
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa
File: 3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier: cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=
Subject key identifier: 9E:C0:BB:28:F7:D5:82:19:64:9C:D9:CB:5F:F5:B9:0D:8E:A0:D1:EF
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 0DE74C1770322CA1F5AB2424A025DEF6CE8D4AA6
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa
Signing time: Mon 11 May 2026 17:44:45 +0000
ROA not before: Mon 11 May 2026 17:39:45 +0000
ROA not after: Mon 10 May 2027 17:44:45 +0000
asID: 213607
IP address blocks: 103.177.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e7:4c:17:70:32:2c:a1:f5:ab:24:24:a0:25:de:f6:ce:8d:4a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: May 11 17:39:45 2026 GMT
Not After : May 10 17:44:45 2027 GMT
Subject: CN=9EC0BB28F7D58219649CD9CB5FF5B90D8EA0D1EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:bd:76:63:e2:3e:a9:d3:d2:0c:bb:47:69:
bf:7d:f3:ec:da:73:bf:aa:82:8f:76:d7:5c:00:44:
dd:1a:8d:d9:6d:88:af:0a:1d:91:40:0b:0e:f4:24:
6c:1e:80:56:12:43:f8:87:6e:5a:8d:78:1f:28:49:
60:c2:bb:9d:17:5d:aa:4d:f2:19:86:a9:60:85:fb:
75:af:9a:2c:bc:35:bf:ff:95:c8:fc:72:52:db:ff:
91:65:97:26:3b:90:4d:cd:f3:00:a4:d3:db:66:b0:
2c:51:f7:57:ed:1b:47:45:3a:6a:19:e6:c0:ca:4f:
66:c5:5b:60:d4:53:c7:08:00:18:a7:18:be:a4:9b:
38:20:5e:ed:34:f1:f7:20:9a:62:bc:f8:65:8e:5b:
86:be:b7:c7:5c:4a:b9:b1:c1:7f:81:ca:05:0a:a1:
da:e0:5c:3e:00:bf:7e:61:d5:b7:42:c1:09:88:9e:
c8:41:f3:f1:45:24:bc:3b:34:fc:b7:34:f7:7b:1f:
8c:ba:6e:f8:1c:1b:1b:c4:6f:00:2e:48:d3:32:44:
45:8d:0e:a4:41:38:bb:0f:de:e8:b1:4d:b6:71:3b:
24:b4:c2:2a:28:b0:3e:68:dc:4f:58:65:67:90:3d:
be:6e:31:40:57:8b:62:b9:0e:15:ff:60:88:fb:59:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:BB:28:F7:D5:82:19:64:9C:D9:CB:5F:F5:B9:0D:8E:A0:D1:EF
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.177.32.0/24
Signature Algorithm: sha256WithRSAEncryption
75:02:ba:36:c5:6f:fb:5c:c1:79:f9:72:16:87:c2:29:42:bd:
3f:9c:80:f7:c6:96:89:a6:d0:d2:53:97:83:d7:2c:c9:1e:46:
29:7d:b7:d6:69:93:c2:70:2f:29:29:bf:68:36:f8:b7:c1:d7:
ae:f3:b0:1e:3b:95:6f:93:8a:47:e1:d0:4c:ab:00:4a:7b:4b:
33:91:58:44:1b:ff:d5:85:68:ac:00:b3:19:48:79:c1:10:ee:
c9:bd:fa:b4:da:17:49:bb:1c:6d:1d:0a:d0:9e:5f:f1:96:80:
5f:b5:78:72:a9:a1:bc:0c:27:6d:61:39:5d:17:af:05:ee:39:
e8:93:14:b4:f3:6a:13:91:e0:b4:57:97:b1:ff:95:a1:2e:28:
75:e4:f3:ee:68:d9:eb:a0:ac:0d:f9:f9:cc:9d:c3:98:27:6e:
09:07:d9:9b:a4:68:e0:c0:5a:32:4f:e0:7d:2f:0b:78:59:43:
ec:a6:1a:09:c9:de:f0:28:13:7b:bd:05:c8:65:57:fd:bd:3c:
6a:13:51:24:56:e5:0b:d7:13:96:3b:b7:1a:7c:2b:f8:0a:12:
a1:00:99:6a:c7:8b:1a:8a:6f:da:b9:d8:56:a2:49:f6:9a:17:
57:49:f1:f6:13:e8:b1:e7:cb:05:bd:90:f4:ca:c8:e7:49:dc:
ff:c3:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:16 2026 by rpki-client