
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa
File: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (raw, json)
Hash identifier: 0+BupcQQD+Xxb8XJV0M0KoMIOqsDkx/bNG7XLCZp0VU=
Subject key identifier: 0A:5C:BE:29:21:64:0F:6E:0D:4D:21:8D:05:BD:B5:94:94:14:D5:F2
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 47E141ECF026CB19EA82766E9B283919115DE6AF
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:45:43 +0000
ROA not before: Mon 11 May 2026 16:40:43 +0000
ROA not after: Mon 10 May 2027 16:45:43 +0000
asID: 4780
IP address blocks: 2402:2580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e1:41:ec:f0:26:cb:19:ea:82:76:6e:9b:28:39:19:11:5d:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:40:43 2026 GMT
Not After : May 10 16:45:43 2027 GMT
Subject: CN=0A5CBE2921640F6E0D4D218D05BDB5949414D5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:05:bb:d2:a6:0a:4d:43:8f:e2:76:87:90:
b8:e7:40:53:70:28:bb:74:77:38:a8:34:3c:ca:c5:
1b:46:47:75:1d:73:4f:a5:21:0f:5d:bd:a3:4d:a1:
26:b2:1e:a5:44:fc:b4:f3:14:20:13:e7:68:7e:8f:
8c:d2:ce:cc:9b:b6:39:40:44:90:60:40:f3:0c:ee:
5e:48:6c:0f:a7:ab:df:37:13:86:85:bd:6b:b0:78:
86:f6:28:8e:e0:64:cb:27:1f:b7:8c:c9:1a:39:11:
77:40:6a:db:26:95:c7:2b:0c:0c:1d:d5:1c:5e:26:
d5:69:c9:a3:d0:a4:db:85:f7:64:fa:77:79:1d:a1:
c4:56:5c:5f:5f:d3:6e:55:91:ce:11:ee:e9:e2:d0:
ea:bc:53:50:22:2d:2c:32:50:e5:72:09:7c:5a:b0:
88:dc:e1:7a:db:96:bc:0c:8b:9a:c0:cf:36:0b:55:
ef:0b:07:cf:62:6f:03:9f:91:f9:99:7e:54:90:f7:
cd:e9:ae:7d:cd:f1:7b:20:f8:02:ad:1f:2e:ae:16:
ad:f6:91:c7:6b:1b:16:fb:59:09:ba:7e:5b:26:e6:
cc:92:62:02:da:e0:19:d5:d0:31:d5:ba:7b:5f:76:
33:86:18:df:ae:20:65:ea:e7:3d:ec:58:35:a6:b6:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5C:BE:29:21:64:0F:6E:0D:4D:21:8D:05:BD:B5:94:94:14:D5:F2
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:2580::/32
Signature Algorithm: sha256WithRSAEncryption
0f:79:ef:1d:bc:12:e2:55:7e:8b:1f:47:c4:17:86:07:77:b2:
34:6a:cc:b6:50:14:15:4b:e1:6c:41:1a:96:f9:62:37:a1:d9:
13:c0:c1:7b:cb:ec:0e:6a:57:d1:99:83:f2:64:a7:4c:89:f5:
45:a2:bb:67:03:e5:3d:6f:df:9d:75:04:e6:22:01:a3:91:c1:
ab:94:51:12:d0:7b:30:fb:f0:ce:f3:42:c0:ed:16:fa:96:42:
ad:5a:9a:5a:b9:54:d4:08:85:b6:ee:89:58:9f:70:be:1e:fd:
c7:62:11:6b:8d:71:99:c9:81:82:ff:30:de:24:4f:97:f2:d6:
57:d8:0d:0b:2a:0a:55:27:f8:6d:79:d0:2f:ba:a3:1f:a5:7d:
3b:5b:09:28:f4:af:cd:b1:ed:9b:59:a3:2f:69:89:60:c1:97:
c9:07:fc:83:85:75:52:1d:b2:50:a2:30:76:7a:7a:8b:d8:dc:
29:62:ae:1e:9d:78:48:02:84:07:f0:47:ed:5d:31:72:00:32:
b9:76:1b:af:bb:77:00:a8:50:e2:70:c7:76:11:a4:e7:b2:ad:
52:4b:ca:8a:cf:99:22:b9:03:4d:7f:d0:34:59:8c:bc:24:75:
dd:67:ed:26:89:81:43:0e:7b:d3:67:9a:df:f0:56:9c:f0:32:
94:45:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:00 2026 by rpki-client