
$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa
File: 3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa (raw, json)
Hash identifier: 76EIdBl2ALW8D1iaU6elJyjtVPcLevkpSbCfYsK03xY=
Subject key identifier: DB:00:65:70:1B:27:C8:0D:83:F8:88:5F:FD:BF:D1:C0:05:5E:40:61
Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B
Certificate serial: 10DC17E67632AA8FCF1B0C8FF52B0CFE469AEA37
Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa
Signing time: Mon 11 May 2026 17:37:17 +0000
ROA not before: Mon 11 May 2026 17:32:17 +0000
ROA not after: Mon 10 May 2027 17:37:17 +0000
asID: 208223
IP address blocks: 160.25.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl
rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:dc:17:e6:76:32:aa:8f:cf:1b:0c:8f:f5:2b:0c:fe:46:9a:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B
Validity
Not Before: May 11 17:32:17 2026 GMT
Not After : May 10 17:37:17 2027 GMT
Subject: CN=DB0065701B27C80D83F8885FFDBFD1C0055E4061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:56:dd:87:b4:c4:22:01:51:32:9b:38:6e:
c0:44:03:08:db:7c:3a:c8:d6:0c:c3:69:e2:9d:bf:
02:4e:ae:84:5d:1e:83:ad:a4:e0:d8:1b:62:c9:10:
0d:4f:c9:a8:06:13:67:9e:57:3f:7a:a9:d7:66:0d:
d6:29:c6:d0:46:c5:91:b8:b0:ab:23:cc:1a:85:e4:
cd:86:f2:2d:1a:b3:25:5f:24:44:54:2f:3c:f4:39:
36:54:a3:77:5c:92:f8:1f:1f:85:83:51:bc:7a:a4:
8b:e8:94:6f:2b:59:88:04:67:af:f9:6b:8e:04:0d:
8a:f6:ae:24:3a:ab:cb:4f:a3:d5:d7:ee:49:20:5e:
a8:59:38:a4:11:5a:79:bf:fd:62:1d:f3:3f:cd:3f:
61:ca:47:f5:a5:a8:8b:d8:cf:4b:50:dd:f3:e2:8b:
d3:d2:2a:c0:55:ea:8e:ea:e8:9d:21:74:8a:4a:80:
0f:98:56:75:12:9a:d2:63:25:8c:0e:16:f5:f1:c7:
fc:15:96:b7:2b:49:2c:53:fb:b5:ea:b5:67:5b:62:
c5:91:09:23:81:93:f7:c0:10:6f:b8:1b:ca:a5:05:
0a:4b:47:e2:cb:ab:89:92:5f:54:c5:43:e1:52:94:
57:fc:9f:fa:47:da:5d:95:e0:80:94:5a:cf:b6:79:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:65:70:1B:27:C8:0D:83:F8:88:5F:FD:BF:D1:C0:05:5E:40:61
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32332d3233203d3e20323038323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.104.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:fe:f5:29:b6:9f:49:cb:9f:9b:75:eb:d4:39:3e:25:b5:46:
c5:48:e3:16:f9:ce:f6:d8:35:a5:25:1e:2d:5c:ca:3b:13:12:
b9:80:a1:cf:75:8d:45:f3:76:ce:bf:95:64:02:41:57:8c:e6:
b4:88:60:09:17:d0:d6:52:ee:aa:5e:6e:38:e5:30:86:3a:5f:
d6:84:5a:f4:8c:df:ad:79:e5:f6:65:f9:ae:fc:6f:c0:0f:8a:
e3:54:14:91:a8:9c:44:ad:17:4b:a2:6b:77:a6:50:81:62:1e:
fd:44:ef:70:f7:3c:08:f7:33:5e:8c:11:3d:ff:9a:a6:c3:2b:
8b:60:1e:89:80:0b:69:11:5f:07:a8:e2:55:e0:97:f5:c1:d0:
67:39:59:40:fc:8d:0b:f7:88:4e:58:a7:9f:5c:4f:4f:31:88:
d0:5a:3f:39:1c:51:2f:6f:d9:e6:43:fa:60:2f:ef:c5:59:56:
16:56:73:13:d2:14:f1:51:5c:18:df:44:02:1e:6c:e8:72:4e:
65:40:04:bb:31:47:8f:73:a4:37:a0:2d:f1:10:38:3a:08:cc:
36:32:7e:2b:6a:5a:6c:98:9b:40:1f:f5:8a:e7:e5:5c:66:1e:
18:1e:b6:37:20:2d:a5:0a:94:70:c0:5b:59:5f:d2:cb:3d:a3:
67:9a:61:1f
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUENwX5nYyqo/PGwyP9SsM/kaa6jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5
Mjk3MEU3QjAeFw0yNjA1MTExNzMyMTdaFw0yNzA1MTAxNzM3MTdaMDMxMTAvBgNV
BAMTKERCMDA2NTcwMUIyN0M4MEQ4M0Y4ODg1RkZEQkZEMUMwMDU1RTQwNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQFbdh7TEIgFRMps4bsBEAwjb
fDrI1gzDaeKdvwJOroRdHoOtpODYG2LJEA1PyagGE2eeVz96qddmDdYpxtBGxZG4
sKsjzBqF5M2G8i0asyVfJERULzz0OTZUo3dckvgfH4WDUbx6pIvolG8rWYgEZ6/5
a44EDYr2riQ6q8tPo9XX7kkgXqhZOKQRWnm//WId8z/NP2HKR/WlqIvYz0tQ3fPi
i9PSKsBV6o7q6J0hdIpKgA+YVnUSmtJjJYwOFvXxx/wVlrcrSSxT+7XqtWdbYsWR
CSOBk/fAEG+4G8qlBQpLR+LLq4mSX1TFQ+FSlFf8n/pH2l2V4ICUWs+2eR0JAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQU2wBlcBsnyA2D+Ihf/b/RwAVeQGEwHwYDVR0j
BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD
SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3
NDI1MTA5Mjk3MEU3Qi5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zMTM2MzAyZTMy
MzUyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzAzODMyMzIzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaAZaDANBgkqhkiG9w0BAQsFAAOCAQEACv71KbafScufm3Xr1Dk+
JbVGxUjjFvnO9tg1pSUeLVzKOxMSuYChz3WNRfN2zr+VZAJBV4zmtIhgCRfQ1lLu
ql5uOOUwhjpf1oRa9IzfrXnl9mX5rvxvwA+K41QUkaicRK0XS6Jrd6ZQgWIe/UTv
cPc8CPczXowRPf+apsMri2AeiYALaRFfB6jiVeCX9cHQZzlZQPyNC/eITlinn1xP
TzGI0Fo/ORxRL2/Z5kP6YC/vxVlWFlZzE9IU8VFcGN9EAh5s6HJOZUAEuzFHj3Ok
N6At8RA4OgjMNjJ+K2pabJibQB/1iuflXGYeGB62NyAtpQqUcMBbWV/Syz2jZ5ph
Hw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:09:30 2026 by rpki-client