
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/323430333a656530303a3a2f33322d3536203d3e2039323434.roa
File: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (raw, json)
Hash identifier: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=
Subject key identifier: 49:BB:E8:E0:C8:7C:EC:08:BB:AB:18:1B:DA:1C:46:FC:F5:B5:9F:1E
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 09C13ABAD98EC8FC2B873690B84BF286800EB2D7
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/323430333a656530303a3a2f33322d3536203d3e2039323434.roa
Signing time: Mon 11 May 2026 17:57:31 +0000
ROA not before: Mon 11 May 2026 17:52:31 +0000
ROA not after: Mon 10 May 2027 17:57:31 +0000
asID: 9244
IP address blocks: 2403:ee00::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c1:3a:ba:d9:8e:c8:fc:2b:87:36:90:b8:4b:f2:86:80:0e:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: May 11 17:52:31 2026 GMT
Not After : May 10 17:57:31 2027 GMT
Subject: CN=49BBE8E0C87CEC08BBAB181BDA1C46FCF5B59F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:91:64:61:d9:ae:ad:e6:84:c6:ec:b9:81:
be:cc:42:af:b2:84:73:e2:eb:ae:c7:e8:0c:90:c4:
56:2d:06:61:22:d1:08:e0:f4:4f:0d:f5:57:10:d0:
49:0e:fa:fe:38:4a:d8:27:04:4e:c6:c6:80:96:4a:
6a:aa:d4:11:79:21:c6:6d:0a:f8:79:4d:93:c3:3c:
6c:41:88:89:ae:09:11:5c:b0:91:f4:39:45:3c:af:
4d:66:2d:74:e2:02:17:13:68:4d:16:1f:3d:41:bb:
d4:18:3e:61:e6:e2:1f:63:5d:29:2d:fb:28:72:47:
dd:4a:ce:6c:44:49:1c:38:8b:08:0e:17:5a:8f:0c:
73:2e:4f:64:11:b2:f4:7c:c6:5e:60:6b:2b:be:f7:
7d:1d:ec:4c:c8:6c:8c:a3:a6:be:7d:f2:c7:82:e3:
3c:6c:99:79:6d:9a:29:31:2b:85:79:44:78:33:50:
27:bb:34:10:09:b7:9e:cb:3c:71:db:78:45:97:6b:
38:98:4c:f6:8a:8b:84:ec:f0:31:d4:fa:3d:e9:00:
13:81:5d:30:55:c8:a5:02:08:9a:7f:4e:5c:20:94:
2e:f9:fb:31:7c:ff:37:24:c1:28:30:9e:e1:f8:22:
fc:f5:c6:54:35:7b:3c:34:8a:13:44:95:75:47:f6:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:E8:E0:C8:7C:EC:08:BB:AB:18:1B:DA:1C:46:FC:F5:B5:9F:1E
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/323430333a656530303a3a2f33322d3536203d3e2039323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ff:79:44:49:53:7c:96:b4:04:b7:33:28:a5:ad:a9:5c:8b:
86:37:3e:8b:b6:62:f3:d8:bc:3a:3f:97:42:2b:28:a6:6c:9b:
92:f9:64:ef:b9:f6:fc:86:65:e9:09:c6:d1:c6:69:4a:8e:38:
7d:90:47:3d:35:5d:7f:eb:1d:b5:8f:db:3e:3e:c7:68:14:f6:
0b:e8:c2:9d:67:dd:b1:4d:11:09:1e:a1:d2:37:2f:45:7a:1c:
bb:8a:4b:2f:57:1e:30:e1:1d:d7:29:78:da:f1:1b:8e:90:62:
1b:ec:9d:ed:6b:23:3b:fc:ce:bf:4d:a2:42:c9:f8:6d:34:0f:
ae:18:9c:5d:46:ff:ee:ce:59:4d:ae:9d:2d:3f:b8:37:97:3d:
ac:ce:fe:d4:87:50:66:18:a1:bd:c8:81:d9:44:8e:27:c2:80:
fb:b7:c4:9d:ed:aa:57:8c:39:24:15:a7:6a:3a:97:01:22:05:
da:d2:ac:9f:16:02:cd:cc:ad:90:f5:a2:f1:d2:30:8d:03:28:
19:7f:15:d3:c3:42:73:86:b1:1b:7d:c1:6f:18:1b:14:70:e0:
f3:d3:c2:5f:89:75:e0:2c:55:50:cc:e7:63:63:6f:51:c8:cc:
a4:6d:00:20:1b:3d:9b:13:83:b0:11:c5:87:15:b8:f0:77:60:
4d:28:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:48 2026 by rpki-client