
$ rpki-client -vvf rpkica.twnic.tw/rpki/ASPIRAPPS/1/3135372e31352e37302e302f32332d3233203d3e20313530373639.roa
File: 3135372e31352e37302e302f32332d3233203d3e20313530373639.roa (raw, json)
Hash identifier: RIJKr3g2uIwf5iqGFGjqViDDGGsabsMlFTzqof1niUM=
Subject key identifier: 49:2F:23:F5:A2:E7:34:22:3B:4A:D7:0D:EB:1B:9E:64:C5:16:7D:3B
Certificate issuer: /CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Certificate serial: 56408CEC99444B969BBE3B71F6063A8ED4C319F1
Authority key identifier: B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/3135372e31352e37302e302f32332d3233203d3e20313530373639.roa
Signing time: Mon 11 May 2026 17:36:19 +0000
ROA not before: Mon 11 May 2026 17:31:19 +0000
ROA not after: Mon 10 May 2027 17:36:19 +0000
asID: 150769
IP address blocks: 157.15.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:40:8c:ec:99:44:4b:96:9b:be:3b:71:f6:06:3a:8e:d4:c3:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05
Validity
Not Before: May 11 17:31:19 2026 GMT
Not After : May 10 17:36:19 2027 GMT
Subject: CN=492F23F5A2E734223B4AD70DEB1B9E64C5167D3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:0f:ee:17:6a:fe:dd:fc:a8:f9:e4:4c:41:
1b:81:a7:8e:10:2c:ce:60:e4:08:55:e7:2c:92:01:
fc:73:9a:e9:23:33:49:79:1f:e7:8f:dd:6b:ee:e8:
a4:9c:9a:79:ab:84:d3:de:57:61:be:c5:fb:70:cf:
9e:fd:75:a7:12:73:d1:63:46:c3:a6:2b:86:69:33:
0e:b1:0c:5d:e6:08:19:84:7b:32:75:a1:8a:34:77:
a7:e4:55:c8:0a:3a:fd:c8:e7:09:f6:71:34:af:37:
69:e8:72:f1:54:6b:f5:2b:04:81:de:f8:f8:e4:c3:
39:22:3a:54:f5:0e:d8:61:e3:51:d1:2a:d6:6d:1c:
82:3a:c7:03:00:aa:26:0a:f4:33:f1:83:ee:5c:ce:
b1:98:9c:a3:a9:21:6a:9a:7e:5e:12:e5:3b:1c:ad:
8f:ce:c0:b6:a8:51:5a:bb:cb:07:00:8c:9a:7d:f0:
1f:30:b5:5a:07:b8:07:ee:b5:65:ed:17:4e:ed:f9:
99:48:81:f1:bb:a7:6b:a8:09:b4:e2:21:35:d6:d7:
78:b5:a5:9a:30:c2:07:1a:71:9d:74:9f:69:38:93:
3e:88:a2:c1:f9:1f:f6:20:cb:9a:7d:05:93:82:e7:
7e:3f:ea:f8:19:c4:0d:4e:9f:a9:30:0f:89:74:83:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:23:F5:A2:E7:34:22:3B:4A:D7:0D:EB:1B:9E:64:C5:16:7D:3B
X509v3 Authority Key Identifier:
keyid:B7:2C:12:A5:51:5B:F3:3E:A3:5A:CD:6C:99:11:C9:AC:6D:E9:EA:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B72C12A5515BF33EA35ACD6C9911C9AC6DE9EA05.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASPIRAPPS/1/3135372e31352e37302e302f32332d3233203d3e20313530373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.70.0/23
Signature Algorithm: sha256WithRSAEncryption
91:23:ea:ca:79:f7:0e:6d:aa:6f:d1:ab:85:0f:81:5d:73:f4:
69:43:64:0f:d5:33:55:ac:19:ba:3d:4b:cf:3e:c1:14:98:c8:
77:73:03:13:b2:f8:9c:c1:48:a4:09:65:21:da:9f:e9:6d:88:
22:cc:a7:c8:5a:4e:3a:d2:5c:53:ca:57:1e:f0:f5:60:36:47:
b3:00:65:51:fb:7c:89:39:3c:c5:ac:4f:ff:2b:3b:3d:5f:7f:
5b:6d:61:5e:13:68:04:ed:29:72:bf:5e:cb:8c:00:b8:48:4e:
da:a5:c6:15:ae:e0:72:01:ca:c1:ad:d5:7c:a7:02:c1:9c:2b:
66:14:9b:34:7f:3c:1b:56:6c:94:27:e3:b9:81:85:7e:15:cd:
ed:76:64:29:d8:03:de:06:64:b1:22:7b:8c:53:01:c9:f8:e8:
46:85:9b:32:4d:2a:85:d8:22:51:c3:d8:f7:60:ad:31:e6:ae:
40:63:f9:8b:d1:d7:81:74:85:b1:c9:72:0d:70:f1:f1:11:0d:
44:42:ca:d2:bc:da:12:b3:ce:df:f8:00:3c:70:be:90:9b:12:
1d:c8:49:64:a2:ab:e5:b3:4e:b9:32:a5:e4:4a:dd:71:c6:59:
b2:0d:b6:8e:6c:9a:05:7a:1b:7a:64:54:2e:f9:77:3e:dd:ce:
fb:16:af:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:35 2026 by rpki-client