
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa
File: 3133342e3230382e302e302f31362d3136203d3e2031363539.roa (raw, json)
Hash identifier: iUAaZj3Y5SLyP/eCqbl/btP0GqPRoSrLi6GbVPu9u8o=
Subject key identifier: B7:D1:2D:C4:9C:6F:CC:07:CB:91:C5:BE:D7:11:07:FD:A4:65:8B:2F
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 05BC4DDDB1F482386FF1B774500B7D3824AB355D
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:55 +0000
ROA not before: Mon 11 May 2026 20:54:55 +0000
ROA not after: Mon 10 May 2027 20:59:55 +0000
asID: 1659
IP address blocks: 134.208.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 01:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:bc:4d:dd:b1:f4:82:38:6f:f1:b7:74:50:0b:7d:38:24:ab:35:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:55 2026 GMT
Not After : May 10 20:59:55 2027 GMT
Subject: CN=B7D12DC49C6FCC07CB91C5BED71107FDA4658B2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:5b:12:5a:a3:4a:50:96:f1:da:75:a2:72:
7d:44:9a:60:d3:6b:b8:31:c6:db:3d:39:e3:8c:ec:
87:aa:bc:5c:f0:8f:30:e5:a9:97:40:13:45:21:7e:
5d:46:34:ac:0b:82:f0:46:02:b5:cd:38:9c:b5:05:
02:ad:6d:3e:7a:44:c2:08:5f:d1:89:1a:95:6e:8b:
a8:26:be:9a:35:dc:f2:82:78:98:5d:87:36:2c:1d:
05:2e:b7:3b:ac:9c:69:49:5d:8c:f2:b7:16:ba:8b:
2e:a7:df:8c:bb:9a:88:26:bb:56:4e:a8:09:7a:8e:
32:55:4a:93:c8:3f:af:b8:c7:54:2c:50:d9:8e:e5:
b8:a7:29:a9:76:2b:8d:86:ae:5a:c9:9f:35:68:d4:
24:3b:25:14:52:d5:ac:2d:7e:d0:fe:69:31:6f:79:
ea:13:68:f7:ce:a0:14:14:0f:e6:84:09:8d:08:53:
cb:34:17:04:c9:5d:ac:dc:0c:13:aa:c1:38:9a:34:
fb:ad:86:a0:d0:87:2c:d9:7c:cd:a0:9c:fa:4f:d6:
32:b6:f0:a0:e0:f5:7c:c8:82:fc:31:1d:4f:41:7c:
66:10:98:65:19:ec:13:2a:04:19:00:14:98:13:c6:
79:37:f2:ca:2b:65:8c:8c:94:fc:60:9d:e0:33:91:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:2D:C4:9C:6F:CC:07:CB:91:C5:BE:D7:11:07:FD:A4:65:8B:2F
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.208.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:d5:f0:54:8e:c3:f5:29:39:8c:88:68:ad:43:bb:4c:b9:df:
81:90:29:19:1d:b9:9d:23:75:12:36:25:e2:28:8d:98:66:d5:
c6:8a:ab:60:91:29:1a:0b:5b:e9:e2:6b:b9:37:e2:e0:30:99:
8d:4f:f8:87:77:d5:df:6a:b5:10:f4:cf:ef:53:58:a8:de:0a:
39:ec:e4:fb:97:b1:c8:ac:28:ac:f3:84:a9:0d:a8:50:c9:83:
da:b4:e5:67:77:5d:d6:b3:8c:e9:1b:69:3d:53:d9:56:99:77:
0d:e1:6c:50:32:9f:89:c1:79:af:87:c2:1b:e9:ba:ae:c6:19:
f7:fd:dc:29:3e:f3:1f:dc:47:bc:e5:af:f2:d4:36:4d:98:f0:
64:78:df:f7:e5:25:df:9a:5b:5f:3f:a5:7b:3f:67:6a:e0:ee:
6a:57:f5:7f:c7:ce:33:df:16:e3:9e:cc:82:f4:5b:be:13:45:
75:63:27:a2:a1:b2:a0:43:5a:e7:95:cd:74:bb:0e:7a:db:46:
c8:b2:2a:eb:b0:21:f1:7a:7c:7f:4e:df:dc:9f:62:eb:19:ab:
23:2c:ed:a3:e5:d0:11:41:1a:65:0c:91:cb:16:30:e8:53:b9:
94:7c:0f:ac:24:2d:3a:4f:4f:c8:e4:c9:07:45:70:0c:b8:b2:
12:0b:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:08 2026 by rpki-client