
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa
File: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (raw, json)
Hash identifier: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=
Subject key identifier: B9:17:A4:82:76:CD:4C:DB:AB:0F:DF:64:06:50:CB:8A:5D:6F:64:9B
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 5CD4B1AB31C656DB532C22F6CCB6FD7D81E3507C
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa
Signing time: Mon 11 May 2026 16:54:38 +0000
ROA not before: Mon 11 May 2026 16:49:38 +0000
ROA not after: Mon 10 May 2027 16:54:38 +0000
asID: 9244
IP address blocks: 61.247.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d4:b1:ab:31:c6:56:db:53:2c:22:f6:cc:b6:fd:7d:81:e3:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: May 11 16:49:38 2026 GMT
Not After : May 10 16:54:38 2027 GMT
Subject: CN=B917A48276CD4CDBAB0FDF640650CB8A5D6F649B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:c0:90:fa:2a:b9:cf:0a:d2:ce:9a:f3:86:
4c:df:b7:d6:0d:c1:d7:70:aa:78:ae:be:0b:fe:33:
fa:7c:e2:03:6e:ac:22:ba:b3:d6:b1:08:f1:9a:2a:
f8:3c:33:c6:89:02:6d:2a:ec:8c:f8:ed:10:b3:88:
84:ff:04:c1:50:52:c8:b9:f3:c1:2a:ff:25:eb:ca:
13:e4:62:6a:d4:58:c1:82:4b:e4:cd:5f:03:e3:2f:
10:25:5f:26:e2:6b:08:f9:93:68:72:44:01:46:4b:
ab:02:a2:d2:17:bc:93:b4:94:02:e7:f2:38:25:76:
07:0a:50:9e:ab:75:6f:04:7b:75:6f:26:e1:69:6d:
a5:4c:dd:97:e6:fe:c8:d6:6d:1f:be:bb:23:81:f2:
00:1a:2f:56:36:b8:0c:c0:26:82:ee:75:b2:94:63:
50:62:dc:9b:d1:bd:0d:84:ac:c3:3d:6d:50:51:43:
4f:2d:f7:b1:e5:4e:63:96:0c:45:b1:85:1a:09:93:
04:6a:62:38:23:7d:36:cc:0d:57:6c:0a:91:29:dd:
11:fb:6e:4c:a1:de:52:cc:af:d2:60:83:70:d6:0d:
f7:05:da:b3:17:11:03:57:83:1b:d2:70:00:82:c2:
5f:8e:ce:8d:63:ea:8e:04:48:e2:31:69:fb:54:7d:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:A4:82:76:CD:4C:DB:AB:0F:DF:64:06:50:CB:8A:5D:6F:64:9B
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.247.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:d8:59:5e:43:86:de:18:8e:7c:98:3f:fb:a8:98:15:60:26:
b8:24:8e:ab:1f:f3:f4:6e:f2:d6:a2:04:43:d2:51:40:05:8d:
1b:41:a9:3c:4e:7d:d0:90:c1:4a:e2:3e:ae:5b:29:53:3e:23:
2b:dd:3c:71:d3:1f:d3:2b:5d:d2:b2:ec:42:a7:d1:33:4c:35:
3c:06:1f:f2:7d:a5:e2:67:0e:c4:d0:09:9b:e5:ac:cb:6b:89:
ba:c5:32:fa:b9:4d:35:e4:fc:b8:aa:9a:43:31:e0:ab:06:eb:
a1:89:be:5b:d6:39:db:2c:59:b7:59:a2:b0:4e:fa:93:82:cd:
ea:84:94:2d:f1:b8:e9:4c:75:50:38:80:8c:5c:cd:13:50:1d:
b7:11:a9:4e:f9:8e:6f:fe:f4:96:b7:a8:7b:56:63:29:d1:f4:
9b:5c:49:30:86:94:35:48:bb:48:ba:28:40:2e:a8:20:7f:9b:
80:b2:3e:a0:a6:e6:47:3e:c8:f2:c1:cb:3a:36:3f:01:a7:1c:
b2:9a:7a:0a:2c:e5:09:bb:55:fb:33:06:44:8a:81:c9:62:1e:
0d:61:f2:a4:5f:59:57:1b:22:2d:a3:32:4e:65:80:dd:93:6d:
f9:02:c5:8c:ad:6a:4f:af:8e:24:cd:0f:4e:13:94:a9:a9:d3:
4c:6d:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:49 2026 by rpki-client