
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa
File: 3130312e332e3138382e302f32322d3234203d3e20313331363037.roa (raw, json)
Hash identifier: 8hmZHoGRE9qrtw0fFrvqEJ3+cELlZQW6uupQRMNqI/Y=
Subject key identifier: EC:11:0B:23:C4:BA:66:CE:65:6A:6A:57:40:DF:76:19:F5:89:E2:7C
Certificate issuer: /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Certificate serial: 6F27F9F8157542BF6D7167E3822286E834B02E8F
Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa
Signing time: Mon 11 May 2026 17:31:18 +0000
ROA not before: Mon 11 May 2026 17:26:18 +0000
ROA not after: Mon 10 May 2027 17:31:18 +0000
asID: 131607
IP address blocks: 101.3.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:27:f9:f8:15:75:42:bf:6d:71:67:e3:82:22:86:e8:34:b0:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Validity
Not Before: May 11 17:26:18 2026 GMT
Not After : May 10 17:31:18 2027 GMT
Subject: CN=EC110B23C4BA66CE656A6A5740DF7619F589E27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a7:08:f4:ee:79:dc:1d:7b:37:4a:38:26:2e:
6e:3a:85:8f:d6:ad:71:12:fb:be:77:c3:f0:7d:19:
55:84:af:ed:a6:80:d6:1a:28:26:e8:6b:83:70:05:
b2:e9:59:66:d9:91:29:a5:2f:25:d0:b9:f9:b9:39:
3b:81:75:0e:41:c8:6b:13:62:01:f8:81:4c:63:86:
55:1f:80:c4:f2:4b:99:13:6b:db:ed:22:78:e3:8c:
34:d8:08:f3:31:6d:7d:53:c0:5a:1d:a3:c5:33:20:
1c:01:73:da:4c:d7:d3:7e:cc:6d:73:83:00:b7:59:
ae:36:21:30:07:77:db:9c:e8:4f:2b:ac:0b:f6:59:
eb:c4:2a:c4:b6:78:62:19:44:b3:a1:50:7b:2a:9e:
42:b3:ad:f8:3d:64:1f:08:c1:0c:4c:e6:b1:56:c2:
cc:2b:4a:00:06:06:ff:ea:c1:1d:4b:fe:e6:5f:20:
45:41:9c:68:3b:18:a0:ad:9d:16:32:ab:00:ac:b5:
5e:c2:4e:03:c1:49:b6:49:69:cf:5c:de:df:b5:84:
67:aa:89:1d:6b:50:fe:58:4f:be:9d:19:ed:7e:97:
dc:cd:f4:0f:24:23:3e:65:a1:1d:38:8b:9a:52:2c:
09:45:64:d9:04:5d:26:50:59:8a:5c:22:8a:b4:6d:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:0B:23:C4:BA:66:CE:65:6A:6A:57:40:DF:76:19:F5:89:E2:7C
X509v3 Authority Key Identifier:
keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.3.188.0/22
Signature Algorithm: sha256WithRSAEncryption
11:9a:e1:52:e4:c2:ea:19:91:8d:ff:e9:d2:b3:e9:15:de:df:
69:81:e6:05:c3:a9:c7:6b:fb:dd:3f:4f:65:b2:d1:bd:cd:b9:
af:8d:a5:18:e1:eb:f5:85:c2:11:ed:e8:1d:62:8e:ae:9b:ad:
81:7d:51:fb:ca:d4:4f:90:fc:d1:64:ee:56:71:08:b2:e3:ff:
23:cb:2b:48:bd:4d:c3:a1:ca:25:ee:42:5b:12:0f:34:57:4b:
13:7b:73:ee:6e:20:fa:6d:25:c4:e5:a4:bb:a5:07:c0:75:57:
41:71:df:7e:a2:6d:be:a7:63:1d:4b:07:6f:81:26:c9:71:4d:
9f:dd:11:f5:02:30:34:d0:2b:a0:ba:2b:30:19:b3:97:47:8e:
43:a9:1d:08:2b:71:96:2c:0d:1e:44:23:52:75:a2:a7:26:9e:
07:b1:40:26:1d:9b:8d:7d:71:a0:04:45:d6:d5:b2:1b:fd:5f:
f7:4f:10:04:07:02:6b:8b:df:63:82:e0:c0:51:48:4d:94:0a:
d6:97:1a:42:0d:eb:06:45:d4:73:12:a9:07:c6:b7:3f:2b:2d:
98:8a:a5:b1:80:1d:f4:a4:e4:db:4f:3e:66:d2:f6:ba:c6:61:
91:18:5e:61:35:7d:64:82:f2:b3:e8:d2:f6:7f:27:55:a0:7b:
3a:d0:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:12 2026 by rpki-client