
$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa
File: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (raw, json)
Hash identifier: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY=
Subject key identifier: 22:11:2C:3A:A8:EF:58:5A:44:57:E0:4C:3F:E2:F4:48:03:D6:26:F6
Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial: 266E1D7BF8C6E1424B95880D51EAD4576F1172FF
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa
Signing time: Mon 11 May 2026 17:31:52 +0000
ROA not before: Mon 11 May 2026 17:26:52 +0000
ROA not after: Mon 10 May 2027 17:31:52 +0000
asID: 18411
IP address blocks: 119.30.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:6e:1d:7b:f8:c6:e1:42:4b:95:88:0d:51:ea:d4:57:6f:11:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
Validity
Not Before: May 11 17:26:52 2026 GMT
Not After : May 10 17:31:52 2027 GMT
Subject: CN=22112C3AA8EF585A4457E04C3FE2F44803D626F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:d0:36:86:ca:8c:5d:11:18:09:74:c6:72:
80:8c:b7:a6:25:33:e9:95:49:37:20:58:a3:43:c2:
1a:bc:f7:54:d1:8c:e0:0b:52:ab:41:aa:5e:83:ce:
a8:3a:ff:45:71:11:69:94:a7:0c:54:c4:55:b2:f2:
0a:af:c0:c6:3d:0c:96:9f:f9:52:d4:45:47:89:64:
e5:8d:95:c2:ba:00:4d:94:b5:98:89:98:67:c9:b0:
4c:55:a5:98:f9:bb:6f:b8:ee:c5:e1:94:ae:51:1f:
4e:cc:45:04:c7:46:b5:b1:eb:dc:31:bc:38:5c:4e:
59:fc:14:68:d2:b4:09:de:8f:c2:4e:52:e2:8d:cf:
d5:6d:e4:c9:e0:1c:81:1c:33:a6:88:b7:df:51:61:
0e:60:b5:fa:27:fd:67:6c:b2:4c:1c:f4:38:de:13:
06:ee:fd:29:2a:03:59:74:f1:9b:a5:2a:18:23:db:
95:4b:98:f8:0e:d7:e6:df:6b:28:63:80:ae:33:bf:
be:03:07:ac:35:43:6f:b9:06:0e:58:b8:f8:de:51:
ad:d3:71:4a:5b:f0:ac:78:85:3a:00:e5:08:bd:f7:
85:d0:12:2c:25:40:c6:66:83:f1:07:c0:0f:1c:cf:
54:40:f9:b1:c1:34:3a:14:63:33:45:4b:a7:01:d7:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:2C:3A:A8:EF:58:5A:44:57:E0:4C:3F:E2:F4:48:03:D6:26:F6
X509v3 Authority Key Identifier:
keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.30.16.0/20
Signature Algorithm: sha256WithRSAEncryption
41:a1:09:78:77:e8:ea:5a:8d:d6:d5:00:f1:66:f6:f2:c6:8b:
34:8f:56:28:ca:c5:46:b6:40:0b:72:21:b3:b1:7f:cc:d4:08:
a8:cd:d9:0f:59:99:ee:35:6b:14:11:21:67:3a:34:15:fc:d3:
56:3a:02:03:a6:27:61:5a:70:ab:33:88:91:83:29:d4:b3:d8:
d1:77:e7:58:67:6d:6f:28:2f:f0:c0:10:ac:04:d7:ac:1c:9c:
bf:6d:5d:80:c1:fe:0c:10:bb:6e:c3:fd:88:46:d4:ef:6e:86:
da:d9:c8:06:32:23:47:d4:d8:6a:73:65:6d:9a:f1:5d:03:2e:
eb:06:38:1b:9c:12:9d:d9:d2:70:26:4c:40:7c:d0:63:ec:f8:
b4:4b:fa:1b:30:72:1b:51:19:11:35:51:03:a1:27:23:02:6b:
e3:24:8d:cc:7f:35:da:a5:95:2e:e2:db:be:f5:c6:a7:65:f0:
4d:48:82:ad:6d:fe:b0:60:df:16:a2:34:60:ca:87:0b:f8:ba:
7d:51:22:e8:2e:82:ba:7b:ee:53:bb:ba:25:85:f7:83:14:00:
2a:87:ce:42:5a:36:bf:75:1a:e6:83:ad:fd:e4:47:0f:2a:95:
8b:e3:d8:36:69:73:26:11:22:e3:c0:4b:12:5f:08:37:de:b3:
e1:c5:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:10 2026 by rpki-client