
$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa
File: 3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa (raw, json)
Hash identifier: Kjhl9MPmHYnY/7lPcRnwvpNRHP/np0GYKwvgXIOkK14=
Subject key identifier: 38:9D:59:47:CA:A3:B4:85:AB:72:C5:C9:27:0B:C2:FD:25:7C:18:4B
Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Certificate serial: 6ECEC53F4BEB22299CAD831B555E7A7C5481BD17
Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa
Signing time: Mon 11 May 2026 17:07:25 +0000
ROA not before: Mon 11 May 2026 17:02:25 +0000
ROA not after: Mon 10 May 2027 17:07:25 +0000
asID: 131660
IP address blocks: 168.95.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ce:c5:3f:4b:eb:22:29:9c:ad:83:1b:55:5e:7a:7c:54:81:bd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Validity
Not Before: May 11 17:02:25 2026 GMT
Not After : May 10 17:07:25 2027 GMT
Subject: CN=389D5947CAA3B485AB72C5C9270BC2FD257C184B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:db:bd:e2:8f:98:56:c3:2c:30:88:7c:c8:
ca:1d:b8:87:ed:cb:5b:3d:f0:24:11:d9:a8:3c:01:
89:d2:c5:71:f4:13:9c:e3:cf:50:91:a5:20:e4:0c:
00:cf:23:16:84:3e:66:a2:43:27:58:a4:81:00:3a:
27:0c:fb:12:5d:2b:85:fe:34:28:2b:65:53:a9:4d:
af:e3:c3:07:f3:59:e4:ae:0f:b2:4b:89:06:cf:ae:
34:9f:f2:12:c3:ef:52:5d:c0:d3:83:dd:7e:ec:09:
a7:46:1f:a4:7d:d0:79:f9:68:7c:5d:fd:75:b7:ac:
5b:9d:53:5f:71:9a:54:12:4f:5d:b3:89:1e:67:8f:
ec:da:df:07:1b:b5:5e:d7:51:ca:0c:f6:34:b1:b0:
b5:6d:fb:9a:1e:4c:84:cb:e0:55:f4:ab:0d:4f:bd:
c0:17:ae:2f:5d:92:92:58:d4:4b:75:7b:94:61:c2:
c1:b8:38:c4:13:01:2e:26:78:2c:c4:ec:bd:fb:fb:
46:7e:45:ce:42:00:ed:a6:09:80:6a:8b:4d:5e:53:
d6:bf:89:84:7a:29:78:58:22:6a:ba:32:fb:ae:ad:
cf:e8:34:dd:45:d6:ef:8f:4b:3d:cf:95:86:91:00:
12:a1:5e:5f:64:81:66:d2:d8:16:d5:cf:88:fb:65:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:59:47:CA:A3:B4:85:AB:72:C5:C9:27:0B:C2:FD:25:7C:18:4B
X509v3 Authority Key Identifier:
keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234352e302f32342d3234203d3e20313331363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.95.245.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7f:66:cd:78:2d:c4:67:5d:df:b3:79:a6:0f:b7:5f:ed:ee:
dc:45:c2:c6:7d:71:77:f7:de:a0:e4:14:0d:44:0e:a4:c8:60:
47:f8:e7:2f:e6:e6:ba:8f:45:de:06:b8:a9:f5:85:82:de:6b:
b4:c5:b5:2a:09:8e:43:ec:ef:3d:0b:92:ed:74:5d:09:ba:90:
2a:68:01:9a:48:8e:79:ba:d9:b3:90:da:7f:51:0f:0e:ad:19:
b7:79:2d:e5:fe:aa:e5:ca:ed:dc:40:9a:42:bb:65:f5:1e:d5:
6c:ac:f4:df:e3:f3:f8:da:a5:60:96:cd:1d:ce:7d:c9:9f:31:
67:9a:1b:48:56:21:a8:52:11:1b:c0:62:59:73:9b:9d:dc:08:
69:18:ce:1a:02:dd:78:7b:7b:94:34:dd:93:48:dd:1b:57:23:
10:7e:7a:5c:eb:c3:8e:6f:76:61:2c:e0:b8:16:4f:31:59:be:
6d:b7:b7:21:82:31:95:33:fa:e3:19:a3:dd:b3:7b:5c:fe:b9:
2e:58:36:f8:a2:88:f5:a4:7d:45:f1:98:40:b3:b0:a0:09:a3:
a8:77:70:96:c7:57:ec:d7:2e:c8:94:15:aa:d9:04:27:91:2d:
d5:31:ca:07:80:be:42:b8:3a:e4:55:7d:09:81:83:cf:65:06:
f4:10:b9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:26 2026 by rpki-client