
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa
File: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=
Subject key identifier: D8:7D:79:A6:54:F0:7A:A8:44:3C:00:C1:F2:73:37:F5:EA:59:70:AE
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 67E00CC211BE4153A7215F69F96A78BEBF651DF1
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa
Signing time: Mon 11 May 2026 16:54:36 +0000
ROA not before: Mon 11 May 2026 16:49:36 +0000
ROA not after: Mon 10 May 2027 16:54:36 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e0:0c:c2:11:be:41:53:a7:21:5f:69:f9:6a:78:be:bf:65:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: May 11 16:49:36 2026 GMT
Not After : May 10 16:54:36 2027 GMT
Subject: CN=D87D79A654F07AA8443C00C1F27337F5EA5970AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:ba:dc:41:6b:fb:2f:ab:67:01:a9:ea:03:
55:ad:7b:14:fa:15:8e:52:a1:57:26:86:38:b3:fd:
92:f5:3e:4f:d7:09:a8:a3:96:45:13:8d:24:63:34:
f0:fc:a8:a5:e6:08:e9:71:99:38:1f:d7:f6:6d:6f:
0b:80:b9:bd:44:68:f1:6b:a4:bc:df:59:8d:70:93:
3e:a9:5c:2b:ee:1a:6b:3a:3d:bd:92:15:bd:09:c0:
9b:ed:0b:62:a0:12:a2:c6:7f:89:45:1e:88:78:6e:
5a:8f:2e:40:95:ee:f9:fc:bf:f1:a4:81:e0:f0:12:
d6:ed:cc:69:af:4f:4e:d4:9c:10:86:99:31:9d:f0:
1a:81:d8:c1:90:ed:9c:ee:af:c9:97:18:86:eb:47:
9a:05:48:73:0e:f5:b1:03:52:43:11:63:83:94:9c:
de:d7:4f:0e:4b:16:5c:c6:e3:75:1b:bb:89:ae:78:
86:db:84:a1:24:7e:18:a2:28:0a:cf:ef:7d:cb:19:
94:01:51:a0:0e:79:2e:6f:74:47:e1:b4:11:2c:3f:
4d:c6:b9:80:fb:66:7d:c1:fb:bc:6a:7c:66:15:d1:
87:41:4f:41:25:d0:f7:79:3b:d6:c2:ee:d6:d4:b2:
30:37:99:bf:13:86:66:1f:8a:11:86:bc:a0:38:3d:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:79:A6:54:F0:7A:A8:44:3C:00:C1:F2:73:37:F5:EA:59:70:AE
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1c:ca:fa:05:e7:d4:76:b2:3a:3f:a6:64:ee:8b:84:55:0c:
0e:c9:bf:58:b8:7b:58:7b:15:48:4e:d3:83:e2:d8:89:d1:15:
27:32:f7:a0:85:44:08:1f:93:9b:8c:e8:1c:b2:54:3c:dc:1e:
a5:47:74:a1:56:93:af:cb:2e:44:76:f4:23:10:68:13:52:55:
83:25:af:aa:4f:28:56:34:77:e4:e9:b2:25:87:a9:fc:57:0f:
e3:5f:9d:57:f0:57:5f:b6:ec:b8:fb:7d:e8:6e:5b:23:57:73:
e4:4f:61:3d:1d:91:1a:06:c8:09:12:38:8e:6a:b0:e0:92:93:
90:92:72:d1:df:1c:df:76:49:49:4f:47:65:e8:62:89:e9:27:
1d:49:d6:81:a6:1d:37:98:92:db:05:28:8c:be:db:ed:af:c6:
fd:7d:ae:36:60:19:e0:4f:58:79:d8:53:97:3e:0e:a8:87:b1:
04:e2:d1:ad:a6:72:ae:a8:7c:04:90:2b:ec:fe:91:23:d1:c2:
27:7c:27:81:8b:94:b5:34:36:f3:4d:23:24:52:ad:6f:5b:5e:
08:eb:a7:27:f6:44:80:ec:9a:4e:ab:41:4e:81:25:d1:a1:eb:
f4:f8:85:de:2f:90:83:8c:6c:79:75:fd:5e:35:3d:72:d4:60:
bd:e5:01:dd
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUZ+AMwhG+QVOnIV9p+Wp4vr9lHfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA1MTExNjQ5MzZaFw0yNzA1MTAxNjU0MzZaMDMxMTAvBgNV
BAMTKEQ4N0Q3OUE2NTRGMDdBQTg0NDNDMDBDMUYyNzMzN0Y1RUE1OTcwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMrrcQWv7L6tnAanqA1WtexT6
FY5SoVcmhjiz/ZL1Pk/XCaijlkUTjSRjNPD8qKXmCOlxmTgf1/ZtbwuAub1EaPFr
pLzfWY1wkz6pXCvuGms6Pb2SFb0JwJvtC2KgEqLGf4lFHoh4blqPLkCV7vn8v/Gk
geDwEtbtzGmvT07UnBCGmTGd8BqB2MGQ7Zzur8mXGIbrR5oFSHMO9bEDUkMRY4OU
nN7XTw5LFlzG43Ubu4mueIbbhKEkfhiiKArP733LGZQBUaAOeS5vdEfhtBEsP03G
uYD7Zn3B+7xqfGYV0YdBT0El0Pd5O9bC7tbUsjA3mb8ThmYfihGGvKA4PYL9AgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQU2H15plTweqhEPADB8nM39epZcK4wHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMzYzMTJlMzUzNjJl
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzIzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
PThUMA0GCSqGSIb3DQEBCwUAA4IBAQCFHMr6BefUdrI6P6Zk7ouEVQwOyb9YuHtY
exVITtOD4tiJ0RUnMveghUQIH5ObjOgcslQ83B6lR3ShVpOvyy5EdvQjEGgTUlWD
Ja+qTyhWNHfk6bIlh6n8Vw/jX51X8Fdftuy4+33oblsjV3PkT2E9HZEaBsgJEjiO
arDgkpOQknLR3xzfdklJT0dl6GKJ6ScdSdaBph03mJLbBSiMvtvtr8b9fa42YBng
T1h52FOXPg6oh7EE4tGtpnKuqHwEkCvs/pEj0cInfCeBi5S1NDbzTSMkUq1vW14I
66cn9kSA7JpOq0FOgSXRoev0+IXeL5CDjGx5df1eNT1y1GC95QHd
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:52 2026 by rpki-client