
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa
File: 3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa (raw, json)
Hash identifier: Pe+GfCAU9CJUhyX0GcmCiKMiXy/uVxymKcKinAclsuQ=
Subject key identifier: 02:53:4B:EB:2E:2F:FE:41:52:EC:23:F2:0D:9C:BC:33:FD:6F:74:7B
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 1E6CA50A19B8476C1D520FB9862CA3A74102E95C
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa
Signing time: Mon 11 May 2026 17:57:40 +0000
ROA not before: Mon 11 May 2026 17:52:40 +0000
ROA not after: Mon 10 May 2027 17:57:40 +0000
asID: 148996
IP address blocks: 103.227.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6c:a5:0a:19:b8:47:6c:1d:52:0f:b9:86:2c:a3:a7:41:02:e9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: May 11 17:52:40 2026 GMT
Not After : May 10 17:57:40 2027 GMT
Subject: CN=02534BEB2E2FFE4152EC23F20D9CBC33FD6F747B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:02:34:41:96:74:32:0a:2b:06:30:72:df:
bb:2b:ea:7a:4a:98:fb:f4:51:02:b4:32:77:64:7a:
ac:78:24:b4:e1:45:47:db:18:18:74:90:4c:c4:45:
25:40:89:76:95:ce:d5:93:db:b2:d5:d9:54:a6:61:
e4:ff:32:e2:87:f2:75:bb:a6:86:a1:83:af:8d:ce:
2b:da:ac:16:9f:64:70:0b:56:b4:e9:11:52:33:ea:
7b:9d:9a:9a:73:38:dd:3c:9b:34:1d:33:c1:31:ff:
84:df:8b:60:ee:56:78:4b:0b:1f:1e:ea:d2:b2:39:
9e:f2:0d:e5:dc:35:e7:f0:bc:81:84:90:99:8e:61:
bb:5b:5c:29:2b:b4:0d:85:1b:a7:e7:54:8e:f6:4b:
6c:10:c7:fe:9f:00:5c:b1:83:47:83:4a:a4:9e:62:
cd:3c:c9:02:46:66:a6:04:b8:b9:8f:39:bd:29:6f:
56:0b:1e:8e:1d:45:a0:ac:48:6e:4b:cb:5a:a4:47:
dc:25:1a:ed:54:34:ad:85:d4:aa:1a:29:e8:00:b3:
d4:a0:d7:22:35:07:aa:8c:38:3b:5b:10:83:12:8b:
bd:9b:cf:e0:59:87:fd:55:4f:bd:bd:79:0b:c1:32:
54:7c:9f:de:9f:4d:e9:42:99:b8:ee:8d:d8:e6:bd:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:4B:EB:2E:2F:FE:41:52:EC:23:F2:0D:9C:BC:33:FD:6F:74:7B
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/23
Signature Algorithm: sha256WithRSAEncryption
92:61:51:d0:e1:20:09:4b:4e:91:44:67:ef:13:c1:98:8f:f8:
78:9c:b6:80:49:ee:aa:65:79:b3:6e:a3:2e:c0:c1:d5:b6:94:
a8:bc:cb:7d:38:2b:3e:f1:81:a7:23:22:f2:58:58:10:bd:97:
f6:52:52:51:45:69:fe:d2:10:bc:e5:c1:ea:b2:79:34:47:bd:
71:b1:37:0d:5e:a5:96:b4:6b:d8:c2:5e:32:18:cf:03:d6:49:
6b:91:ba:9a:af:41:07:67:35:cd:e3:48:dc:a1:1b:dc:16:0f:
b2:94:88:62:ef:f0:ae:36:34:a2:12:dc:9a:e1:a2:1f:03:a2:
6a:23:6e:45:bd:57:6e:ca:8d:6d:a3:bf:4e:a1:45:29:13:51:
81:01:70:f6:0b:38:cf:de:90:df:6e:c0:99:8e:a0:68:c8:6c:
fe:44:da:fb:09:f7:b4:69:d2:02:e4:cd:c2:eb:f2:3a:7a:eb:
9c:18:b7:86:1d:61:2e:f0:46:06:80:fb:74:ad:7c:ae:79:3a:
ea:11:59:56:1a:ff:bf:c4:9e:dd:e5:38:c6:ce:15:28:01:87:
e6:77:d4:b8:74:29:7b:97:28:29:e4:0e:0c:d0:e3:1b:29:12:
dc:56:53:0e:0a:0f:60:4c:ca:bd:d3:53:6f:95:49:6b:5f:67:
0e:c8:a7:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:24 2026 by rpki-client