
$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa
File: 3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa (raw, json)
Hash identifier: UO7gvVHXWOf9xNngHpaJcF4QjHFiPZ4bxN2SGXLKeFI=
Subject key identifier: 35:1C:7F:C4:E3:44:0F:2C:42:C4:41:07:A0:D8:B6:CC:31:BC:25:5F
Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5
Certificate serial: 24902FDEA072497E8B4DD6B95EAC0C300FD784C2
Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa
Signing time: Mon 11 May 2026 17:36:42 +0000
ROA not before: Mon 11 May 2026 17:31:42 +0000
ROA not after: Mon 10 May 2027 17:36:42 +0000
asID: 131147
IP address blocks: 157.66.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl
rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:90:2f:de:a0:72:49:7e:8b:4d:d6:b9:5e:ac:0c:30:0f:d7:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5
Validity
Not Before: May 11 17:31:42 2026 GMT
Not After : May 10 17:36:42 2027 GMT
Subject: CN=351C7FC4E3440F2C42C44107A0D8B6CC31BC255F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:da:34:c1:32:83:30:64:36:25:d8:c1:1a:
cb:34:53:6d:ee:f4:56:e5:51:81:38:50:53:1f:b8:
63:6e:86:20:ee:ee:94:c9:8c:b0:79:2d:a7:46:e8:
ca:52:15:17:93:79:0b:21:74:1a:c6:26:5f:3f:64:
37:15:d3:b5:a7:9f:89:55:ae:31:3b:aa:28:87:6e:
6e:7e:82:af:10:3f:49:b1:18:82:67:93:90:22:a1:
e4:ff:77:be:42:c0:8b:49:57:37:0b:fa:b2:65:6a:
55:db:59:0b:c3:ce:71:d2:ac:9c:e8:56:20:89:61:
1b:d9:f5:66:70:f0:b1:30:b0:27:6c:37:3a:23:1c:
b1:39:98:48:e5:03:82:34:e1:d9:aa:89:88:b5:ca:
63:51:bd:d2:3a:7f:6c:67:3d:d8:36:52:2f:c1:c0:
c5:ac:82:d7:49:6a:2f:d7:5c:b2:ed:5a:3f:0b:18:
b6:32:ee:3c:65:e3:8e:06:ea:18:ce:be:f1:cb:c4:
78:75:27:9c:50:64:71:4e:02:ce:bd:3a:3a:f1:43:
71:f4:f0:16:70:a8:48:e5:f9:1e:1d:e1:c1:9f:f1:
10:26:ad:aa:5a:21:1b:dc:2e:82:2f:6f:57:a4:74:
1a:07:64:4e:2d:d2:5e:b4:8e:c9:4c:3c:e6:81:9b:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:7F:C4:E3:44:0F:2C:42:C4:41:07:A0:D8:B6:CC:31:BC:25:5F
X509v3 Authority Key Identifier:
keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136372e302f32342d3234203d3e20313331313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:68:43:b7:89:2e:71:c3:fa:2f:26:59:c4:c0:3e:88:83:2f:
be:fc:7b:53:68:18:f1:49:a5:f9:bf:e3:88:40:c0:f1:f1:35:
20:6a:4b:43:0f:72:6b:0f:91:cb:c0:89:8d:9f:b3:92:d8:54:
fc:b0:e1:e1:3c:13:46:a2:dc:95:00:f8:ce:d9:41:4a:b0:10:
ee:41:cc:14:b9:16:cb:c5:9c:3b:e9:bf:43:c1:b6:4d:b6:61:
e1:74:1e:51:cf:bf:51:c0:e1:d8:d2:e3:35:9a:06:69:50:5c:
b4:d4:79:6f:13:53:93:2a:e5:7d:4d:27:d9:bf:4e:10:21:34:
be:1d:e0:09:54:37:29:23:87:e9:bb:60:14:18:a8:f7:bd:aa:
07:6e:4e:ad:c3:3c:ba:97:bc:6e:92:30:96:4f:81:fc:f8:87:
7f:64:68:53:23:e1:82:d7:fb:a7:36:89:9e:77:a5:3a:6b:4e:
09:fa:33:be:b4:f9:37:a8:ed:99:35:b3:d3:39:68:95:f6:bb:
08:80:30:a0:f2:0d:56:0f:31:e3:e1:8c:65:47:1d:60:90:3b:
98:a4:9b:7d:88:47:3f:20:70:8a:7a:2f:2d:a1:43:98:60:e4:
77:9a:ad:65:63:67:01:e8:1e:98:7a:89:2e:16:fb:b4:d7:44:
a8:e7:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:59 2026 by rpki-client