
$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa
File: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (raw, json)
Hash identifier: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=
Subject key identifier: E1:B0:73:01:C8:74:2A:24:A6:1C:41:16:71:2B:FA:A3:87:C1:5F:A1
Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE
Certificate serial: 494575BA2D4B7D84A370ABBA9334406B1E8FF07A
Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa
Signing time: Mon 11 May 2026 17:26:32 +0000
ROA not before: Mon 11 May 2026 17:21:32 +0000
ROA not after: Mon 10 May 2027 17:26:32 +0000
asID: 18041
IP address blocks: 2406:bfc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl
rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:45:75:ba:2d:4b:7d:84:a3:70:ab:ba:93:34:40:6b:1e:8f:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE
Validity
Not Before: May 11 17:21:32 2026 GMT
Not After : May 10 17:26:32 2027 GMT
Subject: CN=E1B07301C8742A24A61C4116712BFAA387C15FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:c2:9f:ca:d0:b8:d1:87:4f:86:85:64:60:
a8:f7:45:85:03:dc:2a:76:9f:2d:17:9f:4a:d7:f7:
55:94:95:5a:02:69:fd:f3:16:54:18:70:fb:3d:b0:
f3:4d:ea:44:6a:b2:62:16:b0:df:54:b6:83:82:e7:
cc:be:cb:05:88:1e:53:a7:eb:c4:32:15:4a:ad:98:
db:94:fe:4e:9b:ab:6e:71:fe:f2:83:1a:23:6d:91:
83:02:a4:62:5d:9a:3e:38:0d:79:1a:28:c4:31:fa:
e3:c7:0c:58:de:ad:f3:f7:93:ac:27:2c:df:40:07:
b9:9b:7e:6a:6e:50:21:4f:3e:bc:8b:4f:4a:00:01:
08:8e:bd:8d:f8:de:9a:92:d6:85:fb:2b:2d:48:5e:
d3:ca:f4:77:12:a2:29:8b:6e:be:f8:f4:77:b9:da:
11:38:0c:b5:c9:a5:d7:50:1b:3f:31:02:32:02:f2:
a7:b5:41:ef:02:69:56:29:37:46:73:03:99:23:f6:
9a:ec:8d:37:a3:15:89:d0:06:91:22:3e:3b:2d:a6:
c4:c9:59:0b:92:78:8c:8e:7c:31:00:2f:ac:f7:39:
a9:58:05:17:41:e0:67:29:e7:6a:a5:73:64:43:56:
30:57:74:5b:72:42:0b:b2:56:8e:e4:b7:7e:76:b2:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:73:01:C8:74:2A:24:A6:1C:41:16:71:2B:FA:A3:87:C1:5F:A1
X509v3 Authority Key Identifier:
keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:bfc0::/32
Signature Algorithm: sha256WithRSAEncryption
50:9d:9d:e7:57:f4:42:3e:bf:3f:c8:3f:6f:b8:78:18:d6:d7:
c5:22:d5:a8:13:f8:00:ea:5d:9e:3b:73:f0:77:d0:84:32:b5:
85:2f:ac:73:c5:62:57:8f:ac:02:92:18:0d:f5:ba:1b:fc:7e:
c6:fd:dc:6f:6f:7c:3b:79:da:9f:95:4e:b2:c6:18:be:41:c7:
42:2d:77:44:c6:e0:f3:d8:33:1c:b0:ee:50:0b:7c:30:a4:91:
6c:bf:d4:2f:73:bb:5c:36:b0:a1:c0:4f:6d:43:3e:96:1f:1e:
dd:8e:9c:48:e4:ee:dd:f6:07:0b:47:0c:a9:fc:08:9a:80:41:
a0:52:de:f7:7e:a7:ca:82:19:a5:c7:00:40:b7:92:af:39:03:
a2:65:c3:91:de:c1:4d:82:29:c4:b6:43:f8:8f:fe:dd:8e:d1:
fd:f6:ee:29:b6:f8:66:9d:54:d8:c8:f8:02:10:dd:c7:86:3a:
e1:8e:2f:83:7c:84:fe:c8:0a:d0:30:de:cc:2f:7d:d0:97:c0:
93:f9:41:eb:44:1f:17:5d:6c:f2:23:e9:a4:db:91:05:00:1b:
e7:49:f3:45:8c:f9:24:ea:3e:b1:75:56:7d:9c:9c:66:d5:02:
a4:22:32:82:33:dc:68:2c:f0:43:6d:8f:63:df:df:7e:1a:68:
78:3e:86:85
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUSUV1ui1LfYSjcKu6kzRAax6P8HowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw
OTIxMUJBRTAeFw0yNjA1MTExNzIxMzJaFw0yNzA1MTAxNzI2MzJaMDMxMTAvBgNV
BAMTKEUxQjA3MzAxQzg3NDJBMjRBNjFDNDExNjcxMkJGQUEzODdDMTVGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVNsKfytC40YdPhoVkYKj3RYUD
3Cp2ny0Xn0rX91WUlVoCaf3zFlQYcPs9sPNN6kRqsmIWsN9UtoOC58y+ywWIHlOn
68QyFUqtmNuU/k6bq25x/vKDGiNtkYMCpGJdmj44DXkaKMQx+uPHDFjerfP3k6wn
LN9AB7mbfmpuUCFPPryLT0oAAQiOvY343pqS1oX7Ky1IXtPK9HcSoimLbr749He5
2hE4DLXJpddQGz8xAjIC8qe1Qe8CaVYpN0ZzA5kj9prsjTejFYnQBpEiPjstpsTJ
WQuSeIyOfDEAL6z3OalYBRdB4Gcp52qlc2RDVjBXdFtyQguyVo7kt352spULAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQU4bBzAch0KiSmHEEWcSv6o4fBX6EwHwYDVR0j
BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB
WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1
RDE4NzIwOTIxMUJBRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC8zMjM0MzAzNjNh
NjI2NjYzMzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM4MzAzNDMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJAa/wDANBgkqhkiG9w0BAQsFAAOCAQEAUJ2d51f0Qj6/P8g/b7h4GNbX
xSLVqBP4AOpdnjtz8HfQhDK1hS+sc8ViV4+sApIYDfW6G/x+xv3cb298O3nan5VO
ssYYvkHHQi13RMbg89gzHLDuUAt8MKSRbL/UL3O7XDawocBPbUM+lh8e3Y6cSOTu
3fYHC0cMqfwImoBBoFLe936nyoIZpccAQLeSrzkDomXDkd7BTYIpxLZD+I/+3Y7R
/fbuKbb4Zp1U2Mj4AhDdx4Y64Y4vg3yE/sgK0DDezC990JfAk/lB60QfF11s8iPp
pNuRBQAb50nzRYz5JOo+sXVWfZycZtUCpCIygjPcaCzwQ22PY9/ffhpoeD6GhQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:34 2026 by rpki-client