
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa
File: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=
Subject key identifier: 56:CA:B5:E8:E3:60:47:81:2B:FD:15:A8:C4:40:90:83:5C:81:E9:6C
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 56762C59DD1CA98254BD0BF793BD2A87F69DF9A5
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa
Signing time: Mon 11 May 2026 17:55:40 +0000
ROA not before: Mon 11 May 2026 17:50:40 +0000
ROA not after: Mon 10 May 2027 17:55:40 +0000
asID: 21859
IP address blocks: 103.198.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:76:2c:59:dd:1c:a9:82:54:bd:0b:f7:93:bd:2a:87:f6:9d:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: May 11 17:50:40 2026 GMT
Not After : May 10 17:55:40 2027 GMT
Subject: CN=56CAB5E8E36047812BFD15A8C44090835C81E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:0f:a3:54:87:63:7b:9c:0b:59:5a:46:ff:
0f:e5:c8:1b:ef:f2:dd:ae:4e:4a:5e:b0:98:9d:16:
08:ea:e9:81:f3:f0:98:dd:ab:82:95:cc:3c:72:ef:
4f:24:76:2f:ef:5b:65:08:23:0e:db:ec:5e:e9:34:
6f:dc:2f:ab:1d:ce:3f:bc:58:25:ba:e2:e0:88:15:
d0:5b:60:ca:e0:2b:f2:58:56:19:14:ad:ff:eb:1a:
f0:db:f2:1f:e5:01:39:8b:07:25:75:11:2d:26:b6:
14:3f:05:cd:b2:39:ac:8b:2c:81:70:5a:cd:fb:73:
fe:27:2c:58:05:e1:36:c9:aa:15:96:7c:77:10:4e:
ac:b4:45:17:fb:f3:0c:40:d7:3f:ef:84:bd:fc:39:
d0:94:d4:f5:fe:3a:a3:de:30:c2:91:33:90:69:59:
48:06:2f:33:05:37:94:58:b5:a7:dc:3d:59:c5:6d:
19:6c:df:d0:b7:2e:17:60:a0:d2:33:99:d9:69:ad:
47:63:d1:ec:ae:13:f2:10:5b:70:2e:87:fd:b9:7f:
72:75:de:0d:9e:17:5f:d6:ba:e5:cc:c8:53:13:8c:
78:6b:1c:13:59:e6:5b:40:78:8d:9d:18:4f:e0:15:
05:73:00:89:90:77:b3:26:63:f5:74:6f:0e:4a:c4:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:B5:E8:E3:60:47:81:2B:FD:15:A8:C4:40:90:83:5C:81:E9:6C
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.152.0/23
Signature Algorithm: sha256WithRSAEncryption
38:7a:2c:e6:81:30:e6:b6:f6:62:de:27:bc:89:76:e6:f9:39:
b8:f0:f2:b4:71:b8:8e:e0:7d:ec:a9:6a:82:a1:de:42:6f:bb:
d7:88:50:c3:6c:c9:de:37:be:4c:a2:92:cf:b1:89:5f:bb:34:
ee:38:f5:3c:15:fc:f2:b4:23:f1:f3:68:3c:1c:0e:7d:bd:70:
18:42:84:bc:a4:3e:df:48:a3:0f:c8:92:18:e2:a4:1b:21:c5:
7c:a2:69:77:75:86:8a:bf:fe:f5:94:bb:85:2a:ef:2e:0a:e3:
b4:22:ba:79:45:4f:57:1f:e0:d6:a0:5c:a1:62:1f:8b:a6:af:
25:f1:76:15:c1:64:7e:31:49:2c:94:56:1d:3c:38:83:6f:42:
7c:c4:6e:7e:90:4d:c4:8d:ad:41:9e:4a:f1:9d:4e:a7:a4:eb:
8a:14:76:e6:67:25:80:35:ee:4e:95:09:80:a2:cb:a5:31:94:
09:f7:c1:67:94:26:d1:5e:da:3c:63:d4:54:7d:3f:dc:91:81:
bd:b8:cb:5f:98:ca:80:4b:6d:3e:fd:37:eb:6c:59:a9:81:8f:
19:4c:4a:08:45:7d:34:19:71:a9:6b:94:ee:ee:bd:52:9a:b9:
58:c8:91:da:38:0f:50:b0:67:67:3a:8e:e2:85:ee:d7:d1:4a:
f3:ce:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:52 2026 by rpki-client