
$ rpki-client -vvf rpkica.twnic.tw/rpki/GIGABYTE/0/3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa
File: 3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa (raw, json)
Hash identifier: sfnsYqq0KjfihimyfpgsDMNj1nls/Ip5uSoBuI60p1I=
Subject key identifier: 49:93:D8:C0:3B:9A:47:B7:68:03:1F:8B:B6:21:5C:0D:C8:9D:5F:32
Certificate issuer: /CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Certificate serial: 75361CEA97D8188AA3B31AC61E80755937569D0D
Authority key identifier: 20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa
Signing time: Mon 11 May 2026 17:09:20 +0000
ROA not before: Mon 11 May 2026 17:04:20 +0000
ROA not after: Mon 10 May 2027 17:09:20 +0000
asID: 131663
IP address blocks: 103.130.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:36:1c:ea:97:d8:18:8a:a3:b3:1a:c6:1e:80:75:59:37:56:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208C9AF2E59EAA30DB13E50969BD866B673DAB68
Validity
Not Before: May 11 17:04:20 2026 GMT
Not After : May 10 17:09:20 2027 GMT
Subject: CN=4993D8C03B9A47B768031F8BB6215C0DC89D5F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:f8:27:fa:14:9a:0e:74:4a:e0:25:82:6e:
3c:ac:01:23:19:61:0f:7a:90:b1:98:4d:7c:b4:75:
d9:7c:93:db:5c:e2:ab:c1:87:6a:1c:98:3d:49:3e:
4f:ba:6f:cb:db:77:3a:98:eb:14:c2:3c:be:2c:94:
85:4f:08:d5:0c:10:a2:82:c6:71:6e:54:7c:c1:24:
54:d7:0d:3e:18:e3:a5:46:ec:ab:38:95:1e:3a:28:
79:a2:1f:e3:5f:69:04:67:18:30:8c:24:66:d3:45:
75:50:2b:c7:c1:f3:b3:9e:cd:74:fb:19:46:6f:02:
9b:80:ad:f3:ff:21:33:04:b2:62:b1:a7:68:e5:87:
d7:20:59:97:65:04:3a:28:8f:a9:e7:de:48:03:6c:
2e:0b:64:4c:dd:f9:b6:62:9e:b0:72:8f:13:25:bd:
ea:58:78:d4:bf:b3:43:6f:5f:cc:69:b6:4f:c6:88:
1f:c7:85:43:64:7a:ae:6a:28:a5:c3:9b:25:54:32:
76:5c:92:9f:67:31:bc:f7:a8:5d:5e:9f:eb:9a:7c:
b8:1b:63:1a:c0:32:73:12:cf:fe:14:0f:07:96:14:
8c:f7:fb:4e:cd:29:83:70:15:cb:0d:39:dc:28:ba:
9d:69:f2:7c:c5:0e:b3:9b:62:8a:48:f3:76:dc:9b:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:93:D8:C0:3B:9A:47:B7:68:03:1F:8B:B6:21:5C:0D:C8:9D:5F:32
X509v3 Authority Key Identifier:
keyid:20:8C:9A:F2:E5:9E:AA:30:DB:13:E5:09:69:BD:86:6B:67:3D:AB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/208C9AF2E59EAA30DB13E50969BD866B673DAB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/208C9AF2E59EAA30DB13E50969BD866B673DAB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GIGABYTE/0/3130332e3133302e3130302e302f32322d3234203d3e20313331363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.100.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:c6:ab:4c:20:71:03:ed:3e:e3:a3:d1:da:52:3d:36:ea:54:
36:f0:50:85:a2:f7:a2:43:58:83:04:b6:53:f7:0e:10:22:14:
f0:bf:c8:06:a3:ed:c2:73:33:d1:00:e6:df:9f:cd:b5:94:58:
fa:5b:d7:e3:ce:b8:09:1e:78:a8:95:63:75:9a:3d:10:f8:32:
34:fb:29:6c:12:65:c8:10:16:1f:31:d0:af:75:85:da:5e:62:
8b:48:d9:c0:22:d4:12:9f:78:59:66:c5:0c:95:21:92:86:cf:
64:28:20:9a:aa:15:6c:5f:5a:9b:6f:29:99:d8:90:9d:7a:20:
36:bb:27:d8:ad:14:ae:68:a1:2b:9a:83:87:e9:39:a9:20:a9:
20:e7:2c:28:2d:7b:4c:89:73:9e:2c:70:ec:ac:17:df:91:33:
4c:22:41:9d:51:0c:87:e5:13:d6:20:2a:65:d1:a0:a6:15:6b:
18:3d:31:b8:77:5f:90:f0:00:59:dc:51:25:4c:20:91:14:9f:
59:b5:ea:8b:b4:78:62:13:27:d8:3d:b2:7c:1b:11:d4:61:10:
36:18:f0:67:53:90:f0:6c:59:c9:ac:50:c5:c3:95:4e:ae:aa:
5a:06:de:9a:85:ca:be:5a:cc:da:03:06:e6:f9:34:0e:f0:5f:
93:9b:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:34 2026 by rpki-client