
$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa
File: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (raw, json)
Hash identifier: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=
Subject key identifier: D4:00:AE:09:4B:A2:36:F4:86:CC:F3:E6:9B:C3:B3:E0:A7:3A:22:CD
Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial: 350E98259FDBEE5E41A6D67D58ACA45FAFD955D4
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa
Signing time: Mon 11 May 2026 17:58:16 +0000
ROA not before: Mon 11 May 2026 17:53:16 +0000
ROA not after: Mon 10 May 2027 17:58:16 +0000
asID: 131629
IP address blocks: 103.119.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0e:98:25:9f:db:ee:5e:41:a6:d6:7d:58:ac:a4:5f:af:d9:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
Validity
Not Before: May 11 17:53:16 2026 GMT
Not After : May 10 17:58:16 2027 GMT
Subject: CN=D400AE094BA236F486CCF3E69BC3B3E0A73A22CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:3f:87:55:5c:38:b4:8e:7e:3d:9c:04:58:
5e:9e:b4:e2:0c:31:15:1b:ad:61:2c:ef:52:0c:4e:
0d:a0:0e:46:d6:b9:b3:82:ff:fb:c3:a7:37:67:ab:
b4:ad:01:c4:55:24:8b:f8:03:fb:be:ae:4c:f5:2a:
dc:10:36:67:c3:14:58:2e:35:ce:0f:12:46:db:7f:
fd:de:ef:d7:a4:0c:81:82:24:fa:b7:20:46:4c:67:
31:29:b9:a2:c2:54:48:57:a4:82:ba:cb:bd:82:7a:
40:4a:e2:25:50:d3:13:23:de:52:16:8d:53:24:2b:
6b:72:cd:16:f3:e1:db:be:9a:0f:1e:6d:df:52:d1:
5f:85:38:75:14:2b:39:e4:41:2c:62:23:b0:ac:19:
a6:16:c4:78:97:b5:b6:88:f9:c8:e9:c8:98:3c:28:
81:c1:da:c1:80:4b:a1:1f:d8:28:fe:b1:80:8f:f2:
bb:53:1f:b6:4b:43:b7:05:02:25:a5:70:75:89:52:
b8:2b:b1:22:87:dd:f5:ba:3f:eb:f5:ad:8a:5f:62:
73:b5:b2:e9:84:4b:9c:4c:94:a2:26:c9:36:eb:ce:
ab:a0:66:83:97:da:15:48:b6:1b:06:cc:0c:67:34:
56:8b:57:53:b6:67:b9:f8:83:80:be:ab:af:91:cc:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:AE:09:4B:A2:36:F4:86:CC:F3:E6:9B:C3:B3:E0:A7:3A:22:CD
X509v3 Authority Key Identifier:
keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.213.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ff:c3:31:a9:c6:7c:57:51:29:d5:71:a8:f3:25:be:e0:95:
6b:d6:2c:fa:65:14:a7:ce:32:42:26:44:da:b5:fc:b8:8f:44:
2a:1e:70:0a:ca:35:54:87:e1:ab:8d:9a:56:e4:e6:bb:41:9e:
99:bc:23:b8:04:eb:a8:88:1b:70:e5:03:52:96:e0:a8:b0:43:
b7:0d:fc:72:16:c2:f1:f2:49:14:e6:ba:b1:6b:a3:ed:0c:b3:
83:12:23:62:bf:45:5d:ef:05:e2:5c:5e:05:ab:4b:3e:24:29:
dc:02:35:16:a3:2f:34:35:f0:1d:96:bc:d5:0a:fc:3e:33:8e:
b6:67:b7:10:f0:02:a2:35:80:e7:c9:2b:37:98:8a:19:75:37:
65:db:90:9e:50:43:8e:2b:2f:2b:ea:ba:38:58:10:72:11:b5:
c5:bd:ce:fc:b3:92:10:70:3a:95:ea:6a:09:b7:5f:d6:fa:2b:
58:e4:7d:b0:7d:0b:d9:3c:6b:26:fb:b6:00:b4:ac:e2:ac:a6:
85:2b:5f:e7:6c:9d:01:e5:cc:3c:31:f9:c9:9d:b0:64:7d:3b:
35:15:0c:5b:d3:51:b0:ad:2c:08:22:68:90:00:de:f9:ec:3b:
b6:6a:a1:62:67:d0:95:18:60:6d:63:44:b1:38:81:4a:0b:8a:
db:7b:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:54 2026 by rpki-client