
$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa
File: 323430323a336365303a3a2f33322d3438203d3e203138303433.roa (raw, json)
Hash identifier: kou5TkjScUT8me0v1XqzHwgdWT9m4lkBG9XROC9VU+0=
Subject key identifier: BE:42:E9:CD:67:6C:36:48:4D:0F:E1:24:44:67:95:C8:27:79:AF:78
Certificate issuer: /CN=F382B7314BE5F96FAB63C6934F221809499142AF
Certificate serial: 5665DFA3A9C1B02CCCECED204A33EAB88E461094
Authority key identifier: F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa
Signing time: Mon 11 May 2026 17:57:21 +0000
ROA not before: Mon 11 May 2026 17:52:21 +0000
ROA not after: Mon 10 May 2027 17:57:21 +0000
asID: 18043
IP address blocks: 2402:3ce0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl
rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:65:df:a3:a9:c1:b0:2c:cc:ec:ed:20:4a:33:ea:b8:8e:46:10:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F382B7314BE5F96FAB63C6934F221809499142AF
Validity
Not Before: May 11 17:52:21 2026 GMT
Not After : May 10 17:57:21 2027 GMT
Subject: CN=BE42E9CD676C36484D0FE124446795C82779AF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:a7:83:a4:cc:b7:ab:08:70:10:b7:93:e6:
05:fe:dc:6c:7a:15:e1:e6:b9:5b:7d:c0:94:3b:e3:
b3:98:93:03:fc:6e:12:40:9b:38:bc:fd:7e:f3:09:
64:40:a6:b7:41:3c:ef:98:a5:24:c6:b8:fc:25:0e:
11:61:00:29:f3:04:2a:86:28:83:2c:a8:44:c8:17:
b5:44:bd:53:13:2f:9b:26:d5:0e:a8:76:ad:a9:90:
6d:bc:50:5c:a2:05:8a:b7:ab:f2:31:ed:77:cb:7f:
79:14:3b:d0:f5:ca:e1:59:5b:33:ba:b7:ec:d5:9b:
59:f3:c7:e8:3d:d5:51:f6:45:35:18:fe:8a:f5:4c:
69:04:54:64:d0:36:7c:f9:86:f4:82:c4:a0:a6:d6:
ec:f2:f9:58:98:db:82:31:b6:3e:9e:57:44:5d:bf:
b5:69:72:60:6d:1b:6a:d0:5c:7a:62:41:80:e4:99:
57:84:65:7a:db:37:91:18:ff:d9:73:f1:40:9e:cd:
b0:a5:5b:b0:ee:ea:49:c2:2b:dc:17:b9:68:46:45:
43:c8:42:9f:90:de:64:19:87:ad:9c:e9:dc:02:78:
07:f5:40:20:00:e9:ad:d8:be:fd:bd:7f:e9:35:d9:
33:3a:5c:e8:01:82:2a:d4:dd:bc:a9:21:e1:f5:40:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:42:E9:CD:67:6C:36:48:4D:0F:E1:24:44:67:95:C8:27:79:AF:78
X509v3 Authority Key Identifier:
keyid:F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:3ce0::/32
Signature Algorithm: sha256WithRSAEncryption
93:cc:34:51:f2:a3:30:ed:61:33:f9:99:15:c3:30:aa:34:89:
00:07:ce:a3:d9:e2:ef:b4:d2:de:b0:21:eb:44:34:d4:04:8d:
aa:ee:7b:55:ad:ae:9f:20:9f:95:3e:82:17:f5:a8:e9:e3:b4:
c1:91:39:5f:3e:71:06:11:13:01:5b:a8:8a:76:e2:74:4b:38:
d1:ab:5e:3a:44:a0:f4:d0:18:bd:9e:01:9c:ce:8b:80:54:99:
39:37:60:86:2b:a3:81:96:22:99:d1:97:89:78:4a:3c:df:86:
0b:44:53:85:5e:31:cf:8d:b9:00:c4:12:dd:49:e0:04:ea:eb:
c7:fa:3f:80:45:df:bf:7f:21:e6:fb:6b:cf:3e:13:6d:a2:45:
56:c7:f4:4a:1f:a2:41:00:19:54:e8:c6:30:c8:a3:1b:a2:68:
ec:0b:87:a0:7e:42:74:40:2a:aa:eb:9d:bb:29:23:fd:9a:5f:
66:01:00:bb:4e:a7:ed:10:70:28:04:68:a0:1f:d3:80:1a:db:
9c:f5:51:30:fb:07:2b:03:8d:dc:b0:4f:b1:1c:53:63:63:d4:
36:96:40:10:cc:5d:05:7c:6a:ed:79:0c:2b:1d:72:c3:7d:69:
92:8b:e5:9c:cf:3a:c8:07:90:b6:d5:f7:4e:b5:69:25:95:da:
6d:be:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:45 2026 by rpki-client