
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3230322e3134342e3230382e302f32302d3234203d3e203234313537.roa
File: 3230322e3134342e3230382e302f32302d3234203d3e203234313537.roa (raw, json)
Hash identifier: QZjwyQakIahgghneQfgRX20n3Yi+fw6+KYNrbrQYxeA=
Subject key identifier: A2:6F:19:77:E0:49:79:FC:ED:2F:B4:84:86:AA:14:99:CD:94:79:34
Certificate issuer: /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial: 31B91CCA7AFABDCF73D59DAB694A40EB6732519F
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3230322e3134342e3230382e302f32302d3234203d3e203234313537.roa
Signing time: Mon 11 May 2026 17:32:59 +0000
ROA not before: Mon 11 May 2026 17:27:59 +0000
ROA not after: Mon 10 May 2027 17:32:59 +0000
asID: 24157
IP address blocks: 202.144.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b9:1c:ca:7a:fa:bd:cf:73:d5:9d:ab:69:4a:40:eb:67:32:51:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Validity
Not Before: May 11 17:27:59 2026 GMT
Not After : May 10 17:32:59 2027 GMT
Subject: CN=A26F1977E04979FCED2FB48486AA1499CD947934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:16:3d:4b:b5:bc:1e:7b:8f:59:28:da:1c:
e4:3b:e0:1c:ef:79:fd:b0:76:3b:a3:d4:5f:97:2d:
a5:7e:7b:86:72:1a:01:6d:36:57:5d:dc:b3:9c:cb:
5b:35:0f:b7:8a:ea:c0:2c:13:3d:ac:94:d0:05:ef:
bd:1d:33:56:89:ed:89:a1:06:a0:9d:3f:4c:9a:8f:
0f:c1:d7:9d:b3:60:0e:5d:c2:96:17:fd:d0:e6:4c:
29:dc:c5:0f:b0:9e:e8:eb:23:9c:e1:df:13:4a:f6:
3a:10:34:ad:ba:f6:72:c8:63:45:96:b4:f1:1d:01:
24:c1:0a:0d:e7:50:bf:58:a0:58:d3:5c:6a:44:bc:
93:d8:39:6a:1b:36:72:db:b5:90:08:b1:79:a3:1d:
4a:1d:c3:30:91:89:fa:a2:a3:49:49:44:73:4b:df:
7c:54:33:69:dd:50:79:a5:83:49:3b:3f:a3:f5:4b:
fd:a9:54:c1:91:10:83:f8:ad:3c:d1:32:23:54:19:
df:5e:87:ef:17:fc:d9:df:ea:39:4c:93:0d:ea:af:
4f:95:a5:11:2c:86:ab:9f:25:97:5c:e6:b4:6e:5b:
a8:92:0b:56:9c:e8:07:89:fd:dc:92:91:7e:06:04:
00:68:87:94:8e:a2:d6:a9:9d:30:f8:eb:5f:a3:e8:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:19:77:E0:49:79:FC:ED:2F:B4:84:86:AA:14:99:CD:94:79:34
X509v3 Authority Key Identifier:
keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3230322e3134342e3230382e302f32302d3234203d3e203234313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.144.208.0/20
Signature Algorithm: sha256WithRSAEncryption
35:05:94:9b:06:55:87:8d:2d:05:ca:8d:3a:66:31:41:96:7a:
2d:f2:59:46:72:f9:65:a1:cf:bf:ec:db:b0:65:2b:4e:45:73:
2b:99:9c:af:4b:7e:b9:e4:6e:92:c1:6b:60:a6:7a:26:cb:5c:
68:7d:59:62:09:e9:7c:f5:19:0a:4a:4a:90:98:84:a9:40:e9:
6d:b4:c0:45:9d:f4:30:34:bf:80:30:62:a8:bd:0f:90:b7:a3:
d4:b9:05:94:6c:3c:81:a8:2c:f4:78:63:bc:95:a9:4e:2b:11:
a5:e9:d6:90:9b:7d:94:f0:54:8a:e6:6e:46:7e:92:f4:e0:24:
c6:fe:f4:f2:22:b0:24:ff:a9:59:78:3a:b5:07:87:11:18:ba:
66:90:f6:0b:ae:c1:0f:6e:0f:0a:3e:ed:9b:51:87:3b:6e:ca:
81:7a:be:1f:b4:57:12:8e:a2:bf:db:34:a2:cb:5f:ab:df:70:
0a:3c:5c:15:8b:bc:c6:7c:a2:43:dd:39:85:89:3f:e2:1b:2e:
84:55:0c:eb:84:06:30:89:81:68:5b:f0:f2:c1:73:44:cc:ca:
26:8f:57:28:34:8f:03:89:81:f8:fd:92:b9:66:ef:fd:ce:5c:
4a:39:3f:71:91:df:6b:59:e9:17:08:90:8c:8e:aa:10:f1:33:
ea:4f:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:37:33 2026 by rpki-client