
$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa
File: 3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa (raw, json)
Hash identifier: tReP/Qjmb7yqTg2YjMn4e1CvFyn1zD9jlRie9CUHpwg=
Subject key identifier: 9A:78:07:19:D1:2A:E0:FD:63:31:05:6C:52:4B:00:EE:64:17:70:F8
Certificate issuer: /CN=BE02DA0D44FE912955460231A0186A486B0C371B
Certificate serial: 08BB79950CAE60F0F41A4199D6C8E8B09EB50B86
Authority key identifier: BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa
Signing time: Mon 11 May 2026 17:44:58 +0000
ROA not before: Mon 11 May 2026 17:39:58 +0000
ROA not after: Mon 10 May 2027 17:44:58 +0000
asID: 139690
IP address blocks: 165.99.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl
rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:bb:79:95:0c:ae:60:f0:f4:1a:41:99:d6:c8:e8:b0:9e:b5:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE02DA0D44FE912955460231A0186A486B0C371B
Validity
Not Before: May 11 17:39:58 2026 GMT
Not After : May 10 17:44:58 2027 GMT
Subject: CN=9A780719D12AE0FD6331056C524B00EE641770F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4f:30:31:cf:31:76:25:90:dd:7d:32:a0:b6:
0a:dd:2c:9f:04:0a:94:c8:10:72:7e:39:3f:4d:d7:
88:5a:65:9f:68:e6:d4:25:cd:30:f9:15:2d:47:d3:
35:78:17:19:0c:a0:99:aa:28:66:4b:99:e7:64:da:
7b:d9:41:53:e6:bd:cf:42:c0:33:d9:5b:3d:61:6c:
44:0b:d1:9d:2a:b6:52:a2:b2:22:fd:f7:a1:b8:de:
0f:d2:af:d0:16:d6:4b:0f:39:7f:a8:16:c1:f3:95:
ed:d7:a2:3e:23:c8:01:02:7a:f7:b5:68:ae:17:3a:
52:38:de:66:71:04:71:5d:d9:ce:c8:82:28:1f:e7:
a9:53:8b:a0:e6:28:ac:c0:29:49:83:1b:20:28:6a:
70:39:df:0c:ea:44:8c:16:86:c6:fd:97:d5:6d:ac:
6c:7b:4f:a9:59:1d:44:08:bb:fe:40:0a:62:0d:4c:
dc:b0:94:75:33:37:06:3b:ca:13:b3:62:95:c6:91:
b7:fa:14:f7:63:e7:00:c7:5e:12:97:95:dd:70:bf:
0e:53:ec:5a:36:f9:c5:c7:5d:77:84:22:0d:17:f9:
d5:27:76:e7:11:f4:b5:98:8d:c7:8a:d1:ff:5f:84:
3e:70:ae:d4:39:4d:d4:04:b3:2b:8d:db:17:88:92:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:78:07:19:D1:2A:E0:FD:63:31:05:6C:52:4B:00:EE:64:17:70:F8
X509v3 Authority Key Identifier:
keyid:BE:02:DA:0D:44:FE:91:29:55:46:02:31:A0:18:6A:48:6B:0C:37:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/BE02DA0D44FE912955460231A0186A486B0C371B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/BE02DA0D44FE912955460231A0186A486B0C371B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/1/3136352e39392e3136392e302f32342d3234203d3e20313339363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.99.169.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4d:0a:79:78:a5:17:1d:36:0b:8a:b4:95:2f:29:ee:de:6d:
0b:5d:e6:58:b1:49:04:81:a3:6d:c3:75:85:cf:4a:d7:b7:dc:
c1:dc:e9:a6:b8:fc:da:4a:9c:d9:62:ce:ea:ea:9c:e0:af:d7:
8d:ae:f2:03:43:f8:c8:24:ba:5b:17:a0:9d:87:f2:13:d9:6a:
2a:f2:71:aa:21:3e:7c:01:d9:95:9a:9f:78:cb:86:16:69:c2:
ee:e6:a2:3b:41:93:fa:2f:96:a9:12:6f:e6:8f:84:26:55:ac:
47:98:8f:1d:a0:c9:a9:2d:26:43:81:7b:30:bf:1f:e9:da:b0:
36:10:63:0a:0e:a7:93:19:89:8e:38:fc:ad:3e:e3:0f:fb:93:
16:23:4a:53:66:fb:1c:27:2a:ef:83:3c:bf:3d:75:18:dc:a8:
8f:de:1b:58:a6:0c:0b:2d:69:e4:69:f3:06:01:51:e3:3a:0b:
4e:0d:c2:c3:31:65:01:15:d0:67:09:c1:93:be:bd:34:fb:b8:
04:8e:b5:a1:c7:1e:f0:d8:08:f8:15:26:18:09:38:be:c9:f8:
bd:28:6a:a1:06:34:77:f0:e2:6d:42:29:97:d3:1a:01:2b:2a:
d7:cb:f1:e5:6e:55:5c:09:87:19:62:53:39:a7:fd:dd:1a:8e:
45:10:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:03 2026 by rpki-client