
$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa
File: 3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa (raw, json)
Hash identifier: XxmaLYe5NcRDIZkPR56pycYHblTeZ2MI3C3Z8ItmScI=
Subject key identifier: 73:26:CF:95:44:3C:8B:E4:1E:55:3F:21:B0:7A:3D:89:AD:2B:08:71
Certificate issuer: /CN=BE02DA0D44FE912955460231A0186A486B0C371B
Certificate serial: 6E5BC35C10CC7347FA2E78EC606DB175FE9EABCD
Authority key identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa
Signing time: Mon 11 May 2026 17:45:00 +0000
ROA not before: Mon 11 May 2026 17:40:00 +0000
ROA not after: Mon 10 May 2027 17:45:00 +0000
asID: 152628
IP address blocks: 165.99.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl
rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5b:c3:5c:10:cc:73:47:fa:2e:78:ec:60:6d:b1:75:fe:9e:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE02DA0D44FE912955460231A0186A486B0C371B
Validity
Not Before: May 11 17:40:00 2026 GMT
Not After : May 10 17:45:00 2027 GMT
Subject: CN=7326CF95443C8BE41E553F21B07A3D89AD2B0871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:02:54:07:85:3c:f7:eb:c5:f6:ac:91:9c:
34:c4:e5:92:b6:ea:15:ec:02:c7:da:1c:c3:5f:87:
3b:61:cd:0e:11:08:6e:38:03:77:46:b4:e7:a8:da:
ce:46:80:a3:99:12:84:2a:d9:6a:e3:97:e8:42:24:
e9:39:ca:60:34:4f:04:40:9b:47:1f:a7:7f:fd:73:
06:cd:e5:21:e9:7f:42:7a:58:db:5e:96:23:6f:01:
cd:cf:02:d9:38:eb:53:cb:dc:7d:ef:8b:72:f2:97:
cc:f0:c5:61:e7:5d:e5:05:23:c7:5f:d3:f0:01:70:
d0:67:de:b2:f7:87:67:f3:40:f7:19:81:c3:9c:c3:
f6:20:4a:ea:7d:7d:8d:da:4d:5f:f7:93:53:d7:59:
4b:d1:a3:56:f3:dd:1b:bc:b8:53:b6:11:10:e6:d2:
75:01:05:99:87:28:75:a9:67:59:43:5f:d7:87:cc:
4b:28:67:ba:3b:2b:96:1e:5d:75:9c:0c:ee:65:14:
39:f5:2c:62:09:3a:0a:42:0a:4a:3d:3b:59:81:bc:
0e:72:30:cd:50:2a:d1:f1:f0:de:b4:ec:fe:ef:26:
79:e9:9f:c6:71:0b:98:60:a2:31:2a:50:71:56:af:
92:47:41:96:0d:dd:57:99:e2:54:4c:6c:3b:ff:41:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:CF:95:44:3C:8B:E4:1E:55:3F:21:B0:7A:3D:89:AD:2B:08:71
X509v3 Authority Key Identifier:
keyid:BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136382e302f32342d3234203d3e20313532363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.99.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:07:a3:43:fc:0b:1b:ed:1d:fc:8d:ce:dd:a0:da:07:e3:68:
1b:c5:98:fa:43:0c:a8:45:9c:dc:d3:85:bc:b8:a5:3f:47:f5:
76:4d:2f:30:52:61:af:5e:f7:f7:6d:a3:5a:dc:1a:77:99:31:
80:6e:32:79:97:fe:ae:a3:61:6e:b3:4c:45:1c:a4:26:c4:cf:
ca:76:b9:b3:95:9d:72:cb:c9:1b:b3:91:2e:9e:2d:88:3e:d7:
d2:b2:70:ba:4b:a4:2a:73:e5:03:bd:59:e8:8e:35:a7:cf:1f:
4e:23:4f:1c:a4:3c:4f:73:1e:9c:7e:aa:62:ec:1b:cf:bb:75:
da:58:e7:7a:1e:ab:69:81:e9:49:16:6d:32:ca:13:f1:f2:e2:
c8:78:be:a9:32:7a:d4:18:ea:e1:75:6d:16:83:68:23:f7:63:
f4:17:16:6a:fb:25:c7:2c:af:cb:4a:6b:57:a8:30:ab:f4:2f:
e0:f6:7b:33:74:38:a5:71:88:7a:9e:b4:8d:aa:94:81:76:02:
19:87:6f:0c:cd:f8:c7:3e:97:4f:e1:da:49:55:e3:5b:af:e3:
29:a6:f0:33:26:a9:81:a9:79:c9:2a:d5:32:ba:cf:b0:a5:a9:
62:e8:f4:12:7c:71:54:2a:ed:f5:b6:68:07:fc:9e:65:d3:3d:
0b:71:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:20 2026 by rpki-client