
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e322e302f32342d3234203d3e2031363539.roa
File: 3139322e3139322e322e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier: enbS5T7WQfv3yiBS7/LPssa6D92rwWgHhChXD7PiQ/E=
Subject key identifier: A4:AE:0A:19:CC:F4:4F:CC:6F:73:8A:9B:AC:A7:03:E3:E0:60:F1:CE
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 790FD0BC8B9D33F0E58BB10F198001540CD1BC21
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e322e302f32342d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 21:00:35 +0000
ROA not before: Mon 11 May 2026 20:55:35 +0000
ROA not after: Mon 10 May 2027 21:00:35 +0000
asID: 1659
IP address blocks: 192.192.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0f:d0:bc:8b:9d:33:f0:e5:8b:b1:0f:19:80:01:54:0c:d1:bc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:55:35 2026 GMT
Not After : May 10 21:00:35 2027 GMT
Subject: CN=A4AE0A19CCF44FCC6F738A9BACA703E3E060F1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:4f:85:0f:0b:4a:5e:b6:ec:9e:a0:d4:4a:
bf:bc:74:f8:aa:ae:3f:31:de:8f:31:ab:f5:df:db:
50:1a:1d:ab:40:ee:8d:2f:da:08:3b:d9:a2:95:47:
82:08:99:39:bb:fc:40:86:38:9a:3a:c6:27:61:4c:
14:a7:ec:94:f3:28:80:02:55:88:62:97:66:40:7d:
10:43:57:bb:42:1d:d0:12:5c:2c:57:26:58:17:42:
d2:5f:e8:2c:34:77:c6:43:e1:d6:fa:5a:71:ba:17:
f0:b7:72:71:97:ab:c4:bd:10:3b:71:64:20:3c:db:
29:48:26:9f:d7:09:6e:15:92:d1:2b:13:f3:30:aa:
e8:fd:cf:4f:ce:10:cd:94:6b:ea:d7:e2:a9:0d:64:
8e:ac:b8:f4:99:52:72:ca:c6:0e:7d:d1:75:77:77:
ef:16:ca:98:d8:53:72:d5:79:e6:ef:c1:0a:12:7c:
12:d5:b8:64:1c:ed:ae:f0:d5:af:cc:93:8f:7f:e8:
0f:4b:05:cb:7b:4d:dc:ff:10:bb:08:73:0d:66:2d:
57:6d:4f:f1:1f:d4:85:8c:7a:e2:a3:33:63:02:98:
90:b3:d9:d6:2c:72:31:e1:59:1d:ff:6c:cb:0a:32:
c0:fa:83:e4:27:65:a3:1d:2c:48:4a:cd:a7:74:60:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:0A:19:CC:F4:4F:CC:6F:73:8A:9B:AC:A7:03:E3:E0:60:F1:CE
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e322e302f32342d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:85:0b:02:16:64:48:ae:d3:2d:59:a7:c7:06:7e:e3:bc:65:
ec:ab:09:28:52:a6:cb:1a:3d:5a:0b:60:04:cf:ae:74:9c:ec:
62:e3:84:98:fa:bb:21:69:85:2a:f5:1b:94:3e:02:28:49:e3:
ab:ac:a7:ba:cb:74:ba:bf:9b:e9:aa:bf:b6:e1:b6:4f:56:aa:
71:1d:5c:34:bf:93:ff:dd:85:5b:aa:6d:b3:4f:d9:89:5c:4e:
2d:dd:b3:3c:fb:41:b7:96:b1:06:02:26:4e:16:39:a8:6f:7a:
27:f1:72:43:38:6d:ec:bc:8d:d8:1c:e2:f1:c0:6b:24:e1:d9:
24:26:18:bb:94:79:0e:28:b9:72:9e:52:71:80:aa:f5:3b:3a:
0c:0c:97:fd:cf:43:c6:d4:34:07:6a:3d:4e:a8:a5:a8:52:fd:
6a:60:31:af:56:f0:ca:a0:b4:07:e3:01:19:2a:3a:66:65:44:
fb:ed:27:bb:dc:2c:21:de:8c:de:21:9c:ef:64:1d:db:98:a6:
5e:a9:63:3a:70:f1:1d:07:80:88:9a:cf:95:7e:9e:db:a8:26:
fd:8a:59:8b:1e:14:5d:08:d3:51:07:e9:3a:b8:09:9c:3d:9b:
57:d2:d9:0c:f5:e1:d0:14:b8:9b:19:9e:b8:99:28:04:98:df:
9e:a4:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:44 2026 by rpki-client