
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133352e302f32342d3234203d3e203137373136.roa
File: 3139322e3139322e3133352e302f32342d3234203d3e203137373136.roa (raw, json)
Hash identifier: Ze0yC2MvgbSPqIzuZkwaH5Z+uMWhaOW31hL73+OBfRc=
Subject key identifier: A1:CE:45:D9:A6:F5:FF:EC:65:A8:21:D5:64:16:1F:16:91:DA:A0:EC
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 5B7722A377EA00A5C600804DA24B8A3D4DDD286C
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133352e302f32342d3234203d3e203137373136.roa
Signing time: Mon 11 May 2026 21:04:49 +0000
ROA not before: Mon 11 May 2026 20:59:49 +0000
ROA not after: Mon 10 May 2027 21:04:49 +0000
asID: 17716
IP address blocks: 192.192.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:77:22:a3:77:ea:00:a5:c6:00:80:4d:a2:4b:8a:3d:4d:dd:28:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:59:49 2026 GMT
Not After : May 10 21:04:49 2027 GMT
Subject: CN=A1CE45D9A6F5FFEC65A821D564161F1691DAA0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:eb:a4:32:fe:ba:50:9b:e5:cf:e0:bc:92:
14:e4:d1:b8:b9:d5:c7:23:f9:65:b8:5c:c3:3a:f6:
32:ee:6e:df:ab:4e:a7:64:20:b4:1b:88:76:51:9b:
6e:c1:45:f4:41:cd:5c:17:b1:46:28:42:3a:e4:72:
c6:68:b2:13:bd:67:b8:50:8e:21:db:d2:ab:98:c1:
4b:c5:6b:75:1d:d4:7b:e5:b4:a1:ab:5d:49:af:d5:
79:f4:e9:37:7e:52:b5:37:a6:a6:ee:c5:42:bb:54:
cc:5e:95:3e:7e:23:8a:d9:1c:0c:df:51:ed:58:43:
0d:5f:4e:78:83:54:4b:5f:d6:5a:a6:8a:f8:8c:c8:
ff:1d:db:c0:79:f4:00:e1:03:85:57:5e:0a:3c:bb:
fd:0a:e7:b2:8e:68:76:8a:f7:f9:ea:11:ae:ba:3c:
19:0d:18:fc:6d:92:5c:78:1f:fd:d5:5d:79:c5:0b:
f6:e4:c8:1c:06:b2:13:03:15:f2:aa:95:0e:88:c4:
12:f4:1c:f2:3d:29:91:a2:4c:9a:1a:21:b3:bd:b7:
1b:ad:db:09:eb:5e:01:74:51:52:87:5f:c6:fd:be:
89:de:e4:10:1d:cb:82:02:a0:c6:fc:92:dd:96:20:
10:f1:a2:e8:4f:05:63:0d:30:59:da:4b:b3:4a:cf:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:45:D9:A6:F5:FF:EC:65:A8:21:D5:64:16:1F:16:91:DA:A0:EC
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133352e302f32342d3234203d3e203137373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d6:b1:62:ec:68:90:4c:fb:9f:f6:d6:e8:09:46:8c:e1:1a:
98:1c:fd:e4:f1:1b:da:eb:e3:09:ac:5b:08:9a:3c:f7:28:24:
28:65:61:2b:9e:d8:58:d2:14:52:20:8f:21:cf:c1:6a:34:c2:
f4:45:b0:c5:0a:c1:51:fc:58:60:a5:ab:e6:98:f6:80:ce:5a:
8a:bc:7b:98:a6:77:0f:2a:2f:26:b7:59:b6:7e:8b:58:a5:27:
50:92:7c:3e:0e:a6:0d:fb:3f:f8:07:f1:37:4d:30:2b:af:61:
e3:ef:32:19:8f:6c:38:44:84:c3:a8:23:bb:dc:76:a7:12:be:
c5:8d:de:c5:59:77:68:45:86:94:e4:f7:6d:fc:2a:07:0c:c8:
5e:94:2e:51:41:2a:f7:93:aa:fe:e5:6a:58:55:c8:ec:41:62:
05:cc:28:fb:ac:d5:40:c5:57:2a:a9:72:70:b5:3e:ab:88:43:
50:fd:2d:87:a2:c0:7c:ff:cc:22:db:a4:39:21:bc:bd:78:f7:
d4:43:f7:2f:f9:2f:ee:c9:80:a3:2f:9f:7a:f3:b6:ff:76:ae:
93:57:96:b5:37:ac:96:94:03:ec:7c:39:76:27:f6:31:15:12:
9a:70:57:d5:fc:97:1c:f3:d9:ab:80:ee:1f:88:ae:16:31:84:
0b:2d:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:49 2026 by rpki-client