
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa
File: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (raw, json)
Hash identifier: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=
Subject key identifier: 1C:C5:D6:32:EF:53:95:12:2C:E6:A2:C5:0C:B0:85:F7:29:3A:63:47
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 06183ADF76418E917C236BB7011AED4173ED80A7
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa
Signing time: Tue 08 Sep 2026 07:44:13 +0000
ROA not before: Tue 08 Sep 2026 07:39:13 +0000
ROA not after: Tue 07 Sep 2027 07:44:13 +0000
asID: 18419
IP address blocks: 202.148.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 17:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:18:3a:df:76:41:8e:91:7c:23:6b:b7:01:1a:ed:41:73:ed:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:13 2026 GMT
Not After : Sep 7 07:44:13 2027 GMT
Subject: CN=1CC5D632EF5395122CE6A2C50CB085F7293A6347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:cf:ab:79:98:7f:1a:02:e2:cf:e5:87:e9:
3c:99:f7:63:f5:be:4a:92:ca:47:69:4e:88:d2:a7:
55:00:1d:a7:45:fa:2a:25:5f:69:a6:d6:29:46:7e:
d1:8b:4f:f6:8d:e6:e2:dd:22:cd:c5:e9:c7:23:e7:
65:58:b2:55:7a:76:3e:20:72:ba:b0:1c:d4:21:22:
6b:0b:0f:07:1e:94:21:7c:82:f4:53:67:4c:94:d1:
8a:cf:62:f5:a8:26:7c:9b:3e:fb:d9:69:fc:ad:1a:
d0:ef:cf:a3:fe:c4:7a:99:4e:48:0f:0d:c7:40:a9:
b7:50:5a:89:5e:85:f9:1f:0d:ba:aa:ea:4b:1e:9a:
ad:dc:5c:95:82:8e:2e:cc:b8:bb:f9:55:7f:bb:89:
94:50:10:45:44:25:7d:c9:c1:5e:21:f9:47:c8:a0:
de:12:4c:e3:a9:7b:54:00:96:cc:75:80:c2:4e:ff:
37:9a:65:80:cc:15:57:6c:40:ee:25:81:99:28:5e:
a9:13:6a:94:ed:44:fe:da:a7:cb:ed:54:5e:ee:c1:
83:5d:02:9a:e6:ae:dd:32:fa:fa:11:3d:56:be:52:
8e:a8:7c:cc:36:91:94:cc:c6:7a:20:5c:ec:2f:48:
ca:5a:4f:e9:6e:db:b1:c5:c0:11:6b:78:fd:cf:ba:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:D6:32:EF:53:95:12:2C:E6:A2:C5:0C:B0:85:F7:29:3A:63:47
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e7:95:a2:2d:7d:b4:32:8e:c1:0b:78:7c:c0:29:18:3f:4f:
11:60:fe:68:f9:b6:52:50:28:0d:89:b4:3c:1a:7e:9d:62:d3:
6f:33:cb:7a:1b:80:97:5b:bb:3a:e4:8d:df:02:82:45:cc:b2:
8a:fa:37:4b:f4:79:3b:86:d9:c6:2e:28:48:73:90:54:6f:50:
f4:75:17:11:6b:c9:96:2f:4c:0a:03:b4:f8:f0:d3:27:a9:81:
31:05:f9:67:1e:b9:82:32:69:3a:39:dc:d3:0d:38:cd:62:b6:
ac:b2:e4:c5:52:c6:4d:df:1d:83:58:52:c7:82:3e:ce:43:7e:
c6:f9:ed:f9:6d:ba:1f:c7:c9:c4:0d:2f:de:b9:21:2f:37:9f:
3f:4e:25:d5:9f:90:1f:2f:b4:4a:6f:21:1d:98:f7:38:8c:ed:
c0:1c:c5:d4:da:d5:27:58:0a:eb:75:50:39:98:e6:4c:ab:b2:
53:3d:a4:78:71:26:17:2a:f8:27:36:5e:1d:5d:98:7d:6b:b5:
de:4b:57:e7:8c:b0:26:c8:ca:e8:81:a5:9b:db:6f:fa:4b:61:
05:f5:e7:17:a4:df:30:e4:f8:a4:d3:db:93:6a:36:28:4f:c1:
95:80:89:e3:40:1f:13:1c:09:5c:48:e1:18:f3:e6:c2:7f:0e:
37:c2:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:04:04 2026 by rpki-client