
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa
File: 3130312e302e3234302e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier: okb0kGB+LekHYwOuGLyVCb+I6qh5V5+WzdEBzvXO6X4=
Subject key identifier: 8C:69:6E:71:23:B7:03:C2:A3:D8:14:C3:21:CC:6B:2F:9C:FD:0A:9D
Certificate issuer: /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial: 75145AF45B0F9F74DCDF3B4E7CE07E95D5F676E0
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 17:05:59 +0000
ROA not before: Mon 11 May 2026 17:00:59 +0000
ROA not after: Mon 10 May 2027 17:05:59 +0000
asID: 4780
IP address blocks: 101.0.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:14:5a:f4:5b:0f:9f:74:dc:df:3b:4e:7c:e0:7e:95:d5:f6:76:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Validity
Not Before: May 11 17:00:59 2026 GMT
Not After : May 10 17:05:59 2027 GMT
Subject: CN=8C696E7123B703C2A3D814C321CC6B2F9CFD0A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:52:80:f5:64:4f:df:48:2d:03:70:af:5a:
e6:62:f8:a8:2d:85:55:71:81:15:57:77:78:fa:ae:
3b:7f:d2:b8:c4:bb:0c:1b:01:e3:3f:b5:5f:5c:27:
39:86:91:4a:ed:7d:6e:bb:a4:10:1e:c9:9b:ea:ee:
3b:ed:60:aa:02:cd:08:5f:0c:2c:89:76:8d:e6:87:
70:ff:1c:aa:c6:c4:28:84:2d:e2:ea:07:e0:af:26:
95:4e:93:7d:26:f0:64:2d:0e:2c:04:ae:bc:b0:c2:
bf:c9:09:1f:7e:db:31:43:24:45:94:1e:43:23:f3:
7a:08:66:30:cf:4d:ff:fd:05:58:4e:40:04:c2:90:
2d:4f:b5:15:89:ad:9d:61:8d:b0:6d:ec:32:1e:41:
37:b5:5e:77:49:12:9f:a4:e8:8c:eb:51:69:a7:d5:
42:e5:61:98:68:ae:86:8b:ea:9a:8a:a2:0d:f0:02:
10:6b:58:de:ca:ec:10:3b:c3:92:e3:8c:d4:6d:c6:
fe:15:d4:1b:b5:90:34:b8:eb:28:5c:9e:37:e6:de:
25:af:8e:81:8d:2b:bf:e4:83:61:30:66:55:83:06:
ac:6c:ff:a7:72:dd:1d:21:55:1c:55:ba:fb:ac:8c:
b4:bb:51:fd:ce:72:81:4f:cd:c3:f6:80:8a:26:6a:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:6E:71:23:B7:03:C2:A3:D8:14:C3:21:CC:6B:2F:9C:FD:0A:9D
X509v3 Authority Key Identifier:
keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:da:e9:26:6c:49:49:96:ee:8d:ea:09:3c:d1:42:59:1c:64:
52:5d:9b:7b:10:7d:8f:30:16:4a:97:70:ea:67:46:0c:42:aa:
26:9a:d2:19:7d:cd:37:b3:40:d8:4d:2b:5c:34:0b:7a:9c:48:
39:38:91:02:dc:3f:8d:54:b9:67:ef:c0:60:1b:4d:4c:20:5f:
c8:37:41:ec:94:7f:4b:65:ba:8c:cd:3d:9f:8d:4b:47:14:df:
92:91:2e:04:11:21:0b:c9:b6:2d:58:f9:07:cb:72:f0:4f:48:
59:40:60:d8:99:a0:71:33:5e:ab:b3:00:d9:30:9a:30:65:e5:
c1:dc:92:ef:97:20:cc:8d:6e:7a:03:28:98:05:b4:c8:24:89:
1d:b3:b6:3d:c8:60:07:2f:37:24:76:c3:a3:f0:ed:87:73:03:
3b:35:99:8b:cb:9f:5e:9b:9f:ae:ee:95:b1:eb:94:cf:c0:7b:
0a:fe:f0:54:ce:6f:58:95:48:af:ea:8d:47:3b:b0:8c:3d:17:
cf:5b:3e:12:b0:b5:a8:b6:1c:e4:3c:13:14:1d:73:16:de:8e:
ed:1e:a6:05:95:d1:5b:5e:6c:00:46:48:55:ff:c1:ec:cf:20:
4c:ee:37:75:0d:12:83:dc:ff:c5:62:86:bd:07:22:1b:8c:51:
ba:28:48:98
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUdRRa9FsPn3Tc3ztOfOB+ldX2duAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1RjlBNDVBNzI1
QkM1RUMwNTAeFw0yNjA1MTExNzAwNTlaFw0yNzA1MTAxNzA1NTlaMDMxMTAvBgNV
BAMTKDhDNjk2RTcxMjNCNzAzQzJBM0Q4MTRDMzIxQ0M2QjJGOUNGRDBBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKVKA9WRP30gtA3CvWuZi+Kgt
hVVxgRVXd3j6rjt/0rjEuwwbAeM/tV9cJzmGkUrtfW67pBAeyZvq7jvtYKoCzQhf
DCyJdo3mh3D/HKrGxCiELeLqB+CvJpVOk30m8GQtDiwErrywwr/JCR9+2zFDJEWU
HkMj83oIZjDPTf/9BVhOQATCkC1PtRWJrZ1hjbBt7DIeQTe1XndJEp+k6IzrUWmn
1ULlYZhoroaL6pqKog3wAhBrWN7K7BA7w5LjjNRtxv4V1Bu1kDS46yhcnjfm3iWv
joGNK7/kg2EwZlWDBqxs/6dy3R0hVRxVuvusjLS7Uf3OcoFPzcP2gIomaldpAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUjGlucSO3A8Kj2BTDIcxrL5z9Cp0wHwYDVR0j
BBgwFoAUHMt4B8qDINZGyslF+aRaclvF7AUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8wLzFDQ0I3ODA3Q0E4MzIwRDY0NkNBQzk0NUY5QTQ1QTcyNUJDNUVDMDUu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1
RjlBNDVBNzI1QkM1RUMwNS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL
hmByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMC8zMTMw
MzEyZTMwMmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBGUA8DANBgkqhkiG9w0BAQsFAAOCAQEALtrpJmxJSZbujeoJPNFC
WRxkUl2bexB9jzAWSpdw6mdGDEKqJprSGX3NN7NA2E0rXDQLepxIOTiRAtw/jVS5
Z+/AYBtNTCBfyDdB7JR/S2W6jM09n41LRxTfkpEuBBEhC8m2LVj5B8ty8E9IWUBg
2JmgcTNeq7MA2TCaMGXlwdyS75cgzI1uegMomAW0yCSJHbO2PchgBy83JHbDo/Dt
h3MDOzWZi8ufXpufru6VseuUz8B7Cv7wVM5vWJVIr+qNRzuwjD0Xz1s+ErC1qLYc
5DwTFB1zFt6O7R6mBZXRW15sAEZIVf/B7M8gTO43dQ0Sg9z/xWKGvQciG4xRuihI
mA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:11 2026 by rpki-client