
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa
File: 3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa (raw, json)
Hash identifier: 2qii3VSX06DMqq/EtVRBvah3z2FSa/UjztfUOInOFt0=
Subject key identifier: 42:03:F7:74:FD:19:6B:F5:D6:3F:FA:78:8C:B9:2F:47:F8:04:19:10
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 6E9363DA3C16653BB4C37F990E6CB8B4EDC7D51A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa
Signing time: Mon 11 May 2026 21:04:50 +0000
ROA not before: Mon 11 May 2026 20:59:50 +0000
ROA not after: Mon 10 May 2027 21:04:50 +0000
asID: 17716
IP address blocks: 192.192.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:93:63:da:3c:16:65:3b:b4:c3:7f:99:0e:6c:b8:b4:ed:c7:d5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:59:50 2026 GMT
Not After : May 10 21:04:50 2027 GMT
Subject: CN=4203F774FD196BF5D63FFA788CB92F47F8041910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:e3:f5:1b:a7:a9:52:54:da:4e:2b:aa:e2:
af:27:45:77:cb:57:07:ae:d6:89:14:ff:9e:67:50:
34:8a:f0:94:34:93:a7:7c:39:8e:1d:07:be:ab:97:
0b:84:c4:ff:1b:f1:73:f8:46:08:6c:67:75:bc:51:
60:5e:8a:16:2c:0d:bf:de:70:2b:3b:5d:49:56:59:
06:e4:47:13:b6:18:e6:9b:64:b8:64:04:c4:32:2d:
29:15:e9:84:5a:3b:75:72:b5:fc:dc:96:e9:7b:95:
90:4e:ce:f0:c4:99:5d:7d:c9:d8:6d:46:d9:a5:43:
fb:55:ff:95:b7:a5:7e:36:3e:f6:fe:bc:16:95:99:
41:bd:ca:de:9b:92:18:04:86:3b:12:61:a1:fd:28:
94:dc:79:80:d5:70:36:14:d1:59:1b:85:de:72:dc:
e7:a0:c8:22:a7:bc:15:3d:4b:78:0b:28:c0:2e:82:
47:bb:18:dd:fc:b8:45:13:5b:1a:60:91:2d:74:67:
e5:64:51:37:71:7e:a2:6c:8e:28:85:0e:26:eb:1c:
24:9f:8f:51:45:47:df:2e:7f:61:c8:45:a1:39:c2:
95:07:38:80:33:c6:39:e1:9e:f7:91:43:48:43:b7:
ab:0a:e5:3c:a1:ab:23:15:81:d4:f6:c7:8d:66:97:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:03:F7:74:FD:19:6B:F5:D6:3F:FA:78:8C:B9:2F:47:F8:04:19:10
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3134302e302f32332d3233203d3e203137373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.140.0/23
Signature Algorithm: sha256WithRSAEncryption
10:be:0d:83:44:04:62:9b:31:92:c4:72:0f:7a:cb:3d:28:ce:
36:5b:b4:67:69:4a:24:5f:05:d1:0d:08:a2:5e:ec:2d:90:42:
17:8d:09:52:bc:9c:61:1c:e5:4b:66:4c:a1:a4:90:aa:6e:52:
22:ed:d2:49:77:7a:8c:92:a5:49:d5:da:11:14:16:ff:92:56:
16:cf:d2:64:a0:ee:f7:79:da:51:ba:ac:1b:52:4b:92:09:8f:
cb:48:b1:2f:fa:cf:9d:9d:6f:88:58:73:36:25:64:4c:e1:ad:
45:c9:d3:d5:e7:a4:60:00:da:b8:99:a6:f6:97:13:20:65:a9:
29:e8:aa:c5:08:72:b5:37:c7:8f:dd:54:a9:20:84:45:66:c8:
fc:a9:a1:e8:77:4b:92:97:76:27:68:79:cb:a1:0c:e3:40:d5:
17:d6:51:21:81:2d:c1:02:68:bf:6f:d1:2a:9b:3d:ba:8a:95:
ea:30:5b:a6:07:09:2d:1b:40:92:70:47:c0:cf:8a:5e:18:9a:
96:90:5c:9a:2c:e2:02:f9:9b:fd:b2:3d:08:d5:9c:b2:84:65:
32:0c:09:29:22:54:58:3b:29:16:51:62:f5:18:4e:31:36:14:
a2:41:d9:50:99:09:9c:d7:e7:65:ab:18:b9:d5:93:95:77:03:
9c:65:3d:8c
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUbpNj2jwWZTu0w3+ZDmy4tO3H1RowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU5NTBaFw0yNzA1MTAyMTA0NTBaMDMxMTAvBgNV
BAMTKDQyMDNGNzc0RkQxOTZCRjVENjNGRkE3ODhDQjkyRjQ3RjgwNDE5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtnuP1G6epUlTaTiuq4q8nRXfL
Vweu1okU/55nUDSK8JQ0k6d8OY4dB76rlwuExP8b8XP4RghsZ3W8UWBeihYsDb/e
cCs7XUlWWQbkRxO2GOabZLhkBMQyLSkV6YRaO3Vytfzclul7lZBOzvDEmV19ydht
RtmlQ/tV/5W3pX42Pvb+vBaVmUG9yt6bkhgEhjsSYaH9KJTceYDVcDYU0Vkbhd5y
3OegyCKnvBU9S3gLKMAugke7GN38uEUTWxpgkS10Z+VkUTdxfqJsjiiFDibrHCSf
j1FFR98uf2HIRaE5wpUHOIAzxjnhnveRQ0hDt6sK5TyhqyMVgdT2x41ml2gJAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUQgP3dP0Za/XWP/p4jLkvR/gEGRAwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM3MzczMTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBwMCMMA0GCSqGSIb3DQEBCwUAA4IBAQAQvg2DRARimzGSxHIPess9KM42
W7RnaUokXwXRDQiiXuwtkEIXjQlSvJxhHOVLZkyhpJCqblIi7dJJd3qMkqVJ1doR
FBb/klYWz9JkoO73edpRuqwbUkuSCY/LSLEv+s+dnW+IWHM2JWRM4a1FydPV56Rg
ANq4mab2lxMgZakp6KrFCHK1N8eP3VSpIIRFZsj8qaHod0uSl3YnaHnLoQzjQNUX
1lEhgS3BAmi/b9Eqmz26ipXqMFumBwktG0CScEfAz4peGJqWkFyaLOIC+Zv9sj0I
1ZyyhGUyDAkpIlRYOykWUWL1GE4xNhSiQdlQmQmc1+dlqxi51ZOVdwOcZT2M
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:47 2026 by rpki-client