
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa
File: 3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier: HOMdW/DCA4sfda1rA7mXzGtDkCQnCGvJ9UcaKJMYDkI=
Subject key identifier: 29:88:7C:1C:74:E9:83:BC:F0:90:0E:3F:9D:E6:87:36:70:13:A5:7C
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 79A50207A52D85D3A26FC0DE2F5D62EF882963DC
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 21:00:48 +0000
ROA not before: Mon 11 May 2026 20:55:48 +0000
ROA not after: Mon 10 May 2027 21:00:48 +0000
asID: 1659
IP address blocks: 192.192.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a5:02:07:a5:2d:85:d3:a2:6f:c0:de:2f:5d:62:ef:88:29:63:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:55:48 2026 GMT
Not After : May 10 21:00:48 2027 GMT
Subject: CN=29887C1C74E983BCF0900E3F9DE687367013A57C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:e8:9d:7a:01:ce:56:bb:b8:b0:d9:63:e7:
e1:18:53:70:66:78:82:75:5c:b5:39:f9:cf:11:99:
74:a6:80:6c:9f:3f:ed:35:2d:04:c4:22:d2:5e:a9:
9f:01:dc:73:f2:5f:6c:d0:09:46:b9:a0:9f:bf:ad:
fe:0a:96:72:78:7a:16:99:b9:fb:4e:ff:5b:5e:9c:
93:f1:74:3d:46:1a:d8:45:be:88:73:39:d0:4e:bc:
8f:70:3e:68:46:d7:d7:e8:09:51:01:af:68:51:a1:
11:7d:8e:97:d6:4a:97:10:12:88:4e:1d:5c:c1:73:
e0:40:8b:d4:e4:83:f8:bd:8a:63:6c:7a:d8:86:63:
ea:a9:9f:28:f6:35:9a:4f:bd:b9:e0:7e:b6:a7:89:
58:45:ce:b1:c0:2c:9e:e6:e1:b9:60:74:ed:c4:18:
80:51:1e:e9:1d:9a:1d:30:d9:03:21:6b:2c:c4:95:
91:14:58:ce:d4:b4:a7:37:0e:44:aa:4d:4f:1b:4b:
c7:4e:62:38:e7:cf:04:f6:24:77:d9:76:ca:cf:3e:
46:46:17:38:cf:1c:f2:08:42:7f:06:ef:0e:48:ef:
e0:3f:b6:7f:b6:d8:86:bf:9b:a2:44:ab:8b:65:1e:
de:5f:92:0f:79:c3:40:b6:4a:2e:13:01:78:5f:70:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:7C:1C:74:E9:83:BC:F0:90:0E:3F:9D:E6:87:36:70:13:A5:7C
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3133362e302f32342d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0e:b4:80:b0:fa:1c:2b:55:51:1a:1b:c1:82:39:c8:32:d1:
96:e0:72:87:f6:47:3f:64:6f:e9:4f:fe:b3:d6:bb:4c:4b:33:
0c:88:d1:2a:ed:34:54:b8:26:80:70:98:0e:d7:4e:bd:49:78:
75:c9:72:02:96:94:68:03:07:22:11:2a:d7:73:0a:cf:02:ff:
c7:b4:d5:ac:43:5a:19:29:cd:96:f1:57:e6:11:eb:65:98:32:
18:d9:f5:4b:72:fb:78:26:33:6d:7f:d1:33:d1:8a:71:f3:81:
1f:c4:a0:43:d6:cd:aa:a0:0c:b9:e0:ea:77:c6:05:e8:9d:88:
6e:5c:42:96:93:f2:26:30:5b:da:ad:38:ac:50:bd:b7:d3:8f:
4d:01:81:7f:e7:ec:7b:a0:fe:b0:2f:05:a4:99:e4:c8:4e:39:
e7:65:f1:b2:05:c5:a4:02:be:8a:29:70:b7:c0:a6:44:1d:99:
72:4a:1c:86:d1:b5:aa:a2:ca:15:04:9d:ec:b6:31:36:44:cd:
3c:66:59:ec:5d:f0:0a:eb:33:b4:f2:89:8a:73:5a:79:c0:9f:
b3:7f:e0:df:58:4e:68:16:30:f7:bb:f6:40:15:5a:13:e2:1e:
44:13:d3:55:21:84:82:7f:b4:dc:d6:2c:72:2b:6d:f8:59:2c:
35:a9:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:33 2026 by rpki-client