
$ rpki-client -vvf rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa
File: 323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa (raw, json)
Hash identifier: pFKhsyWHL1AlVyOC8vWZezSMKe3dVHyGr7QtI3wqO1k=
Subject key identifier: C5:05:78:40:FB:43:EC:62:B8:E1:A9:63:21:B4:40:D6:07:87:4D:76
Certificate issuer: /CN=D82B42B328967B86227F939C5515F94575F4B06F
Certificate serial: 6CCD9D40FA9A245B5D87C77E4CAEC926AB878D1F
Authority key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa
Signing time: Mon 11 May 2026 17:18:49 +0000
ROA not before: Mon 11 May 2026 17:13:49 +0000
ROA not after: Mon 10 May 2027 17:18:49 +0000
asID: 38047
IP address blocks: 2400:5ea0:852a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:cd:9d:40:fa:9a:24:5b:5d:87:c7:7e:4c:ae:c9:26:ab:87:8d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D82B42B328967B86227F939C5515F94575F4B06F
Validity
Not Before: May 11 17:13:49 2026 GMT
Not After : May 10 17:18:49 2027 GMT
Subject: CN=C5057840FB43EC62B8E1A96321B440D607874D76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:47:df:fe:3b:7e:5d:a8:9f:d3:ae:92:a4:
1b:25:13:3b:57:f2:6f:0e:d6:c2:28:2a:ec:b8:71:
80:c1:67:92:03:d2:92:b7:36:46:8f:94:37:69:a5:
63:4b:bf:cd:60:b5:a2:e7:ea:9e:2f:45:4d:7d:77:
d7:b9:3c:fc:d7:a0:72:3d:0a:58:ad:01:ac:63:8c:
27:72:ef:5b:20:1c:d3:a6:6c:48:e9:bc:6b:c7:b1:
43:d1:0e:16:61:36:5c:ed:0f:93:cb:11:83:ec:f5:
70:1a:16:44:45:64:ce:ef:26:a7:b8:d2:6f:70:2a:
d7:72:72:26:db:45:94:56:1d:b9:ef:15:74:8e:9c:
c9:f1:bd:7f:68:1d:c1:40:24:44:17:36:7e:76:f7:
b5:5e:37:7c:18:81:b5:48:9a:dc:2e:a4:7b:6b:95:
c0:75:8a:54:31:c6:b3:51:96:1d:76:6a:e7:e8:83:
92:4a:b9:e6:88:a0:90:02:bc:17:66:bc:b1:5e:de:
fd:b8:c3:b4:87:cd:6b:80:24:95:b7:81:f7:48:e8:
b2:2f:ac:27:71:fc:6c:c4:7f:3b:57:69:25:79:78:
0a:32:50:23:db:19:8d:aa:9e:45:54:aa:a4:97:89:
cf:e7:fa:2b:71:aa:97:98:e2:2a:18:27:e3:b3:17:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:78:40:FB:43:EC:62:B8:E1:A9:63:21:B4:40:D6:07:87:4D:76
X509v3 Authority Key Identifier:
keyid:D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:5ea0:852a::/48
Signature Algorithm: sha256WithRSAEncryption
01:9f:ea:c0:08:95:b3:f1:80:87:84:5a:63:73:4a:1a:ab:8b:
e1:0f:dd:56:e5:0a:f1:07:9c:b4:5e:90:a7:5e:85:91:ff:5b:
6a:1d:b4:ef:84:b4:c1:09:e4:e8:fc:35:b4:6f:31:42:b4:d2:
1b:4b:f7:f1:0d:e6:45:9e:e4:db:3c:ad:42:f7:21:1b:12:2e:
50:23:34:6c:19:e3:20:7f:a9:c6:16:e2:ac:64:e3:fe:fc:ea:
ba:d6:8f:bd:1c:ae:0b:f7:35:a7:8c:0a:c8:ed:12:a9:b2:10:
a8:be:81:f9:c0:3a:6f:2d:c3:3c:a4:32:4d:b6:56:25:c9:ca:
4c:07:c9:94:23:6a:df:ce:4b:93:cd:14:7d:7a:a4:30:ed:44:
c4:c6:1d:0c:a4:d8:c8:6d:f6:b5:d7:82:7f:e3:47:33:95:dc:
12:80:82:02:cd:36:ee:f2:b1:3b:33:4c:02:02:97:4d:35:e9:
9e:2a:b4:86:c3:c6:eb:03:50:b5:53:b4:25:a1:01:57:96:98:
11:b0:cd:a3:13:85:34:10:e2:21:97:de:f5:61:b4:ed:6e:79:
f7:0d:27:f8:2f:59:62:61:cb:36:e2:8b:69:ce:6a:0d:5c:3c:
ef:56:bf:a2:eb:bd:7a:d6:7f:bb:4a:f6:fb:b4:1c:81:59:aa:
76:7d:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:08 2026 by rpki-client