
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139382e302f32332d3233203d3e203138313737.roa
File: 3139322e3139322e3139382e302f32332d3233203d3e203138313737.roa (raw, json)
Hash identifier: oaGq/WMgayMKqkLbscG+TiCk/Uh9aMdE2A3kCKodkyQ=
Subject key identifier: A0:B3:13:45:9A:0B:62:ED:AA:08:36:B2:9C:30:2F:A8:E2:E5:5F:EC
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 1BC68F3461EFCCEF1D33C3275F459C9234DB449A
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139382e302f32332d3233203d3e203138313737.roa
Signing time: Mon 11 May 2026 21:03:32 +0000
ROA not before: Mon 11 May 2026 20:58:32 +0000
ROA not after: Mon 10 May 2027 21:03:32 +0000
asID: 18177
IP address blocks: 192.192.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c6:8f:34:61:ef:cc:ef:1d:33:c3:27:5f:45:9c:92:34:db:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:58:32 2026 GMT
Not After : May 10 21:03:32 2027 GMT
Subject: CN=A0B313459A0B62EDAA0836B29C302FA8E2E55FEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:b8:bd:3d:16:6b:02:0e:86:e0:f6:4f:2b:
a3:b9:16:65:75:d9:2b:e3:13:f6:8d:de:0c:ff:1a:
f6:44:2a:db:9b:c4:76:3d:3f:35:9e:21:fa:97:c6:
8b:37:54:d1:4a:3c:de:1b:6b:ce:2f:df:4b:c2:5a:
30:78:8b:6e:d8:a9:f1:2d:25:1b:ac:4b:f7:75:86:
c1:41:46:0e:a6:2f:48:26:77:a4:80:8c:1f:ae:3e:
48:5b:c3:4a:f9:21:0b:e4:1a:2f:a8:c8:d8:30:71:
18:82:8d:aa:99:95:06:cf:55:70:dd:14:07:8b:ee:
f0:7f:df:45:1e:be:16:63:3d:5b:48:1f:3d:c7:51:
a4:c2:4a:80:45:2c:01:e5:40:ae:a3:f0:27:5a:5a:
b8:e8:e3:51:23:d5:bb:eb:a3:43:f4:ca:cf:7d:77:
d7:ca:54:25:41:f6:67:4d:a0:7e:27:f5:98:7f:9f:
14:69:de:60:cf:9f:01:2c:33:0e:92:25:ef:f4:a3:
a9:db:fc:7f:89:51:d9:6a:70:d9:0e:1c:70:14:ec:
b9:73:fd:8c:f8:de:bd:6c:b4:4d:ed:a1:a1:bb:4d:
ff:79:e0:af:58:bf:ae:db:87:e7:3f:3b:bf:20:19:
bd:38:d1:f7:54:45:0d:29:32:85:85:c2:81:e4:90:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B3:13:45:9A:0B:62:ED:AA:08:36:B2:9C:30:2F:A8:E2:E5:5F:EC
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139382e302f32332d3233203d3e203138313737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:21:cd:ed:b1:31:d9:20:3b:fa:30:6c:02:97:56:eb:c4:1d:
e5:72:9f:9a:90:ac:ec:25:69:79:c6:f4:b0:85:39:f1:67:be:
ee:cf:ac:96:f9:78:98:d0:c9:92:80:08:43:5e:a1:50:5e:bb:
5f:bf:d4:c4:e7:99:93:19:04:e8:c8:c1:b7:c7:a8:92:aa:03:
4f:1f:76:66:c0:18:ef:07:2a:81:2c:b3:8f:cb:5f:33:09:f2:
83:80:fb:a6:03:33:ae:54:d1:5f:3f:21:1c:c6:b9:a2:54:6e:
58:8c:e0:af:5c:57:ce:21:18:60:6d:1f:b4:c7:61:f0:cb:20:
3c:b9:aa:0d:e6:7b:86:7b:49:14:4f:a7:5c:f5:d4:88:35:85:
81:5e:90:56:b9:6c:9c:5f:8d:7d:d1:00:06:ee:bd:06:75:06:
14:bd:92:03:e7:c0:cf:4a:9b:fc:a5:cb:83:1c:b3:27:b2:f0:
f7:53:6c:63:1f:41:23:4c:13:65:69:6f:bf:a4:1a:35:d4:98:
9e:f9:a9:dc:40:32:78:2b:34:4c:9f:69:46:ab:e0:d3:fa:49:
d8:5e:51:28:e5:a7:2c:c9:21:1a:8f:a9:83:53:d2:9b:da:69:
3e:72:58:49:2c:b1:ea:fc:63:15:9a:e1:52:b8:42:09:46:a1:
6c:06:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:26 2026 by rpki-client