
$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e36332e36332e302f32342d3234203d3e203138303432.roa
File: 36312e36332e36332e302f32342d3234203d3e203138303432.roa (raw, json)
Hash identifier: M3lBeU93rPFpHZzfzya2pm//fao7dHKeGXfUQUWeG4c=
Subject key identifier: 62:C6:F3:0B:26:81:2F:05:96:FF:F5:33:3A:8A:DE:B4:B0:6D:D4:F8
Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Certificate serial: 21BBC3576253E3DDE85DB83697A2ABE18DAF8483
Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36332e302f32342d3234203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:18:54 +0000
ROA not before: Mon 11 May 2026 17:13:54 +0000
ROA not after: Mon 10 May 2027 17:18:54 +0000
asID: 18042
IP address blocks: 61.63.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:bb:c3:57:62:53:e3:dd:e8:5d:b8:36:97:a2:ab:e1:8d:af:84:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Validity
Not Before: May 11 17:13:54 2026 GMT
Not After : May 10 17:18:54 2027 GMT
Subject: CN=62C6F30B26812F0596FFF5333A8ADEB4B06DD4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:fd:b5:1e:71:32:ae:db:c5:41:02:7a:e0:
67:bf:f8:c1:41:d2:70:da:49:bc:20:13:fd:68:50:
dd:e5:fa:14:77:e1:e8:59:61:7b:8c:2f:59:1b:15:
f8:d5:ef:c1:fb:9e:1d:97:9f:cc:ad:92:ed:41:be:
7f:97:6e:5f:92:8f:fc:2a:d2:fb:61:d4:1c:e8:89:
8d:67:31:2a:17:9f:d8:ca:8e:41:59:0d:e3:e9:2e:
b6:6c:81:5d:d9:84:e5:2b:f9:48:72:1b:97:c7:b2:
59:12:69:3a:ad:7c:c4:8d:1f:b0:06:fd:32:40:e1:
6b:0c:31:51:9a:66:69:50:06:f5:64:09:5b:79:d2:
0d:82:97:1c:f6:26:56:d7:57:b8:41:1f:a0:f5:9b:
d6:ad:4f:66:c5:2a:e4:0d:e6:2d:61:bc:57:eb:e0:
77:50:d3:f0:9f:e1:ec:e6:a1:bf:88:ee:09:55:4b:
8c:77:0c:ef:95:b0:11:d6:7a:16:be:8a:b5:34:20:
61:c9:23:b3:a3:71:33:3e:f3:53:6f:82:cd:ff:5d:
2c:f7:47:7f:95:75:3e:2e:36:7a:65:97:a6:d8:a7:
a4:fa:1e:84:f9:1a:a6:38:a6:68:42:23:b9:d8:9c:
e8:6d:c0:9a:87:cb:78:df:f6:d9:6d:ca:a9:a3:2a:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:F3:0B:26:81:2F:05:96:FF:F5:33:3A:8A:DE:B4:B0:6D:D4:F8
X509v3 Authority Key Identifier:
keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36332e302f32342d3234203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.63.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cc:e8:7b:6b:c7:73:3f:ab:7f:40:bc:dd:cf:ef:ab:f4:7b:
6d:b4:a3:21:72:d9:ba:76:36:9c:0f:0c:51:cb:05:10:58:de:
1d:88:d6:86:05:74:51:f4:5c:ab:a7:1c:c2:b8:c1:ca:58:ff:
c6:1a:47:ff:43:cd:4b:c0:16:de:67:55:76:33:e6:ef:f5:c9:
3d:ad:ad:01:f9:32:d6:7a:38:85:87:d8:4e:59:c0:a8:0d:96:
5b:10:e1:6f:1a:24:8e:0d:ef:e8:b9:38:a3:57:c9:ba:11:28:
68:ec:5e:0c:0c:f0:11:e6:f2:e6:d6:2f:35:ae:3f:3e:81:63:
07:1e:be:3e:62:a9:9a:a8:c9:d7:d9:a7:58:41:9d:c1:75:21:
29:6d:63:04:04:23:de:06:de:ac:62:54:db:3a:ee:7c:24:c9:
ca:19:04:52:e0:6d:1a:d2:25:2e:80:44:10:4b:72:e9:54:c4:
a8:da:ff:44:9f:b4:9c:a4:47:35:0f:c8:ad:9c:f2:bf:ab:3a:
6c:41:82:6a:4c:d5:ea:cb:04:ad:2e:f5:70:e7:1a:11:35:92:
c9:f1:66:e5:95:97:86:36:47:e7:8a:04:ff:71:58:03:e9:65:
21:5a:37:e5:6d:3f:a4:cd:3c:30:c3:8d:bd:1d:bb:21:09:c1:
33:f6:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:03 2026 by rpki-client