
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa
File: 3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier: qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=
Subject key identifier: 0C:59:D1:87:62:05:A4:64:48:18:BA:25:77:F5:74:B5:D8:8B:EC:2A
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 577760634733AE2F104F3B625201060102B6C0D5
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa
Signing time: Mon 11 May 2026 17:55:57 +0000
ROA not before: Mon 11 May 2026 17:50:57 +0000
ROA not after: Mon 10 May 2027 17:55:57 +0000
asID: 148996
IP address blocks: 103.227.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:77:60:63:47:33:ae:2f:10:4f:3b:62:52:01:06:01:02:b6:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: May 11 17:50:57 2026 GMT
Not After : May 10 17:55:57 2027 GMT
Subject: CN=0C59D1876205A4644818BA2577F574B5D88BEC2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:46:ad:a2:dc:bf:20:46:48:0e:68:a0:bc:
22:fd:68:a8:87:2c:31:3c:13:5d:7b:77:31:0d:12:
89:e0:9b:b9:c9:cf:6e:46:52:9a:28:d2:9d:bd:f4:
b8:1b:b3:e4:77:dd:7b:26:31:c3:42:39:51:70:60:
ec:51:77:2e:5d:fa:a4:af:10:ad:c3:ea:50:c0:f4:
9a:34:c8:1f:e6:c7:31:f1:6a:83:fd:7b:bb:b5:73:
6b:1f:7e:e1:0c:14:36:21:ef:be:0b:ff:10:d4:62:
dd:dd:5e:19:39:29:b2:0c:1a:c7:67:f0:e7:58:6c:
85:68:e1:fc:dd:46:e1:3b:ee:b8:e2:cf:23:b8:53:
de:24:d5:dd:81:77:55:3c:3f:04:23:b6:93:2b:3c:
f7:45:89:f2:f9:37:a0:21:9b:f3:67:cc:27:1b:7d:
9d:95:3b:21:bb:77:fd:7f:04:b5:db:57:c0:1b:36:
2b:de:3f:2a:bb:49:97:5a:b0:35:bb:87:0a:2e:17:
e2:4b:be:45:f4:01:16:5f:ca:4c:d8:c0:ab:f0:ed:
d0:c4:5c:df:6b:97:b9:06:d1:62:d0:2f:c0:db:88:
51:db:78:c3:26:b7:48:0a:d4:e8:12:e9:6e:13:a9:
14:a5:74:50:46:bd:c6:94:b1:cd:aa:4a:88:39:dd:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:D1:87:62:05:A4:64:48:18:BA:25:77:F5:74:B5:D8:8B:EC:2A
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3f:a4:12:99:c8:05:8b:d0:68:47:41:82:41:91:86:8a:59:
b9:d2:cf:12:a6:5d:fc:9b:02:9e:ea:20:63:6a:7d:7d:cf:de:
21:4f:64:57:1d:f3:3c:e2:56:aa:b0:4d:12:e5:88:62:4f:18:
53:1e:f2:49:c5:4e:97:21:7f:53:f8:92:31:01:c3:e1:0a:84:
3f:6d:53:67:c4:c5:82:01:af:3e:aa:0d:b6:cf:29:d5:76:00:
bb:85:c9:22:4b:fb:24:ff:f7:04:91:45:c1:0a:ef:ee:58:26:
6e:18:fc:00:ee:e3:ff:f1:11:8a:9b:98:a4:cc:3c:be:62:48:
40:10:12:7c:9a:a0:8a:3c:68:ae:f1:65:2d:ca:fa:2b:84:4d:
a3:6d:68:40:d0:39:7a:9c:32:91:d1:d4:b7:0a:1f:01:69:3b:
67:7c:a2:c1:f2:d4:ac:80:ca:cf:ee:70:03:33:ce:7f:f4:8e:
9b:fe:fc:fe:11:e2:5e:36:3c:a0:12:19:19:13:12:2f:57:96:
e8:01:9c:17:a6:70:4b:22:79:8d:ab:29:af:0f:d2:84:96:28:
ff:76:ca:a5:28:c2:b5:cb:ff:70:73:70:d3:55:bd:fe:95:88:
3f:e4:fd:e6:e8:cb:37:b7:be:13:37:ef:2d:07:16:0a:69:f6:
8f:fd:2b:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:22 2026 by rpki-client