
$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/323430363a656534303a3a2f33322d3438203d3e203138303431.roa
File: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (raw, json)
Hash identifier: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=
Subject key identifier: 96:6B:B0:B3:D9:C0:EA:03:1C:C2:7B:94:FC:9F:84:CA:51:24:A7:3A
Certificate issuer: /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial: 4F429B87E0AA2EBB39D2CA90CAE3EB4725802CD8
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/323430363a656534303a3a2f33322d3438203d3e203138303431.roa
Signing time: Mon 11 May 2026 17:26:32 +0000
ROA not before: Mon 11 May 2026 17:21:32 +0000
ROA not after: Mon 10 May 2027 17:26:32 +0000
asID: 18041
IP address blocks: 2406:ee40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:42:9b:87:e0:aa:2e:bb:39:d2:ca:90:ca:e3:eb:47:25:80:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Validity
Not Before: May 11 17:21:32 2026 GMT
Not After : May 10 17:26:32 2027 GMT
Subject: CN=966BB0B3D9C0EA031CC27B94FC9F84CA5124A73A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:97:b5:90:de:e8:d4:1a:4e:85:e4:5c:fe:3a:
1c:32:bb:f5:da:ef:5b:29:bf:d1:56:ca:7f:13:5a:
d5:ee:23:42:4e:6d:33:9c:5f:34:7c:8c:f1:58:66:
02:83:30:7b:fc:d2:fb:16:a1:48:8e:40:30:b0:83:
6c:42:b3:b1:21:08:16:13:05:51:68:98:42:c2:c8:
48:3b:5f:3e:87:51:2c:fd:0b:e6:4d:f1:2b:e0:11:
3e:df:b6:d4:4c:ee:f1:22:3c:6c:0f:f5:51:91:47:
bf:7d:10:42:9a:f0:56:f4:08:99:c0:6d:84:62:96:
ba:1f:47:99:9e:a0:76:cc:31:f3:c6:65:67:56:e9:
13:df:12:63:ee:d8:a7:cd:33:f0:a0:ee:1a:a1:00:
d7:8f:e3:d3:4c:39:bd:2a:ec:93:66:97:32:93:22:
2e:92:67:6b:47:0a:2f:9c:cf:61:3b:11:14:3b:13:
c1:7f:cb:70:69:e9:68:ca:ec:97:b3:ee:24:d2:5d:
a6:f6:eb:95:2f:33:c2:69:d3:21:af:9b:0c:36:a7:
68:87:ab:e6:d0:0a:71:c0:7d:20:e8:07:90:6c:a2:
54:1d:f4:57:fc:e4:7e:04:c8:68:f7:7c:cd:34:3c:
b0:4b:48:b9:14:63:aa:3c:2a:7b:54:28:55:6e:9a:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:B0:B3:D9:C0:EA:03:1C:C2:7B:94:FC:9F:84:CA:51:24:A7:3A
X509v3 Authority Key Identifier:
keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/323430363a656534303a3a2f33322d3438203d3e203138303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:ee40::/32
Signature Algorithm: sha256WithRSAEncryption
be:01:12:a7:31:2d:84:bd:13:de:63:aa:9b:dd:7e:0d:0f:ab:
f5:a2:92:1c:54:0e:b0:f0:8b:aa:1e:cf:75:e0:7d:d2:c0:ca:
a8:16:c5:77:8e:ba:a2:c4:ca:9b:73:b7:27:06:3d:24:95:9a:
75:6c:1f:1e:a5:2c:3e:b1:c4:91:47:20:9d:1f:76:77:a7:66:
d3:da:ce:24:e9:74:84:b4:f8:11:7d:01:3e:2c:9c:94:7f:be:
ce:cc:61:1b:d4:fc:3d:aa:0d:98:7a:ce:6c:4e:e2:38:29:f2:
47:a3:b8:2f:84:9f:cc:cc:59:5b:ce:59:84:cd:c3:c3:cc:bb:
bf:14:dd:e5:7f:e2:bc:9f:ec:38:ac:d9:10:32:b8:b3:1c:d1:
ae:20:25:a3:b9:4f:75:08:e0:9d:f4:bf:23:95:f2:8d:63:fc:
dd:be:6d:b6:47:76:8e:3c:42:cb:81:d4:fa:f1:a1:c3:79:20:
0d:b4:a9:0d:8a:59:19:86:8f:e7:0e:80:cf:cf:74:1d:72:da:
30:c3:62:52:70:09:37:ba:e2:8b:61:85:2b:9f:5c:54:f5:d7:
e5:aa:ab:4f:3e:fd:d9:81:24:71:34:02:8a:fc:0e:7a:92:92:
ac:00:05:fa:db:cf:2a:91:a8:67:ba:34:ff:e7:12:5a:81:22:
ed:0b:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:53 2026 by rpki-client