
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa
File: 3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa (raw, json)
Hash identifier: lYNt12/rSEz4/dlS37gzJuWq+YruDJ0h47+wB84GJ48=
Subject key identifier: A8:23:57:39:F6:B8:E3:59:54:15:1F:A2:1B:BF:BF:CC:54:19:83:52
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 1A64DCAAE234F31DE8385A3E1A0AA04C6DDFFA54
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa
Signing time: Mon 11 May 2026 17:10:12 +0000
ROA not before: Mon 11 May 2026 17:05:12 +0000
ROA not after: Mon 10 May 2027 17:10:12 +0000
asID: 17418
IP address blocks: 103.153.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:64:dc:aa:e2:34:f3:1d:e8:38:5a:3e:1a:0a:a0:4c:6d:df:fa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:05:12 2026 GMT
Not After : May 10 17:10:12 2027 GMT
Subject: CN=A8235739F6B8E35954151FA21BBFBFCC54198352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:d1:d3:78:1a:4c:ff:77:32:e0:9a:54:a9:
c5:7b:c3:f2:90:7d:5f:ee:b8:1c:9f:97:5c:4b:49:
19:22:7f:7a:20:fd:88:3e:d9:a9:00:96:d6:fc:d6:
67:b7:82:2b:81:cf:f0:70:ef:20:ba:c4:58:c5:1a:
21:3f:0f:2d:4f:8b:b2:91:6f:c8:9e:68:c0:2e:7e:
14:e6:fc:ef:08:31:a9:be:7f:3f:b0:0a:ae:9f:1f:
ba:5a:c3:2e:51:71:0e:6e:8f:13:e7:4c:17:88:49:
90:76:a5:c5:4e:c1:eb:8b:b2:c3:5f:f0:99:58:f4:
dd:66:d2:e8:0f:cd:f9:0b:eb:d3:51:72:81:49:a4:
81:a3:05:46:d4:e9:51:6f:fa:cc:03:63:8f:91:c3:
24:b1:90:43:dc:3b:94:66:38:fb:aa:88:29:1c:47:
e6:0c:c6:a2:32:6f:9f:3c:08:97:8b:d6:b1:be:d0:
f8:23:be:ad:d1:76:f3:dd:40:01:c9:2f:9c:a4:96:
74:b5:5e:fa:0e:6a:f3:38:a2:2e:0b:59:e1:7c:a7:
d6:5b:03:c3:15:e9:b3:2c:bf:fd:2c:e5:54:53:ec:
f2:c0:db:17:1e:37:0d:e8:19:70:e6:6b:99:81:3f:
b7:88:2d:1f:ec:9b:42:b7:52:ac:9d:31:19:e6:c0:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:57:39:F6:B8:E3:59:54:15:1F:A2:1B:BF:BF:CC:54:19:83:52
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e203137343138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:2a:5e:02:64:0f:c7:58:3e:cd:42:2f:4d:18:f3:1d:29:47:
cd:ed:ea:a0:17:ed:9f:8d:a6:1e:d8:e7:b9:72:7f:ef:c9:37:
98:9d:d9:bf:7b:b1:5c:2e:1c:74:24:3b:04:63:8a:1a:4f:27:
74:73:9e:ce:31:03:ec:c1:b1:56:38:58:0c:6c:8c:0b:cb:ca:
59:fd:48:1e:c4:31:73:6c:88:54:91:df:73:7a:d5:d9:ed:bc:
6b:53:c9:17:cc:4d:79:a8:51:d3:81:d9:04:55:4a:cd:09:f2:
52:b4:9f:0c:fd:c8:50:6f:d0:26:4c:4d:14:70:f1:90:85:43:
e1:f0:51:2e:bd:3a:55:19:b1:ca:95:a3:71:e1:46:f5:8b:f4:
b8:9d:0f:ed:53:02:0f:d8:4c:fb:fc:d8:64:7b:59:87:d2:51:
78:29:8e:b7:f4:be:cd:3a:a5:65:f2:fa:1c:cf:51:03:45:8b:
59:9a:65:4a:41:d4:88:83:4b:46:3a:7f:94:0b:ae:03:c9:67:
d2:20:cf:b2:81:f0:aa:2a:66:78:85:f6:1e:4a:44:b6:7f:3e:
89:ff:d9:52:b2:d1:75:ce:15:33:b2:27:f4:4f:94:7a:e5:85:
5a:89:89:ca:22:05:d6:07:4c:c0:01:b3:b6:48:3c:88:0e:1b:
15:b2:9b:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:25 2026 by rpki-client