
$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa
File: 3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa (raw, json)
Hash identifier: ceVA/LJaRY6/q+EaJ/ByMtC2DxZ+XlY891yuFfz5/6Y=
Subject key identifier: BF:1C:8C:3D:D6:0B:75:1F:23:BB:AA:55:CF:B2:64:27:C5:D9:41:CC
Certificate issuer: /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Certificate serial: 16FA41623B9290D938602459F7916D42668E01B3
Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa
Signing time: Mon 11 May 2026 17:57:32 +0000
ROA not before: Mon 11 May 2026 17:52:32 +0000
ROA not after: Mon 10 May 2027 17:57:32 +0000
asID: 131626
IP address blocks: 103.144.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fa:41:62:3b:92:90:d9:38:60:24:59:f7:91:6d:42:66:8e:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Validity
Not Before: May 11 17:52:32 2026 GMT
Not After : May 10 17:57:32 2027 GMT
Subject: CN=BF1C8C3DD60B751F23BBAA55CFB26427C5D941CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:ec:21:93:c1:0b:77:09:da:0c:be:a2:9d:
ba:2c:15:a9:b6:0b:10:62:6b:5f:dc:fc:b9:4b:08:
ee:2c:4f:3b:e2:d2:f2:5f:1a:bb:9d:3a:24:d3:ae:
80:fd:2c:19:6d:5b:09:04:b7:e6:18:ba:38:57:4f:
f8:0d:8d:4e:eb:bb:ea:96:b1:e4:3e:2b:01:5f:f6:
fc:4c:a8:10:42:b3:cd:c6:14:90:81:f8:6c:4e:ec:
f9:a1:3e:c6:f9:75:2f:0d:f8:f4:5f:07:16:f2:e9:
f1:bb:fb:26:38:5e:00:37:fb:ab:db:18:b2:0b:e0:
af:d9:23:a8:92:c1:ce:74:fb:6a:70:9f:23:68:8b:
38:71:1a:85:6f:09:08:ba:81:0f:86:2f:0b:a8:8f:
48:db:b9:52:47:ee:e4:a7:d8:4a:3f:06:9c:f6:1d:
54:d2:8a:0f:71:c1:a4:db:fa:20:39:47:9c:93:55:
a2:34:73:72:73:bf:44:f1:b4:96:c7:14:bd:11:95:
88:6e:e8:58:f6:f0:80:75:38:d8:aa:8d:59:ae:49:
7d:64:4e:0f:8d:be:ad:40:be:ed:d0:f7:0e:47:d4:
3f:10:ee:db:d5:37:6f:6a:ca:51:db:55:c0:76:38:
85:f8:14:a3:a5:11:45:bb:9b:4a:5a:c5:3c:21:74:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:8C:3D:D6:0B:75:1F:23:BB:AA:55:CF:B2:64:27:C5:D9:41:CC
X509v3 Authority Key Identifier:
keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/3130332e3134342e33322e302f32332d3234203d3e20313331363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.32.0/23
Signature Algorithm: sha256WithRSAEncryption
72:80:88:ec:aa:14:ba:9a:57:27:e3:87:d5:a6:bf:0a:f0:30:
18:06:cf:95:b1:5c:42:cf:e1:f4:eb:b7:a1:e4:c8:db:ed:49:
c3:86:2f:4f:b0:73:c9:32:cf:94:c1:e2:59:ca:22:1c:de:e1:
70:c7:12:15:51:f9:1e:c8:04:b2:de:88:20:f5:43:cc:ca:11:
da:1f:43:de:36:06:b5:2a:8e:30:30:75:5a:5c:8e:27:9e:15:
93:9d:ca:4d:09:a5:c7:84:d1:b5:bb:ce:9f:2c:d6:ed:03:75:
14:0b:03:b4:d0:ad:7c:c0:8c:3e:22:d8:fe:45:2d:e7:03:f3:
6a:48:22:70:19:49:fd:92:20:fd:ee:02:76:01:f7:b6:4e:28:
53:ca:82:89:58:f2:a9:0e:44:3d:73:b8:67:9f:80:b9:fa:9d:
cb:ae:4f:28:92:02:4a:01:8e:eb:f9:f5:3c:61:b7:39:33:8e:
c0:1d:43:26:96:5a:87:1d:ae:47:72:77:16:fc:8e:d5:3b:67:
8f:79:d1:d7:19:e0:7c:87:4e:d7:4c:3d:26:d2:bf:59:1e:7b:
7f:61:96:7f:30:9a:98:f1:b1:92:05:05:98:2c:47:7e:22:9b:
1c:22:6e:37:be:c4:0e:e3:8d:d1:b5:e6:bc:c7:65:f7:53:fd:
62:50:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:30 2026 by rpki-client