
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3233382e302f32332d3233203d3e2031363539.roa
File: 3139322e3139322e3233382e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier: TYjMY/fln/+JQteU+SAVZV0grTBdRo+ra083MXE5IO4=
Subject key identifier: 03:33:BF:F9:3A:7F:6C:F6:C9:4B:58:B8:23:9A:40:84:68:68:0E:EB
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 0C8B124E0A6EEAD0B02987A0E5FBC5679B72DF52
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3233382e302f32332d3233203d3e2031363539.roa
Signing time: Mon 11 May 2026 21:00:49 +0000
ROA not before: Mon 11 May 2026 20:55:49 +0000
ROA not after: Mon 10 May 2027 21:00:49 +0000
asID: 1659
IP address blocks: 192.192.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8b:12:4e:0a:6e:ea:d0:b0:29:87:a0:e5:fb:c5:67:9b:72:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:55:49 2026 GMT
Not After : May 10 21:00:49 2027 GMT
Subject: CN=0333BFF93A7F6CF6C94B58B8239A408468680EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:3c:8d:4c:da:cc:11:6c:1f:dc:7c:2d:54:
f6:1e:a3:a4:4f:2e:c9:06:c4:30:e7:bc:83:ff:fc:
ea:46:f1:2d:7b:6f:2a:48:15:94:8f:90:8a:c4:4b:
e5:ea:db:44:9e:0c:4f:8a:e6:56:1f:18:2e:c3:ec:
4c:90:a7:f0:cc:3a:5a:bc:ca:92:ef:eb:c7:23:7d:
ed:60:3e:82:0f:ea:b9:b2:d3:6f:3b:bd:f0:b1:77:
ac:db:7c:79:1f:f0:f1:2a:7a:0a:a1:39:e2:5f:9e:
bc:d7:90:f2:82:eb:61:f7:c3:6f:85:6a:e3:e6:51:
39:93:9e:1c:9d:ea:59:71:ea:cf:c3:f6:5f:fe:19:
5d:df:16:49:ed:90:3c:ce:57:3d:d8:d0:e7:1c:21:
1b:57:74:8b:64:f4:ae:3a:08:75:3a:ce:23:af:23:
92:c3:86:43:51:83:fa:4f:a0:63:b9:99:51:20:5f:
83:db:99:c2:65:ef:ed:c0:b9:89:51:02:99:5f:99:
29:ae:bf:7b:88:3f:7e:df:77:22:27:46:10:6e:94:
89:ed:91:0e:17:ab:d0:c3:c2:9b:ee:a4:ff:bb:67:
53:b1:c0:2b:48:24:5b:84:25:69:31:6d:3d:c8:ac:
c7:34:43:7f:5f:8f:e0:58:ee:77:a5:22:37:a4:b5:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:33:BF:F9:3A:7F:6C:F6:C9:4B:58:B8:23:9A:40:84:68:68:0E:EB
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3233382e302f32332d3233203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.238.0/23
Signature Algorithm: sha256WithRSAEncryption
93:fb:29:7f:5d:16:14:ee:60:1f:68:2e:8e:f8:5b:85:07:f8:
f6:54:87:c3:8e:43:09:88:4a:9a:a2:99:32:3d:e4:44:ad:27:
51:be:d4:8e:c6:4c:86:7d:c7:6c:96:d2:31:40:a5:29:68:c9:
c6:95:f6:fc:10:02:87:92:18:fb:16:43:89:16:38:6b:b2:33:
8e:35:a3:4c:a0:b8:90:bd:c9:0c:1a:90:c4:2a:04:50:07:ed:
9e:9a:d5:ea:85:fe:be:5b:dd:43:78:67:c6:c8:95:de:0b:9a:
b7:f9:ef:72:1c:9d:1c:49:89:43:b3:bf:5d:10:0c:5f:da:da:
49:52:e4:89:c7:ce:14:c8:da:9c:e2:c0:9d:1b:a3:ca:88:3c:
3a:46:ac:20:01:8b:dd:c0:ea:6a:c6:b6:73:a7:c4:31:cd:e2:
b6:61:62:16:63:bb:9e:ca:b5:0b:48:fd:08:31:07:2f:0c:69:
73:06:da:9d:66:8c:2e:a2:c9:8c:7b:81:9f:78:a7:88:51:df:
1e:16:fd:48:77:5c:a2:98:fd:19:93:09:62:24:23:e2:04:3f:
bb:05:2f:b1:c6:dc:c4:18:61:dd:57:08:54:dc:25:03:6a:db:
43:4d:39:f7:26:c5:bf:4f:bb:39:11:cb:98:c8:8e:16:33:14:
fd:1f:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:39 2026 by rpki-client