
$ rpki-client -vvf rpkica.twnic.tw/rpki/NORDATW/0/3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa
File: 3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa (raw, json)
Hash identifier: zbX9ASNL5w9sJWWX7Nf2PDDJj816BJvv/iDAe1HP1Zg=
Subject key identifier: 7C:91:71:ED:8C:09:F6:1F:67:0F:9D:2F:27:22:7A:8A:5C:E8:28:DA
Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8
Certificate serial: 4DD84C081EE046FDD0421F0541C3708BB11B8B85
Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa
Signing time: Mon 11 May 2026 17:19:46 +0000
ROA not before: Mon 11 May 2026 17:14:46 +0000
ROA not after: Mon 10 May 2027 17:19:46 +0000
asID: 7483
IP address blocks: 103.138.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl
rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d8:4c:08:1e:e0:46:fd:d0:42:1f:05:41:c3:70:8b:b1:1b:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8
Validity
Not Before: May 11 17:14:46 2026 GMT
Not After : May 10 17:19:46 2027 GMT
Subject: CN=7C9171ED8C09F61F670F9D2F27227A8A5CE828DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7d:63:eb:b0:0c:61:b2:74:84:4d:e3:b3:3c:
95:ef:c7:d2:c2:bd:da:eb:e2:b7:d2:d2:22:55:a0:
64:f6:e3:8b:05:57:90:b9:21:4c:06:6b:6a:38:ef:
77:9c:cf:a4:05:09:dd:89:6a:64:5a:47:10:b0:1c:
fd:03:41:79:e8:31:98:17:1e:42:24:e6:63:41:9b:
8f:c6:1a:66:a5:85:d0:90:95:cc:82:f4:4e:31:8d:
15:af:83:5e:8d:c7:e5:0f:ee:2c:53:88:a5:51:23:
d7:bb:ca:43:67:5a:56:e3:62:70:39:5f:ab:8a:8a:
64:b6:88:1e:aa:2d:08:59:f5:1e:6d:1c:04:06:09:
77:29:ee:a4:b4:ba:05:b4:be:28:ae:9a:1e:c3:4f:
ec:3b:17:b3:ff:12:bb:59:3c:14:20:eb:23:c2:c9:
a1:2b:80:4b:9e:38:6f:78:40:6b:c7:34:53:6c:d9:
c9:f2:57:ea:8b:76:48:7d:4b:5c:09:11:f2:47:33:
50:0e:1b:cf:6c:b2:64:d2:54:59:97:1e:42:34:6f:
94:f7:5f:e3:23:52:f6:08:78:89:8e:42:f9:08:36:
3e:ce:9b:90:eb:7e:5f:e5:58:27:a6:d1:cb:87:12:
3a:d7:07:4c:7b:0d:23:f1:79:3b:55:8d:43:01:b0:
a1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:71:ED:8C:09:F6:1F:67:0F:9D:2F:27:22:7A:8A:5C:E8:28:DA
X509v3 Authority Key Identifier:
keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/3130332e3133382e3139342e302f32332d3234203d3e2037343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.194.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ca:71:d2:fc:54:78:12:cd:2a:e8:22:3b:2e:48:12:0f:9f:
7f:b0:49:90:51:67:dd:5d:2f:fa:10:c2:07:c9:14:57:28:b1:
66:c5:a7:86:c7:d2:f1:c9:69:e9:95:77:71:c9:2f:10:1c:6d:
11:2d:5f:98:f4:09:42:f3:fd:b3:84:a6:30:c9:02:85:14:bc:
a9:c9:b3:2d:98:72:01:4b:3f:2d:e6:2d:6f:30:94:39:aa:33:
15:61:d3:e4:95:fe:a7:bb:f1:84:dd:d9:6f:11:bd:73:95:d7:
7d:e2:25:fb:c2:9c:f0:55:da:aa:6f:2e:1f:76:8d:ff:ec:7e:
d6:a5:30:12:36:54:2b:8f:56:9c:6f:22:e4:b0:32:21:a4:d7:
88:8c:7e:6d:36:6f:d6:a5:12:12:c0:2c:73:ca:d0:83:8e:10:
c5:6b:d3:ec:a3:6e:df:4b:97:61:9a:70:96:f0:97:40:f4:6d:
65:56:de:5d:7e:44:11:3f:0c:cd:8a:87:87:9e:94:9c:29:6b:
41:73:e7:76:67:4b:83:85:97:0d:51:30:92:40:21:fa:5d:17:
48:aa:f9:b5:79:b1:75:ba:f4:a0:aa:bc:00:b4:87:22:bb:76:
03:60:6c:2c:3b:40:74:03:46:e1:09:27:c4:5d:02:3d:4e:0e:
9a:d1:18:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:49 2026 by rpki-client