
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa
File: 3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa (raw, json)
Hash identifier: Zz9CvLm2AJx5rpKaFfW4V3557O2rIHrGg/E64B0gDkE=
Subject key identifier: A2:0C:8C:F8:2A:D4:22:5F:55:0F:0D:5F:48:2B:07:9E:0D:2C:95:86
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 563B709ADF43BC8EC2D61064F909CAA97490A81C
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa
Signing time: Tue 12 May 2026 09:51:19 +0000
ROA not before: Tue 12 May 2026 09:46:19 +0000
ROA not after: Tue 11 May 2027 09:51:19 +0000
asID: 134823
IP address blocks: 187.79.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3b:70:9a:df:43:bc:8e:c2:d6:10:64:f9:09:ca:a9:74:90:a8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: May 12 09:46:19 2026 GMT
Not After : May 11 09:51:19 2027 GMT
Subject: CN=A20C8CF82AD4225F550F0D5F482B079E0D2C9586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:ab:3e:98:c9:22:4d:49:aa:b3:59:29:46:
41:aa:90:fc:31:07:77:d4:bc:26:84:f3:ef:8b:29:
90:35:8d:22:36:14:d0:64:3a:73:9b:2b:4f:5e:bf:
47:06:b6:93:dc:19:ac:28:f0:94:60:11:8f:3b:03:
0d:b1:57:e4:ca:3d:ae:c0:e5:c4:c5:65:a8:f4:b7:
4a:9f:90:34:7b:cb:82:b4:f9:79:8c:b9:c0:cd:dc:
ca:55:84:77:c8:f4:d9:c1:a3:ad:2c:63:c1:d5:92:
22:ad:e1:73:30:bc:cc:59:e4:5a:9b:22:c6:53:db:
99:f8:f5:ba:93:4d:1c:8d:48:6d:f5:60:7a:cf:c0:
68:ce:5c:91:72:2b:86:4b:29:96:43:cc:70:c1:f0:
93:4e:60:c0:c5:38:32:bf:f9:5b:b1:e4:41:29:82:
25:13:9e:1a:a7:8b:95:3c:be:65:82:7a:80:a8:bf:
66:a3:07:29:c3:69:16:11:9d:b5:01:b1:42:d6:fe:
77:bc:19:a4:3b:19:24:ab:f8:c6:30:7f:1b:52:67:
fd:dc:32:aa:1a:4b:90:8d:90:eb:10:e7:50:88:bb:
2f:5c:56:eb:2b:8a:2a:af:69:84:66:cf:15:7e:38:
80:0c:20:00:86:18:4b:30:3c:94:53:6c:c3:c7:e5:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0C:8C:F8:2A:D4:22:5F:55:0F:0D:5F:48:2B:07:9E:0D:2C:95:86
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.248.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:98:4d:9e:ee:ed:14:78:e6:79:14:09:4e:ad:d2:14:db:ff:
5b:a4:1d:57:e0:d5:ad:3f:78:cc:20:65:4a:1d:07:e2:55:b1:
32:5b:36:6f:db:6a:3e:01:76:7a:e1:c1:19:ee:bc:d9:e5:50:
2c:a0:38:44:16:52:c1:d1:b9:82:cd:51:b3:3d:32:6b:e6:2d:
4b:6a:3c:ce:42:ea:ed:0a:bf:25:18:e3:02:1b:62:6f:f6:b8:
4d:44:78:da:f6:a9:19:22:19:d0:17:61:f5:71:03:01:bf:a0:
2a:d9:45:aa:99:20:2e:f2:87:46:09:4f:f9:36:49:eb:6c:25:
51:7e:a4:3e:1b:10:40:97:cd:db:c4:3e:eb:5e:6b:c8:d0:34:
b2:f9:3a:aa:0a:2c:6a:c6:27:bd:23:b2:66:53:79:ca:82:cc:
92:3e:40:4d:92:f4:21:20:a6:e0:87:d8:cf:be:65:d8:0e:71:
46:1a:24:fa:af:8a:82:b2:1d:a4:34:13:c4:c0:ba:b8:d4:09:
4d:e9:5f:02:19:39:93:57:d1:1e:55:d9:ad:9f:9e:f1:3d:c4:
9c:8a:de:00:bd:8a:49:65:e0:27:d0:88:21:99:4f:04:b3:f5:
97:81:36:f7:e2:b1:53:d7:ff:88:6e:81:e1:2f:ac:c6:b2:6f:
7b:5d:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:49 2026 by rpki-client