
$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa
File: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=
Subject key identifier: 8B:58:E5:CC:A4:D9:7E:F9:0B:E2:E3:8C:18:8D:2A:51:94:A0:F1:B8
Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Certificate serial: 75356D9D41BC849C7FE1737366D35400A5E364DE
Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:52:40 +0000
ROA not before: Mon 11 May 2026 17:47:40 +0000
ROA not after: Mon 10 May 2027 17:52:40 +0000
asID: 134823
IP address blocks: 165.101.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl
rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:35:6d:9d:41:bc:84:9c:7f:e1:73:73:66:d3:54:00:a5:e3:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Validity
Not Before: May 11 17:47:40 2026 GMT
Not After : May 10 17:52:40 2027 GMT
Subject: CN=8B58E5CCA4D97EF90BE2E38C188D2A5194A0F1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:e2:cc:1a:8d:5a:e3:6b:85:88:7d:3c:bb:
53:22:93:cb:45:5c:73:4c:75:28:2d:42:ae:70:21:
14:9b:5a:bb:2d:45:2a:81:d4:20:b1:34:74:04:33:
31:5a:21:85:4c:a0:dc:ea:59:9f:bc:1e:e7:67:aa:
18:a4:1e:94:11:e7:a9:af:b7:a1:22:17:9d:a3:fa:
f9:4c:40:a5:b6:ec:a0:52:03:d2:d4:8c:4b:bf:a7:
ab:2f:da:d6:79:ca:fe:6a:84:2c:81:5d:86:68:8e:
cf:88:74:da:a9:23:1e:08:36:24:93:2a:f0:33:db:
03:0d:0f:ac:29:3a:0c:97:ac:69:0f:b4:7c:34:70:
b7:ce:4b:aa:e6:ab:58:22:37:57:2a:af:69:c2:a8:
77:86:d9:af:b9:25:19:6b:38:78:77:4d:b4:65:ca:
66:2d:1e:8c:17:34:b8:af:c7:ee:57:2e:b3:b4:6e:
ee:be:1d:ab:73:e2:28:63:94:55:cc:10:99:af:6a:
d9:30:c4:1d:99:1e:b9:77:79:37:c1:e9:c8:50:a8:
88:36:c0:e6:2d:8c:4f:8e:77:bf:3f:8e:e2:84:f3:
bc:4b:ae:3a:1d:b8:b3:ba:46:28:89:e6:36:d4:34:
96:85:f1:b5:17:ce:93:f1:e5:3b:41:8d:17:3c:76:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:E5:CC:A4:D9:7E:F9:0B:E2:E3:8C:18:8D:2A:51:94:A0:F1:B8
X509v3 Authority Key Identifier:
keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c6:a9:47:87:9f:81:0d:5d:b3:ac:bf:e0:e0:af:40:10:19:
74:3e:9e:ad:ca:e6:6a:e8:e0:a5:0f:e7:4b:37:de:f4:e2:42:
c2:89:52:1f:76:fb:af:2a:ab:48:67:0b:33:34:79:48:74:8d:
cc:70:b6:fa:3a:5b:86:28:ff:ef:48:2b:1f:cc:01:3a:f4:42:
e3:80:03:50:fd:6e:9f:56:f3:b7:93:7c:c7:64:07:bf:ae:d4:
24:a0:6f:1d:07:1f:7a:87:71:3c:1d:9d:7c:de:8d:4a:aa:f6:
01:10:7c:a8:8d:fa:9a:85:22:c4:c0:c2:76:dc:3f:47:30:6a:
fd:10:37:6c:d8:e4:14:05:f9:3c:e1:45:33:c9:74:ce:3c:6d:
00:db:e4:58:8d:a5:b3:81:f7:69:da:94:e0:1a:c4:7e:3e:a9:
df:6d:18:15:41:3f:25:2d:55:78:68:d9:7e:19:a6:f9:af:61:
36:8d:c0:08:fe:44:59:11:9b:e2:1f:b4:6c:f1:b4:11:b7:97:
7d:93:6a:f8:d5:dd:9b:99:b8:84:dc:18:e7:3a:0c:b5:36:00:
b2:ef:68:44:f7:09:c9:01:dc:14:06:82:bd:fa:3e:4b:75:a8:
13:f2:5f:19:e5:fb:10:76:36:fc:c5:72:80:0e:43:11:e6:e2:
d6:6d:8b:b2
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUdTVtnUG8hJx/4XNzZtNUAKXjZN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3
MTUzQzFGQzAeFw0yNjA1MTExNzQ3NDBaFw0yNzA1MTAxNzUyNDBaMDMxMTAvBgNV
BAMTKDhCNThFNUNDQTREOTdFRjkwQkUyRTM4QzE4OEQyQTUxOTRBMEYxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmRuLMGo1a42uFiH08u1Mik8tF
XHNMdSgtQq5wIRSbWrstRSqB1CCxNHQEMzFaIYVMoNzqWZ+8HudnqhikHpQR56mv
t6EiF52j+vlMQKW27KBSA9LUjEu/p6sv2tZ5yv5qhCyBXYZojs+IdNqpIx4INiST
KvAz2wMND6wpOgyXrGkPtHw0cLfOS6rmq1giN1cqr2nCqHeG2a+5JRlrOHh3TbRl
ymYtHowXNLivx+5XLrO0bu6+Hatz4ihjlFXMEJmvatkwxB2ZHrl3eTfB6chQqIg2
wOYtjE+Od78/juKE87xLrjoduLO6RiiJ5jbUNJaF8bUXzpPx5TtBjRc8divDAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUi1jlzKTZfvkL4uOMGI0qUZSg8bgwHwYDVR0j
BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT
T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0
NUUzQUE0NzE1M0MxRkMuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVTT04vMS8zMTM2MzUy
ZTMxMzAzMTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM0Mzgz
MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQApWWYMA0GCSqGSIb3DQEBCwUAA4IBAQAaxqlHh5+BDV2z
rL/g4K9AEBl0Pp6tyuZq6OClD+dLN9704kLCiVIfdvuvKqtIZwszNHlIdI3McLb6
OluGKP/vSCsfzAE69ELjgANQ/W6fVvO3k3zHZAe/rtQkoG8dBx96h3E8HZ183o1K
qvYBEHyojfqahSLEwMJ23D9HMGr9EDds2OQUBfk84UUzyXTOPG0A2+RYjaWzgfdp
2pTgGsR+PqnfbRgVQT8lLVV4aNl+Gab5r2E2jcAI/kRZEZviH7Rs8bQRt5d9k2r4
1d2bmbiE3BjnOgy1NgCy72hE9wnJAdwUBoK9+j5LdagT8l8Z5fsQdjb8xXKADkMR
5uLWbYuy
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:41 2026 by rpki-client