
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e39322e302f32332d3233203d3e203137373133.roa
File: 3134302e3133332e39322e302f32332d3233203d3e203137373133.roa (raw, json)
Hash identifier: hE1xDxO0N/TkDIAG0lZQ9mQXY5YG2yKhPP8f1cP4LEs=
Subject key identifier: 51:05:33:F7:BA:05:07:2C:48:1F:B4:CB:50:49:BD:0A:B9:23:9A:9B
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 591B0B652B9BFB2575F7AA15D499E454D2704CEE
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e39322e302f32332d3233203d3e203137373133.roa
Signing time: Mon 11 May 2026 21:01:58 +0000
ROA not before: Mon 11 May 2026 20:56:58 +0000
ROA not after: Mon 10 May 2027 21:01:58 +0000
asID: 17713
IP address blocks: 140.133.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1b:0b:65:2b:9b:fb:25:75:f7:aa:15:d4:99:e4:54:d2:70:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:56:58 2026 GMT
Not After : May 10 21:01:58 2027 GMT
Subject: CN=510533F7BA05072C481FB4CB5049BD0AB9239A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:0b:38:ae:af:55:b3:3f:99:e1:ca:44:f2:
0a:c2:53:33:2b:db:f8:93:34:cc:a1:5d:48:6c:df:
d9:21:2f:d3:0f:b5:59:10:d8:50:d2:85:24:6e:5d:
60:37:c8:9a:9e:21:c1:44:ac:43:7c:ae:68:c2:61:
22:94:c4:3f:08:30:4c:a2:02:b5:f0:29:51:5c:af:
16:aa:7e:3f:cb:fe:e8:91:07:8f:e9:6b:b3:e3:e1:
b4:0e:ca:90:fe:26:a0:fd:e0:bc:9e:82:c8:59:56:
c1:6b:7f:02:c2:50:d2:74:9c:b3:07:01:fa:0c:9c:
52:10:fb:0e:3c:52:55:c2:97:a5:26:82:b4:9d:8c:
3d:31:22:0b:b6:7e:67:62:90:6c:16:e0:e9:3a:f0:
63:8b:3d:05:50:c4:65:d3:8a:1d:80:c3:0e:11:b8:
0c:8b:41:91:76:08:d2:95:e2:66:4a:33:3f:fd:6a:
8d:4c:16:51:57:e8:83:76:a4:d6:71:a5:79:ca:c7:
23:33:c4:21:0e:0c:ee:6c:42:9e:0f:d6:8e:4c:93:
ff:7c:33:f8:ac:01:9a:f6:31:ee:44:ab:e0:07:5f:
e7:f8:65:4f:f3:4b:78:1c:23:f0:8f:0e:44:3a:5c:
f9:2b:a8:8b:63:ba:56:28:06:f0:ac:f3:be:94:06:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:33:F7:BA:05:07:2C:48:1F:B4:CB:50:49:BD:0A:B9:23:9A:9B
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e39322e302f32332d3233203d3e203137373133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.133.92.0/23
Signature Algorithm: sha256WithRSAEncryption
44:86:b1:16:c2:85:1f:f0:70:aa:ad:c2:f3:9d:8d:dd:32:f9:
70:5e:a7:52:6d:31:e1:65:09:2c:32:94:62:12:b3:d4:44:f8:
cc:0e:9f:5b:8b:b0:e0:32:98:38:48:a2:7f:cc:89:23:da:58:
15:5d:d2:f6:fe:e6:70:9f:ca:2c:25:26:db:ba:3b:f3:e7:56:
ab:db:97:20:7c:06:84:8d:93:12:78:03:b2:fa:e5:47:c3:5c:
8a:6b:14:10:3e:48:01:7a:f0:5b:0d:79:a4:97:ec:91:62:7b:
71:e3:b7:38:d8:3e:8b:8f:d3:4f:74:c9:13:f4:7b:4a:99:da:
97:b4:07:29:3f:4e:87:1d:36:1c:2e:0e:ec:2a:f2:89:4e:c1:
a8:7d:b9:3d:0e:0b:e0:c9:04:bb:a9:02:5e:3a:57:9c:a7:75:
5c:02:1e:2b:c1:95:57:e2:96:a0:18:a2:4b:b6:6e:f2:1e:4e:
25:3f:4e:76:56:5b:84:c7:1d:03:1a:87:a1:df:40:8b:da:f0:
ec:15:16:47:6d:74:8a:46:c9:ca:11:43:28:30:64:d0:89:2f:
8f:49:27:4c:e8:90:b5:32:bb:b9:07:0c:b6:c3:e3:b0:af:8a:
8c:e8:61:e3:62:d5:db:14:cf:3c:8c:f2:34:27:43:93:12:0e:
f0:17:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:55 2026 by rpki-client