
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHANGFU/0/3130332e3132362e38382e302f32342d3234203d3e203438303234.roa
File: 3130332e3132362e38382e302f32342d3234203d3e203438303234.roa (raw, json)
Hash identifier: Sd6Q7YbX3hdrc0mji0ubguZvwyQj1Zh6EbmfJzdspl4=
Subject key identifier: 3B:E0:63:A1:11:12:42:68:93:3D:A5:A5:BF:FC:17:45:79:6F:D1:66
Certificate issuer: /CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Certificate serial: 16312074AFD197138BC04CBD9EFF58A2040A087F
Authority key identifier: D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/3130332e3132362e38382e302f32342d3234203d3e203438303234.roa
Signing time: Mon 11 May 2026 17:15:25 +0000
ROA not before: Mon 11 May 2026 17:10:25 +0000
ROA not after: Mon 10 May 2027 17:15:25 +0000
asID: 48024
IP address blocks: 103.126.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:31:20:74:af:d1:97:13:8b:c0:4c:bd:9e:ff:58:a2:04:0a:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90
Validity
Not Before: May 11 17:10:25 2026 GMT
Not After : May 10 17:15:25 2027 GMT
Subject: CN=3BE063A111124268933DA5A5BFFC1745796FD166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:db:36:4c:2e:78:56:6a:44:18:80:3d:8b:
07:ed:d6:25:33:7a:71:3c:9e:5a:e4:66:9f:bc:25:
d4:e0:30:32:3e:b5:5a:ad:59:ce:04:53:7b:b7:37:
09:19:ab:73:30:4f:33:d3:12:7b:99:c7:b3:64:15:
dd:92:07:ff:8c:a6:5c:8f:ab:73:41:1f:8f:0f:e5:
86:2b:7b:3f:a7:12:b8:e4:7b:8b:31:4c:74:0f:a5:
16:19:37:f0:e2:a1:69:b4:64:d3:91:da:70:9b:f5:
33:90:a2:7b:a3:bf:14:95:41:6d:f1:5f:69:b3:c9:
ba:d7:37:02:c6:c4:06:36:c7:98:f1:cf:cf:fd:c6:
77:5b:0c:81:17:20:ae:89:de:b2:bc:1f:25:99:59:
14:07:43:f2:42:6d:0c:49:a2:56:61:ff:8b:c5:ae:
cd:ad:7b:06:a8:58:2a:7a:67:32:09:98:40:02:10:
58:ec:6c:b0:cf:ce:9e:2f:9f:62:82:1e:6c:ae:13:
a4:d5:8a:5b:20:a5:44:86:90:8d:9d:a3:25:d9:53:
31:e6:55:3a:e4:a2:b6:97:7b:74:3e:c9:57:08:b2:
34:8a:e4:fa:5b:a6:28:5f:d2:18:3a:59:cb:26:1b:
3d:8c:57:3f:ba:c1:f2:31:1c:b9:fd:76:2d:33:2a:
0f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E0:63:A1:11:12:42:68:93:3D:A5:A5:BF:FC:17:45:79:6F:D1:66
X509v3 Authority Key Identifier:
keyid:D1:AE:33:38:03:5B:FC:A7:C4:E8:6F:BC:28:1A:1F:DF:0B:E6:9B:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1AE3338035BFCA7C4E86FBC281A1FDF0BE69B90.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHANGFU/0/3130332e3132362e38382e302f32342d3234203d3e203438303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.126.88.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e9:cf:7d:1d:d9:d6:29:9c:46:c8:54:b7:a1:23:11:e3:0c:
ba:64:30:7d:97:23:66:f3:13:83:3d:24:40:20:41:e8:70:5d:
6a:ad:74:a6:e7:12:74:c4:46:22:9c:3b:a2:19:6d:ce:0e:3c:
06:11:3a:85:92:e2:1c:03:b4:2c:2b:cc:02:61:22:5b:9f:ab:
d8:42:ab:9f:5c:73:00:ec:4a:9e:cc:99:cf:b1:dc:9c:b4:09:
bb:57:51:eb:ab:b1:a5:96:c8:37:b9:d6:29:5e:a1:ab:84:d4:
96:e9:fd:1c:da:71:fc:c4:fe:30:39:48:39:e7:52:de:ad:75:
aa:93:34:77:b7:8b:2f:fa:71:ef:66:3e:47:13:c8:df:be:14:
ac:c5:5e:b2:3f:05:2d:fb:95:65:90:22:65:81:65:a0:35:3d:
f8:46:9c:7b:91:16:6d:ba:ec:d4:56:4f:ff:84:6b:7e:a6:25:
77:6a:ee:5c:7b:d5:48:06:87:36:8e:e2:6a:49:e4:6c:28:8f:
ef:0b:67:75:fa:e5:bb:96:18:e9:e2:2f:56:89:fb:16:1d:cb:
18:ed:01:39:ef:d0:1f:d4:1b:03:71:5f:0c:b8:ab:da:e7:c2:
12:cc:e6:a8:c5:d0:4b:d9:50:99:58:e9:8f:74:c0:f9:8c:60:
42:2b:fd:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:12:12 2026 by rpki-client