b:32:39:57:c1:d0:b0:72:e6:
33:a3:8e:dc:74:08:48:8d:51:d8:ef:a0:93:0f:7e:
5e:6f:e8:aa:4a:0f:da:d4:ce:cc:29:ba:39:c9:54:
90:4f:c1:d4:13:08:7a:e0:70:50:ee:74:88:b8:fc:
6d:8d:69:56:94:e2:aa:60:d6:e3:f1:e6:b6:4b:e8:
e5:54:42:3e:be:bf:68:34:42:78:e5:78:72:5a:14:
a1:c2:19:98:17:78:a1:b6:ee:60:e3:43:91:d9:1c:
d1:f2:5d:c1:f4:9a:96:43:67:97:57:e1:35:a6:e9:
cd:c3:69:ce:f0:9a:ba:6a:4d:57:47:61:5b:a4:b4:
06:d3:7c:fd:e3:2d:68:ed:1d:fb:67:5d:47:30:bd:
91:2a:a7:96:be:1d:5f:d8:af:e1:14:a3:3e:8e:11:
4c:60:20:b4:d9:cf:77:05:19:ae:b7:6a:d3:0d:96:
13:1b:eb:fb:a9:82:ed:0b:22:67:99:4d:06:7c:05:
67:c3:3b:2a:06:0f:66:e4:c2:98:e3:18:d3:3f:f2:
d8:d5:fd:74:b7:e0:e0:22:d7:ba:58:8d:dc:81:7f:
5a:93:e3:df:c1:c0:4b:29:30:5d:9e:3d:30:b1:1d:
ac:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:FB:48:E8:2F:43:95:4B:CB:74:D7:E9:29:FD:4C:C5:47:7C:B5
X509v3 Authority Key Identifier:
keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3332203d3e203138303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:07:db:ff:b0:b0:68:28:11:78:97:0c:cd:ac:9c:0f:e1:2e:
90:9d:62:e3:ec:0c:c6:02:d9:ca:ec:17:b1:4c:fd:a1:eb:f8:
9d:91:b7:4f:2c:f6:b1:d2:52:58:98:90:8e:d7:3a:32:d6:23:
9e:42:54:8c:65:97:4c:88:ab:97:b6:4e:38:61:4a:b3:1d:cf:
dc:7d:d6:e4:fa:2a:9d:e3:62:94:7a:d4:ca:f6:38:08:ad:09:
84:bb:ed:d0:db:1c:59:5c:ac:71:fa:b9:1b:65:f5:e6:5a:0c:
d1:96:dd:74:e4:d4:22:a3:9e:cd:6a:c1:90:c6:02:ba:78:3c:
37:76:c6:b4:f1:f6:46:eb:1f:be:f8:ef:24:cb:4c:2c:c9:1d:
ea:9e:f2:a8:99:37:26:86:39:c3:d4:89:9e:78:04:7f:27:b0:
13:08:e5:3a:b0:76:c4:d0:5d:e0:a7:cc:67:6a:95:a4:08:09:
83:d0:ce:10:14:11:ee:06:fc:eb:2c:97:56:97:ce:e3:a9:cf:
49:f8:ae:2b:67:94:43:bb:96:53:2e:59:4f:e3:dd:f7:2f:b0:
2c:99:cd:c4:e5:0f:76:95:9e:7d:22:00:49:0d:34:ba:35:07:
3f:fa:57:15:06:3b:39:7a:4e:e7:12:0b:d6:bf:f3:6e:3d:df:
bd:46:95:c8
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUGPF83ep3MZVVpJEZbAA6lBXSFCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC
NkRFMjM0QzAeFw0yNjA1MTExNzUzNDNaFw0yNzA1MTAxNzU4NDNaMDMxMTAvBgNV
BAMTKDFBNEJGQjQ4RTgyRjQzOTU0QkNCNzREN0U5MjlGRDRDQzU0NzdDQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJbJ/m8L8Bz7R0daJoMuWFAA1
EisyOVfB0LBy5jOjjtx0CEiNUdjvoJMPfl5v6KpKD9rUzswpujnJVJBPwdQTCHrg
cFDudIi4/G2NaVaU4qpg1uPx5rZL6OVUQj6+v2g0QnjleHJaFKHCGZgXeKG27mDj
Q5HZHNHyXcH0mpZDZ5dX4TWm6c3Dac7wmrpqTVdHYVuktAbTfP3jLWjtHftnXUcw
vZEqp5a+HV/Yr+EUoz6OEUxgILTZz3cFGa63atMNlhMb6/upgu0LImeZTQZ8BWfD
OyoGD2bkwpjjGNM/8tjV/XS34OAi17pYjdyBf1qT49/BwEspMF2ePTCxHawpAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUGkv7SOgvQ5VLy3TX6Sn9TMVHfLUwHwYDVR0j
BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO
RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw
QzVFQ0QzQjZERTIzNEMuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xLzMxMzQzNDJl
MzczOTJlMzIzMzM2MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzODMwMzQzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAJBP7DANBgkqhkiG9w0BAQsFAAOCAQEAwwfb/7CwaCgReJcMzayc
D+EukJ1i4+wMxgLZyuwXsUz9oev4nZG3Tyz2sdJSWJiQjtc6MtYjnkJUjGWXTIir
l7ZOOGFKsx3P3H3W5PoqneNilHrUyvY4CK0JhLvt0NscWVyscfq5G2X15loM0Zbd
dOTUIqOezWrBkMYCung8N3bGtPH2RusfvvjvJMtMLMkd6p7yqJk3JoY5w9SJnngE
fyewEwjlOrB2xNBd4KfMZ2qVpAgJg9DOEBQR7gb86yyXVpfO46nPSfiuK2eUQ7uW
Uy5ZT+Pd9y+wLJnNxOUPdpWefSIASQ00ujUHP/pXFQY7OXpO5xIL1r/zbj3fvUaV
yA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:45 2026 by rpki-client