
$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWNWIN/0/3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa
File: 3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa (raw, json)
Hash identifier: 37E46pfPxEq9A4RxL1D37D3fAAtA0Gnx6vMhsNaTo4A=
Subject key identifier: 41:AB:66:5A:A8:4E:09:94:44:ED:20:FC:CF:65:F0:63:AA:C1:6E:D6
Certificate issuer: /CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB
Certificate serial: 2BB065546ACC905A1C56145770ED36EED22FBAF4
Authority key identifier: A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa
Signing time: Mon 11 May 2026 17:31:54 +0000
ROA not before: Mon 11 May 2026 17:26:54 +0000
ROA not after: Mon 10 May 2027 17:31:54 +0000
asID: 131149
IP address blocks: 103.118.148.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl
rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b0:65:54:6a:cc:90:5a:1c:56:14:57:70:ed:36:ee:d2:2f:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB
Validity
Not Before: May 11 17:26:54 2026 GMT
Not After : May 10 17:31:54 2027 GMT
Subject: CN=41AB665AA84E099444ED20FCCF65F063AAC16ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:5d:4e:56:6f:16:2b:55:f4:f9:17:03:e4:
14:84:06:b9:b9:39:40:cd:d7:ac:8c:7e:9a:1f:77:
d1:02:4d:3b:f9:29:e7:ca:1f:4d:3c:06:6c:f1:e6:
89:ff:a7:99:82:c3:b6:ee:92:b6:8f:7d:99:cf:e4:
39:5d:3c:87:9b:c5:c1:50:6c:48:88:fd:94:e3:c4:
73:16:b8:3d:29:1e:ec:c6:59:8c:b2:6f:87:ec:e9:
ed:51:7d:5a:ec:f1:3f:63:15:8e:f6:a0:b3:ad:7c:
57:ef:46:1c:1c:a0:d1:9d:ff:d3:39:b1:9b:9c:c8:
c2:52:0c:17:c2:89:b0:62:b7:1a:f1:1a:78:56:83:
27:a6:9e:f3:8c:38:5c:14:14:54:d2:bf:95:3e:6f:
39:d4:49:86:f1:90:96:1d:79:54:93:59:5e:f9:86:
59:62:4b:9f:3b:3c:78:c7:5c:cf:c5:7a:d0:71:6a:
1d:3c:5f:c1:e3:04:b1:e1:25:63:a1:89:ea:66:81:
4d:35:f1:f6:2f:2f:a2:97:ca:96:ee:cd:30:d0:a3:
24:07:e3:89:e0:8c:0e:6a:23:1b:72:13:bd:b2:60:
40:06:47:e0:3a:f6:e9:7d:88:cb:2a:f7:a3:a1:5c:
48:74:3b:73:3e:fd:52:17:dd:19:bc:c2:17:b8:07:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:66:5A:A8:4E:09:94:44:ED:20:FC:CF:65:F0:63:AA:C1:6E:D6
X509v3 Authority Key Identifier:
keyid:A0:67:A9:5C:B7:88:29:38:BA:5E:E0:BF:9E:47:C2:E0:30:ED:F6:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A067A95CB7882938BA5EE0BF9E47C2E030EDF6FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWNWIN/0/3130332e3131382e3134382e302f32332d3332203d3e20313331313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:6a:5f:71:d3:23:18:70:e0:a6:0b:56:73:e5:de:db:e7:08:
09:31:de:fa:b8:6a:d1:35:2b:ff:93:a0:30:ff:5d:23:f8:d3:
cc:d4:27:f3:9e:33:b7:fe:0b:ec:05:d4:48:a4:8f:83:c2:47:
be:42:f3:1a:cf:3c:64:25:1f:08:0d:23:d3:31:f1:5c:85:58:
cd:69:f5:51:b7:59:e1:3d:1f:7b:28:2c:5c:d9:3d:64:04:fa:
ed:f2:c4:b3:54:f3:80:2f:9a:91:77:a7:89:2f:e3:9b:f6:c6:
e3:1a:73:fa:79:da:68:01:ba:44:9c:9b:9c:af:73:04:8b:bf:
17:31:8c:b6:73:33:4e:67:ae:2e:a9:b9:d9:90:2b:61:cf:14:
77:76:d8:e6:42:48:1a:a3:47:ce:e5:04:f1:dc:f8:92:65:cb:
e5:a3:b1:76:a0:dc:45:2a:62:6e:a7:c7:70:95:09:dc:92:aa:
20:79:3a:63:e7:a1:12:c9:88:b6:04:72:c2:8b:dd:19:a7:08:
fa:3d:e6:7f:73:34:8e:13:cf:73:91:b3:ac:23:72:a6:7b:82:
6a:9a:8c:ab:fd:55:fb:da:f9:f0:ff:6b:92:d7:2b:20:35:39:
1b:b9:c6:bf:6d:4d:61:9a:ce:7c:62:70:8c:5a:0a:d9:ec:f3:
8f:ab:34:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:00 2026 by rpki-client