
$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa
File: 3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa (raw, json)
Hash identifier: /rFAcJo7WRKr9Y04XWoxK2EUrySSmtYzHuftb6eEQmg=
Subject key identifier: 4E:46:CB:5D:F8:EE:A3:F7:24:0F:EC:51:F6:AC:AC:77:CC:A8:57:79
Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Certificate serial: 285188AAC7809FD61EF696DDFA298E3A6DC10A51
Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa
Signing time: Mon 11 May 2026 17:07:26 +0000
ROA not before: Mon 11 May 2026 17:02:26 +0000
ROA not after: Mon 10 May 2027 17:07:26 +0000
asID: 131660
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:51:88:aa:c7:80:9f:d6:1e:f6:96:dd:fa:29:8e:3a:6d:c1:0a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D
Validity
Not Before: May 11 17:02:26 2026 GMT
Not After : May 10 17:07:26 2027 GMT
Subject: CN=4E46CB5DF8EEA3F7240FEC51F6ACAC77CCA85779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:88:12:93:3e:d2:0e:ff:91:08:fe:56:08:
41:da:30:96:02:da:37:2e:45:fc:76:56:38:a7:d9:
e6:2f:e4:2f:9f:b0:ed:03:5c:3e:aa:d5:2c:e9:4b:
33:70:62:63:b9:84:7e:92:71:d4:14:4f:3a:7d:d8:
3a:ef:cd:4d:bd:99:6b:1a:4f:17:bc:59:86:6e:71:
f6:b3:b5:49:cf:b0:b3:27:79:d4:ba:f2:8d:55:ab:
08:6f:c0:a7:9c:a0:dc:43:47:f6:9f:09:58:9c:96:
c4:69:48:72:9e:d8:55:2f:4b:19:9b:4e:85:64:db:
74:e7:d3:f0:e0:dd:a0:49:9a:0d:27:55:dc:db:b5:
61:da:18:84:22:3e:1f:63:52:4c:7c:52:88:2f:c7:
17:54:37:92:92:ed:0e:96:9d:28:57:a2:f9:e8:61:
10:7d:cb:73:ba:7b:0d:2e:fc:76:06:e9:d9:7d:d4:
46:13:29:27:88:bb:8e:9f:e3:2e:5e:b7:a5:bf:42:
0b:e4:29:87:18:59:77:de:34:7c:fb:cd:dc:1a:6e:
85:79:d5:6e:29:78:c3:94:90:ba:3e:06:c9:37:bb:
15:89:22:5b:70:ff:ac:e8:5f:2d:0f:c4:ee:54:dc:
0e:5c:b4:4f:00:d1:bb:bc:ab:2e:c9:6a:18:f8:74:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:46:CB:5D:F8:EE:A3:F7:24:0F:EC:51:F6:AC:AC:77:CC:A8:57:79
X509v3 Authority Key Identifier:
keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e3234362e302f32342d3234203d3e20313331363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bb:65:e1:76:fc:5a:32:bf:fb:b1:f8:f2:65:03:bb:6b:6a:
18:cd:3c:6c:90:27:41:67:2d:2f:0a:06:e8:b8:5f:8c:ea:d4:
b6:80:0e:b4:36:de:ac:20:b6:a6:d7:4d:79:00:95:0f:fd:ae:
43:63:14:44:4f:2b:09:56:22:26:bd:2b:b3:59:87:24:75:f7:
ef:7d:21:7a:13:1f:3e:76:d6:9f:33:38:12:43:46:d1:16:b7:
3b:2d:a2:09:d0:ab:96:08:f2:91:34:12:c1:c1:a6:53:95:21:
2a:26:25:bf:8f:52:1f:28:2b:31:b9:c6:8f:79:f2:6e:58:75:
48:43:47:a4:45:c8:b7:32:26:68:c3:35:1f:b7:4c:dc:80:70:
32:64:35:76:a2:a5:26:57:58:ea:19:b5:c4:36:43:35:da:05:
0f:ff:49:b4:a6:eb:ee:f8:15:e8:47:d1:ef:8a:04:f2:61:5e:
f3:e9:ba:16:c2:2f:e6:ef:3b:9a:cc:7a:8d:25:a1:77:e9:93:
ab:b4:09:e1:a3:6a:58:04:7d:e4:14:e9:b9:d1:f8:0c:d1:0f:
5d:5b:0f:d0:aa:99:35:0a:d7:b8:91:6d:da:9b:9e:cd:e5:21:
9a:d8:bd:cc:38:83:ba:75:ba:f9:5a:3d:9b:b7:8d:11:ce:75:
8d:ad:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:48 2026 by rpki-client