
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa
File: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (raw, json)
Hash identifier: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=
Subject key identifier: D2:9F:F8:3D:54:41:D5:40:60:69:62:4B:00:8F:98:84:82:F0:16:26
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 1C73CBE37A0DE053FEEAA917C3EF7EBEE1A7855A
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa
Signing time: Tue 08 Sep 2026 07:44:12 +0000
ROA not before: Tue 08 Sep 2026 07:39:12 +0000
ROA not after: Tue 07 Sep 2027 07:44:12 +0000
asID: 18419
IP address blocks: 2402:2580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 20:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:73:cb:e3:7a:0d:e0:53:fe:ea:a9:17:c3:ef:7e:be:e1:a7:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:12 2026 GMT
Not After : Sep 7 07:44:12 2027 GMT
Subject: CN=D29FF83D5441D5406069624B008F988482F01626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:d1:ca:1e:24:b4:c0:e0:2d:b3:c2:50:33:
59:e8:e9:84:f0:ab:43:41:e5:1b:64:29:ab:04:25:
fa:52:0d:8c:88:c7:92:e7:63:25:5b:30:4a:bd:3f:
9e:4f:77:56:00:8c:23:29:70:4a:fb:3e:c1:0a:e5:
34:10:ed:47:12:a9:43:59:6e:cd:82:bf:ee:ba:2b:
f8:59:e8:b7:a8:7b:61:90:c1:b4:6d:01:6f:bc:10:
82:6a:5d:36:b3:2f:b9:1d:40:57:55:09:69:64:2e:
34:5e:90:41:71:57:79:03:1f:f6:83:b2:f7:b8:e1:
f1:9c:c6:f7:a7:69:57:01:64:53:ae:85:11:f1:7a:
30:2f:99:ab:e2:05:bf:82:66:8e:3f:a2:92:a4:56:
5a:00:8d:6c:8f:0c:4c:04:9c:11:af:39:7a:3c:c4:
10:20:3e:7d:da:30:5e:cf:d0:40:5c:0f:17:4b:25:
f6:eb:cd:6a:83:a8:50:40:59:bd:aa:5b:7d:62:da:
83:0b:29:ed:8b:a4:a7:1a:b1:95:67:41:1c:5c:a3:
bf:41:81:ac:a7:50:c6:a2:35:87:04:12:15:28:36:
8b:21:86:23:b0:7f:07:2b:a0:1e:a0:71:98:6c:3f:
2b:a9:25:7d:bc:85:75:2c:ae:1f:69:47:cd:f9:26:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:F8:3D:54:41:D5:40:60:69:62:4B:00:8F:98:84:82:F0:16:26
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:2580::/32
Signature Algorithm: sha256WithRSAEncryption
44:9c:10:c8:9c:18:e6:53:a7:95:dd:14:e4:9f:38:84:26:f1:
a4:5e:77:23:72:e5:72:18:dd:44:1a:04:6b:e9:7f:dd:43:c5:
a1:1c:77:75:5a:2c:dc:61:c0:f9:57:e4:c3:6b:8e:e6:8b:d9:
fa:41:ac:22:81:30:75:bd:63:74:58:ad:21:cf:d1:25:fb:61:
93:52:ea:03:16:c6:ee:7d:d6:df:8d:39:a7:96:53:ef:15:1d:
9a:ea:59:a1:13:a4:89:2c:9d:f6:21:03:59:48:61:77:66:fe:
68:de:86:75:fe:10:17:a0:7d:a4:42:bc:62:af:41:d7:2c:9d:
5d:05:92:61:ac:bb:45:54:4a:53:86:8d:da:e9:f2:93:ee:b8:
5f:78:d4:f9:4e:a5:e6:fe:8b:96:03:13:7c:23:c0:c7:80:3a:
49:b0:4e:61:76:19:cc:bc:de:ea:cc:1e:12:8a:91:38:a6:6d:
85:bd:56:f6:18:5e:66:99:7d:0f:68:a3:1b:7c:19:7b:a9:49:
9e:59:ff:58:44:ed:91:fa:33:c2:30:6e:d2:ab:e5:94:4e:3d:
43:e0:3c:13:98:07:f5:f5:f3:db:57:f7:0b:31:3e:bb:57:df:
2e:a3:ef:83:00:30:eb:bf:04:e5:a3:d4:98:b5:79:a0:84:f2:
b2:34:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:31:58 2026 by rpki-client