
$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa
File: 3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier: yiII0RXcH0Wd/44KCbcakGluviCl0yIDFTB2H9T2dQ4=
Subject key identifier: D4:84:38:75:EF:FC:EE:67:FA:D7:44:03:59:BC:67:CD:00:25:71:C9
Certificate issuer: /CN=64F178C727C3786F0888FDE2673E44F99B04C71D
Certificate serial: AF236FA6CA9AC68DA02217A054CEC7243ACD0C
Authority key identifier: 64:F1:78:C7:27:C3:78:6F:08:88:FD:E2:67:3E:44:F9:9B:04:C7:1D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa
Signing time: Mon 11 May 2026 17:37:56 +0000
ROA not before: Mon 11 May 2026 17:32:56 +0000
ROA not after: Mon 10 May 2027 17:37:56 +0000
asID: 131642
IP address blocks: 103.255.40.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.crl
rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
af:23:6f:a6:ca:9a:c6:8d:a0:22:17:a0:54:ce:c7:24:3a:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64F178C727C3786F0888FDE2673E44F99B04C71D
Validity
Not Before: May 11 17:32:56 2026 GMT
Not After : May 10 17:37:56 2027 GMT
Subject: CN=D4843875EFFCEE67FAD7440359BC67CD002571C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:80:18:40:b2:3b:dd:93:e3:5f:b1:75:fc:
7a:cf:52:73:d7:aa:08:7b:15:fb:c9:35:b2:bb:b9:
8b:b8:ac:9e:e8:2a:9a:f7:92:54:3a:1c:13:bc:17:
e2:2a:14:0b:67:3f:cc:90:b3:e4:81:ad:40:85:ee:
5f:30:2a:c5:01:61:20:bd:c6:d5:25:12:e1:c4:75:
7e:55:a2:fb:21:88:60:7c:ac:f7:b7:17:50:19:ea:
02:bb:f5:df:41:69:9c:45:ff:7a:fc:3f:ab:6c:6b:
bf:62:ad:63:5c:ec:40:d0:12:30:0c:a2:63:d5:f0:
1d:69:2f:d1:6f:81:ca:f9:a5:9a:76:ab:26:1d:45:
69:77:f1:0a:bc:02:2a:a1:d1:0f:5f:78:10:8f:73:
e2:21:07:d7:2a:d0:bf:0e:0f:b0:30:3c:a9:b1:bb:
89:26:ea:a9:23:bc:7a:34:d2:a2:a4:93:7a:af:82:
24:fd:21:7c:3c:97:81:1f:3d:c1:d4:fd:a8:d0:ad:
29:72:c4:e5:40:d2:1f:82:e3:73:ff:19:49:f8:69:
05:f1:00:f7:b5:6b:19:85:8b:f6:dc:c1:3f:96:70:
0a:fa:54:b9:c2:32:aa:73:97:b0:f3:f4:04:f1:d4:
a7:83:d9:77:c8:a1:50:bc:05:08:81:82:b7:c9:b9:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:38:75:EF:FC:EE:67:FA:D7:44:03:59:BC:67:CD:00:25:71:C9
X509v3 Authority Key Identifier:
keyid:64:F1:78:C7:27:C3:78:6F:08:88:FD:E2:67:3E:44:F9:9B:04:C7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.40.0/23
Signature Algorithm: sha256WithRSAEncryption
58:88:59:7e:d4:6e:b5:ff:60:cc:2e:2b:90:41:b2:49:2e:3f:
08:de:8c:a0:90:36:2d:24:64:fe:1d:49:13:52:04:9c:4e:70:
e1:ae:aa:94:00:f4:5b:62:b7:4c:51:62:f0:02:c9:19:cd:7e:
80:ec:bf:cf:4e:e2:6b:a2:17:5f:a7:b9:da:33:79:86:3d:81:
76:64:22:7a:43:0c:fc:e6:a3:dd:b6:26:a6:fb:0e:b4:b6:a6:
4a:48:57:ae:e8:94:32:16:2e:08:0e:cc:68:61:b7:c0:d2:0a:
02:be:2c:ed:0d:10:49:e4:3b:8e:fb:a9:f0:9f:76:b9:e3:0b:
5c:6f:8d:5e:76:c6:8d:ee:2f:81:74:df:40:13:89:0c:22:08:
04:be:0a:9f:17:3e:dd:4e:f9:c3:d0:a0:ce:97:99:66:bb:5a:
b3:09:82:74:00:a7:5a:29:19:1e:17:f4:a6:34:78:52:26:5c:
57:5b:4e:15:7a:c2:6c:a4:fe:f1:a8:d5:3b:04:c7:a3:85:32:
b3:e1:26:5b:17:6b:f8:ea:3c:96:70:79:bb:2f:de:d0:f3:12:
94:2d:aa:ce:51:96:90:dd:f7:72:9a:81:0b:ce:6f:d7:b9:9e:
7e:72:09:ce:a9:f0:7f:03:fe:0b:fe:b3:a4:cc:1e:bc:2e:d3:
41:0b:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:24 2026 by rpki-client