
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa
File: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (raw, json)
Hash identifier: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=
Subject key identifier: 8F:50:91:D6:E4:03:B7:3C:D6:AF:1F:1F:B4:AA:96:84:F5:1E:CD:05
Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial: 6D27E518EFC1813682E9A39925A636C30770BE8C
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa
Signing time: Mon 11 May 2026 17:56:25 +0000
ROA not before: Mon 11 May 2026 17:51:25 +0000
ROA not after: Mon 10 May 2027 17:56:25 +0000
asID: 24162
IP address blocks: 138.252.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:27:e5:18:ef:c1:81:36:82:e9:a3:99:25:a6:36:c3:07:70:be:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Validity
Not Before: May 11 17:51:25 2026 GMT
Not After : May 10 17:56:25 2027 GMT
Subject: CN=8F5091D6E403B73CD6AF1F1FB4AA9684F51ECD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:75:fd:e7:6a:77:ca:69:7d:5c:c1:53:61:
67:33:fd:f5:36:2b:ea:33:c3:09:03:52:00:54:ea:
1b:d1:94:8c:8e:08:b2:ca:da:ea:85:2a:28:f4:cb:
41:6a:d4:81:40:d1:b3:5f:f8:ce:10:92:c5:bb:0e:
a9:d7:6b:1d:fb:79:08:7f:d3:83:04:32:41:83:48:
88:25:76:a9:7a:78:cc:c0:59:4e:26:78:0e:28:5c:
e5:87:f7:04:d1:c3:d1:43:82:8c:6c:67:a6:82:53:
59:8d:51:59:61:3f:80:70:51:05:19:79:4d:bb:bd:
10:55:11:eb:9f:40:2b:2f:78:d2:42:eb:bc:24:e5:
86:76:c5:3f:dd:f5:79:48:a9:87:fc:0d:37:7e:cc:
27:13:d4:a2:45:94:52:70:7f:d0:91:5e:da:9e:b4:
cb:99:cc:74:de:0c:c3:7a:97:0f:48:15:a7:8b:72:
cb:99:35:bd:7e:68:94:14:13:e5:24:8e:d9:bf:c2:
1c:93:85:f4:5e:8b:6b:cc:2c:6f:6b:5f:33:90:8c:
ea:8a:f3:3e:40:9f:31:1e:fe:43:36:29:dc:8e:bc:
ea:fc:9c:bf:a9:a6:b2:7c:4b:b8:c9:48:e0:07:6c:
73:3b:f3:e2:5b:a9:00:9b:06:56:85:04:35:04:b9:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:91:D6:E4:03:B7:3C:D6:AF:1F:1F:B4:AA:96:84:F5:1E:CD:05
X509v3 Authority Key Identifier:
keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.116.0/23
Signature Algorithm: sha256WithRSAEncryption
34:78:af:b0:f8:b5:67:3c:0c:0c:ad:44:d7:57:5b:0c:f2:44:
98:1a:3a:3e:86:f4:42:af:e2:81:a5:a4:d7:48:3f:6a:a3:17:
05:9f:6f:a9:85:3d:34:56:fb:6c:36:3f:29:cf:ff:3f:c5:fb:
4a:50:7d:6a:95:2f:79:92:e8:2b:9a:d6:a2:c7:b7:6b:0c:65:
13:1d:e1:f5:a4:6e:ef:3d:9d:62:74:cc:dd:3f:35:40:98:c4:
7b:41:57:ff:22:b7:7a:ff:77:6d:2f:00:45:09:1a:be:f5:32:
8a:d5:a6:31:95:4a:1e:29:11:d7:2d:91:b4:ab:a4:b2:99:3c:
57:06:83:b8:7e:f5:7a:dc:25:86:f5:81:e2:c8:23:5d:b5:30:
ce:81:ee:30:f6:a6:49:94:2e:e9:bc:ce:5a:5d:01:68:6a:3d:
47:c7:e3:e9:1d:33:12:c9:c0:0c:d9:b6:dd:a7:ab:df:33:16:
a3:4d:81:fc:4b:16:42:37:0d:21:ff:d1:b1:6b:bf:7c:b3:bb:
c3:23:ab:b9:85:13:48:95:3a:e7:0f:43:e3:9f:92:5a:6e:7c:
e9:a1:53:bc:10:01:63:95:4e:ab:4c:48:3d:99:c4:13:0b:c3:
b8:a0:9d:7d:4a:33:a8:15:46:7c:ed:db:d6:d3:0a:04:72:5e:
3a:29:aa:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:30 2026 by rpki-client