
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa
File: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=
Subject key identifier: 60:3C:66:DE:19:CE:9C:4F:C8:8D:0C:8E:B6:56:E1:85:CE:03:39:61
Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial: 7116BDA644CC837EA01DBD7C59F889B99F752345
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa
Signing time: Mon 11 May 2026 17:56:26 +0000
ROA not before: Mon 11 May 2026 17:51:26 +0000
ROA not after: Mon 10 May 2027 17:56:26 +0000
asID: 21859
IP address blocks: 138.252.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:16:bd:a6:44:cc:83:7e:a0:1d:bd:7c:59:f8:89:b9:9f:75:23:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Validity
Not Before: May 11 17:51:26 2026 GMT
Not After : May 10 17:56:26 2027 GMT
Subject: CN=603C66DE19CE9C4FC88D0C8EB656E185CE033961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:0e:fc:94:ce:76:75:80:18:a5:42:cc:ce:
2b:18:90:f2:f8:bb:bd:65:38:3c:1f:03:5f:90:31:
93:e3:16:8f:f6:02:e7:2f:28:f6:c4:1e:01:2e:13:
8f:ca:72:ab:37:c0:75:94:41:43:38:0f:03:23:7c:
13:84:00:1d:e3:a0:ab:7d:11:a3:20:2b:82:20:de:
4e:1b:87:bb:08:fa:2d:89:9d:3c:17:cf:9e:75:da:
01:0e:08:4c:b9:2f:c9:80:da:07:92:a2:46:ea:1a:
c6:f5:a8:cb:5f:2e:ba:4d:47:76:89:1b:ca:88:92:
b2:72:ca:66:d6:9b:e7:b2:96:f3:50:01:3b:50:b4:
8b:ca:cd:d7:af:8b:b6:cd:f7:6e:50:57:9d:79:a2:
a7:7e:c3:fb:93:ae:09:b7:c2:c6:89:6b:73:4c:2d:
2e:6b:f6:41:e8:a2:26:5c:7c:9c:cc:86:30:45:d2:
bb:80:79:83:72:c1:55:77:7d:5a:5d:61:37:c3:62:
f6:1d:7b:9a:75:e4:c2:f5:c5:33:a6:56:2e:a0:3b:
68:33:73:fc:3d:70:2e:b6:ff:35:1b:50:59:0a:a7:
4a:2f:5a:0f:7c:a8:90:55:2b:fa:b1:d9:31:5c:3a:
30:0d:8b:f3:af:04:f7:a5:cb:fe:e1:cd:d7:81:6c:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:66:DE:19:CE:9C:4F:C8:8D:0C:8E:B6:56:E1:85:CE:03:39:61
X509v3 Authority Key Identifier:
keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.116.0/23
Signature Algorithm: sha256WithRSAEncryption
90:82:78:00:60:4c:64:e2:79:1a:77:6b:cc:6a:e5:11:96:1a:
7e:1f:6a:a4:3e:a4:5b:66:1d:eb:bc:01:d2:5f:77:67:39:d9:
0b:8e:ca:1e:08:75:3c:06:79:c8:d0:ea:1e:3b:27:2a:bd:c6:
ae:e6:2e:3a:83:2d:78:8b:59:d9:05:84:f4:12:84:13:93:9c:
bc:c3:9c:36:1c:af:0d:b3:13:f0:cd:71:2e:c6:a0:1f:4a:8a:
43:e2:38:71:31:97:fb:37:5e:25:c2:30:8a:4d:02:ea:3f:4c:
f6:de:10:2b:d2:c5:33:6e:92:97:f6:cd:2d:82:90:8b:35:8d:
55:6a:96:f1:fb:d6:f5:d9:d3:d0:5b:e3:c8:f6:95:25:14:33:
98:d9:d5:fd:f1:ea:f5:4f:05:6e:a0:dd:cd:6e:27:4b:76:b9:
54:f1:0e:de:7d:67:6e:9d:07:fa:47:04:cc:c2:c5:29:d7:0a:
d5:42:09:95:cc:f3:13:66:b5:09:38:17:6a:04:4d:86:f5:2b:
53:21:7a:fc:45:fb:47:e9:22:58:ba:97:8c:db:39:9e:42:16:
74:d2:40:e3:e2:72:74:f3:e9:c9:8f:3a:4f:68:ad:b1:60:79:
8e:f5:f5:e4:f3:a1:64:1c:87:72:e3:bc:1a:91:92:6e:ed:e0:
d2:5c:fc:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:11:09 2026 by rpki-client