
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa
File: 3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: peI0xrWdSPuR9DhduODvlN5d8660caUXM4/pXLjzdlM=
Subject key identifier: 69:E4:C8:10:5E:23:9F:18:FC:1D:61:DF:30:77:D9:9A:E1:FC:E5:11
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 6F0B5EB216F9A444E3AA9990DF01A155C8257CF6
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 09 Nov 2026 06:44:00 +0000
ROA not before: Mon 09 Nov 2026 06:39:00 +0000
ROA not after: Mon 08 Nov 2027 06:44:00 +0000
asID: 134823
IP address blocks: 210.67.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 10:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:0b:5e:b2:16:f9:a4:44:e3:aa:99:90:df:01:a1:55:c8:25:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: Nov 9 06:39:00 2026 GMT
Not After : Nov 8 06:44:00 2027 GMT
Subject: CN=69E4C8105E239F18FC1D61DF3077D99AE1FCE511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:22:a9:77:59:59:18:7b:7e:73:0d:d6:42:
dd:65:81:83:14:7b:d9:3f:b7:89:8c:53:c4:c8:ed:
8f:c9:38:5c:3f:ab:d6:46:d4:de:1d:9a:48:2e:3d:
4e:ec:9e:4b:24:20:a1:39:e6:37:bb:75:b1:a3:93:
8c:c0:4b:1a:8e:ac:61:be:0f:ce:91:b4:12:83:0e:
d0:69:0a:34:29:df:25:91:18:d7:7b:ed:59:c7:46:
fb:dd:94:41:63:77:fe:67:af:ec:b6:16:05:04:c0:
37:77:10:41:6f:cd:70:15:12:0f:f8:43:77:d7:b6:
fa:35:4f:66:11:30:6c:bb:2f:21:7a:9c:b8:5d:41:
ee:e3:bd:78:e3:6f:0b:bf:b0:9d:69:8c:09:77:fb:
82:e9:24:ea:15:88:0c:c3:72:0f:16:73:6d:0c:09:
74:98:f2:ef:43:6d:0f:70:66:18:3c:ce:68:7e:10:
b8:13:be:e2:3a:21:17:da:57:d9:84:bf:f5:50:c5:
21:4e:4e:e4:71:55:f5:4f:f5:6d:4f:3f:8d:91:80:
21:2b:a1:6f:11:b0:94:0c:ea:a5:b1:19:ad:e6:5b:
a5:ed:c0:d3:16:7e:e6:e4:c3:de:de:5d:26:8b:03:
bf:c3:d6:98:1b:fe:16:7b:49:7a:5e:4d:5d:4d:ba:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E4:C8:10:5E:23:9F:18:FC:1D:61:DF:30:77:D9:9A:E1:FC:E5:11
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.142.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:f4:af:a4:46:95:c2:cb:7e:d8:69:53:e7:5d:83:36:af:16:
7d:ce:e3:b7:c4:61:8e:04:df:c3:03:77:51:11:f1:84:b1:49:
53:b6:8a:fd:4e:89:e7:53:2e:36:4f:ad:c3:7d:b0:f8:e8:90:
ba:84:a3:d5:c6:0a:de:a9:2a:2c:45:16:d5:40:86:4b:51:e1:
c7:f7:87:bd:e2:a5:51:e4:5f:3a:68:d5:78:fc:d3:df:3d:7a:
cb:a0:0d:ae:6a:d9:ac:3e:39:9a:32:6c:9e:64:11:e6:c1:f8:
6a:a1:ae:9f:bd:f3:02:ca:9e:a6:d2:0c:a8:ac:71:7f:69:6c:
18:ee:3f:c0:c6:8b:6d:51:03:2b:62:fb:87:36:41:07:b7:8b:
38:01:cd:1e:ca:46:bb:ee:f0:54:8c:1b:9f:29:be:c5:ac:e4:
0b:07:d2:8e:51:25:0b:fb:33:b9:78:20:d8:b5:e7:9d:97:39:
2e:50:b4:45:dc:1a:91:40:73:e8:12:46:26:b0:36:4d:72:5d:
61:56:3b:cb:07:50:76:c9:45:10:9d:46:a5:8f:5a:fc:68:2f:
42:8d:4c:71:3b:19:47:32:15:78:cd:11:3d:46:72:52:5a:08:
c3:4f:b2:f6:e9:6e:4f:f7:11:08:8b:2d:60:86:92:7a:bd:1d:
7c:79:1f:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:40:54 2026 by rpki-client