
$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa
File: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (raw, json)
Hash identifier: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=
Subject key identifier: 83:D2:03:11:15:3E:36:C5:66:89:AE:D9:65:5A:4C:DD:59:2D:FE:5B
Certificate issuer: /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial: 09DBCACFA0B021F0F0435DBE19EB2B8E6FEA81E9
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa
Signing time: Mon 11 May 2026 17:57:26 +0000
ROA not before: Mon 11 May 2026 17:52:26 +0000
ROA not after: Mon 10 May 2027 17:57:26 +0000
asID: 131676
IP address blocks: 138.252.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:db:ca:cf:a0:b0:21:f0:f0:43:5d:be:19:eb:2b:8e:6f:ea:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Validity
Not Before: May 11 17:52:26 2026 GMT
Not After : May 10 17:57:26 2027 GMT
Subject: CN=83D20311153E36C56689AED9655A4CDD592DFE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:47:cd:b5:d8:00:16:8b:47:57:2e:5c:38:
ce:08:76:98:1a:f3:2e:59:c9:01:72:43:21:fe:d7:
d9:d8:c1:b8:a8:4d:1b:29:7c:81:85:a6:28:9b:9e:
59:48:42:a8:ab:4b:88:00:96:89:6d:e1:85:05:4b:
c2:b8:e8:d1:1b:47:ab:85:d1:3c:c3:f5:f8:98:11:
7b:b7:bc:d1:6f:87:2c:90:5c:26:47:77:ff:da:b9:
4b:ac:e5:a7:64:ef:64:c0:66:ee:c5:61:96:bb:ea:
92:fa:03:64:ae:5c:b8:5d:3a:60:27:f5:d1:0c:84:
8d:a6:8f:76:67:4c:e1:13:ad:39:60:ac:00:e3:28:
3f:42:86:2c:90:dc:ec:28:2d:42:7c:e9:70:a9:01:
29:10:4d:b7:7e:44:22:a4:df:79:64:2c:90:f6:4e:
2f:77:5d:6a:7c:be:58:dc:72:26:d6:64:e3:e4:95:
9c:3d:dd:d7:1e:55:ee:ce:f3:1d:f0:16:ac:7a:b3:
83:23:66:cc:27:39:ae:d9:79:fd:b2:e9:ae:fe:83:
0d:6c:bb:da:de:19:ff:81:38:aa:53:6c:6c:cd:9e:
fd:0e:82:cc:a7:b2:5f:8f:7d:fa:64:63:ff:94:5c:
ef:a1:c1:3b:0d:9c:0b:1c:4e:57:a0:9b:eb:d8:cd:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D2:03:11:15:3E:36:C5:66:89:AE:D9:65:5A:4C:DD:59:2D:FE:5B
X509v3 Authority Key Identifier:
keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.192.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:9b:8a:c8:4f:80:5e:79:b4:34:5a:d7:7a:f5:a7:f4:55:a5:
ad:5a:d8:b2:a8:26:0b:01:2b:81:8b:82:d1:a7:bc:78:1e:d8:
e7:8f:bd:b5:c8:59:bb:68:a5:24:6c:e0:45:d2:66:9a:b9:09:
11:e9:70:31:12:6f:b9:30:6f:e4:e3:b1:97:8a:c1:81:5e:5e:
16:cf:c1:9b:21:ef:5f:89:1d:dd:cb:34:6f:5f:80:01:7f:5c:
4a:0a:d6:22:6f:cb:ae:5b:c6:45:75:03:e2:55:76:94:83:7a:
49:c2:a3:3b:34:82:ec:23:25:22:b6:74:da:72:7a:53:fd:4a:
f5:76:53:26:1d:f4:fb:d5:4a:b0:4b:51:ae:fe:6d:2d:06:7e:
02:70:35:9a:22:b2:f4:41:c9:c7:53:fb:42:4d:63:cf:43:4b:
71:1a:15:dd:7b:9f:f7:73:61:23:77:7e:ad:21:80:25:59:3d:
39:47:61:4b:72:6e:43:ad:49:84:2b:99:26:6b:96:31:a8:19:
76:4f:19:61:15:13:6e:a1:18:b0:ea:c8:67:f9:c6:ac:07:d7:
b1:02:ca:7d:23:37:f1:87:d2:3b:22:ae:82:b0:27:99:ef:18:
fc:1a:84:99:f5:96:4f:10:fc:df:44:3e:c5:66:03:84:60:38:
e7:05:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:13 2026 by rpki-client