
$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3230203d3e203138343131.roa
File: 3131392e33302e31362e302f32302d3230203d3e203138343131.roa (raw, json)
Hash identifier: VDIgNrS0Bj4C/eZLO2BtqOoH9/X324CutCA0RmZUaVs=
Subject key identifier: 78:4B:E7:04:2E:10:7C:A2:62:E7:F0:83:6B:C1:A2:F9:2D:E7:68:F3
Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial: 7B27EE2440692286D3C079B2EFA1C306A379BCAF
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3230203d3e203138343131.roa
Signing time: Mon 11 May 2026 16:54:29 +0000
ROA not before: Mon 11 May 2026 16:49:29 +0000
ROA not after: Mon 10 May 2027 16:54:29 +0000
asID: 18411
IP address blocks: 119.30.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:27:ee:24:40:69:22:86:d3:c0:79:b2:ef:a1:c3:06:a3:79:bc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
Validity
Not Before: May 11 16:49:29 2026 GMT
Not After : May 10 16:54:29 2027 GMT
Subject: CN=784BE7042E107CA262E7F0836BC1A2F92DE768F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:fe:bb:e2:70:e6:74:3e:ff:f5:2d:3a:5d:
33:76:76:1e:d7:37:74:4d:d3:a5:ee:2e:fe:ad:58:
b2:79:d9:2c:21:a9:85:e8:35:26:5b:88:c4:3d:cd:
76:03:e3:15:ea:57:3b:10:2f:b5:19:67:24:49:3a:
e4:c8:2c:4e:4e:bc:de:6d:4e:55:dc:14:70:4b:ab:
3d:db:ce:b5:1a:9c:6c:72:41:d4:ad:b3:b9:21:6a:
fa:2c:26:d4:d5:d9:0f:e2:70:28:5f:08:85:e9:61:
18:33:89:64:a4:08:26:5c:a0:c7:1a:a1:2c:96:f9:
bb:86:15:7f:c7:4b:81:b3:19:b8:93:c8:84:90:72:
67:13:88:6b:cd:bb:b1:b8:e5:19:a6:77:78:d8:a7:
5f:e3:81:56:ca:fa:9a:32:0f:f7:b8:c7:7c:b1:d3:
55:21:74:55:02:2a:e1:ba:60:ba:e7:b2:fc:f1:32:
c7:0e:b4:b2:74:9a:0a:0f:cb:f7:e5:65:91:c8:d3:
c4:e1:fb:f3:a0:ae:e9:bf:23:f8:c1:d1:34:17:b9:
3f:39:68:5f:6c:a6:d0:e1:97:33:8f:14:17:44:5b:
66:45:75:97:fd:88:7c:aa:ce:9e:47:e2:ad:a5:29:
d8:1c:23:ab:c9:20:eb:49:5a:6f:6d:94:6c:26:1c:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:E7:04:2E:10:7C:A2:62:E7:F0:83:6B:C1:A2:F9:2D:E7:68:F3
X509v3 Authority Key Identifier:
keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3230203d3e203138343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.30.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:28:b0:a6:90:6e:ee:38:de:81:05:a9:36:74:ce:44:76:d4:
74:a1:cf:5a:56:76:f2:a4:e9:36:69:06:13:ee:a1:e8:37:e3:
ac:ea:ff:7b:a6:df:17:7b:9d:44:4c:61:0a:be:9c:a1:99:c7:
13:79:44:15:1d:41:88:85:67:bf:53:79:11:cd:77:a9:f1:09:
c4:38:6a:96:f4:40:3c:0a:1a:3b:54:32:95:ab:34:bc:a5:ac:
99:f6:06:97:a0:90:81:bf:22:9e:7f:0a:a8:3a:c9:70:96:db:
d5:c3:11:70:d3:a7:3d:b0:3d:b8:65:32:78:ce:fd:82:09:70:
46:23:1d:87:cc:cb:8f:74:ca:9e:c8:5f:ba:6d:4b:86:72:b1:
25:47:a5:8c:6a:5c:bd:3f:da:3f:62:18:84:93:f1:3e:9f:95:
fd:41:c2:a8:95:0c:7a:8e:6c:f6:5e:a0:ea:67:81:cf:54:d4:
e2:09:c3:f2:ef:7a:f7:37:a4:11:18:37:c2:02:5b:d9:a9:c6:
21:97:71:35:95:b2:7d:f0:c4:fb:f5:c6:48:2d:c2:cd:14:e6:
bc:41:80:c2:b3:eb:09:11:28:64:fe:2d:38:fd:2e:80:12:63:
f3:30:58:a6:90:27:50:8a:59:28:64:ed:5d:a4:b0:25:98:56:
f1:66:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:11 2026 by rpki-client