
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136372e302f32342d3234203d3e2031363539.roa
File: 3139322e38332e3136372e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier: 5ejwn/A++eH5yg3Oe+8y0/3lYtHSa2KR9EWRNlT8tiM=
Subject key identifier: F2:BC:65:27:78:B5:5E:12:24:22:A0:DC:DD:18:09:AE:44:33:A0:D8
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 4E206FB51E0889BDDD8FCBD1E12C0F4FAB21DF14
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136372e302f32342d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 21:00:32 +0000
ROA not before: Mon 11 May 2026 20:55:32 +0000
ROA not after: Mon 10 May 2027 21:00:32 +0000
asID: 1659
IP address blocks: 192.83.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:20:6f:b5:1e:08:89:bd:dd:8f:cb:d1:e1:2c:0f:4f:ab:21:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:55:32 2026 GMT
Not After : May 10 21:00:32 2027 GMT
Subject: CN=F2BC652778B55E122422A0DCDD1809AE4433A0D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:25:d9:63:70:ba:fb:d8:2c:dd:b3:45:f6:
30:09:fd:bb:f1:ac:e0:b4:72:86:f4:de:61:3b:6f:
61:31:2c:b0:c2:41:bb:f9:29:9b:05:d7:a4:85:9a:
11:84:61:2f:a3:aa:98:de:2c:4b:0a:c3:92:ac:a5:
60:85:dc:97:49:17:bc:ab:46:10:7d:00:30:d9:f4:
68:e3:da:dd:2a:b0:cd:7b:f4:93:02:65:ac:2b:6f:
6f:f6:a7:05:9c:83:31:49:b2:b0:cf:71:dc:3b:e6:
76:6b:9a:68:c5:e1:8b:57:95:0c:8d:f0:f3:42:0c:
9e:aa:9b:f5:74:df:48:05:56:bc:c8:a1:dd:ba:b0:
25:a6:14:b7:f9:7c:55:be:04:3f:3c:f2:0c:62:c3:
5e:bf:5f:9f:4a:3e:16:31:7b:0e:2e:c8:b2:4d:09:
af:9f:de:71:95:44:03:63:b1:68:eb:f8:d0:2e:87:
5e:df:35:de:49:ef:07:0a:d7:d9:48:86:a9:5a:16:
90:44:dc:ae:8b:ea:93:cd:4c:16:06:07:f0:df:55:
27:36:e0:0a:4f:e3:93:ab:f1:0f:07:bf:ca:26:72:
57:b1:67:2b:a3:87:54:b1:ce:6d:dd:4c:96:cc:91:
61:1f:57:79:d0:12:b9:28:a9:d9:a7:57:45:fe:b5:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:65:27:78:B5:5E:12:24:22:A0:DC:DD:18:09:AE:44:33:A0:D8
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136372e302f32342d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.83.167.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f8:e7:e2:c4:85:d8:eb:c8:42:3f:09:0a:72:d1:cd:94:36:
12:89:14:83:8b:c2:12:49:8d:66:51:10:ca:d2:74:52:56:02:
01:ed:26:ba:69:ad:92:f3:10:01:9d:31:0f:c6:16:48:9f:7e:
12:0d:7d:1a:2e:f9:3f:f8:ea:a7:8f:38:8d:c6:cc:41:48:06:
f1:d9:7a:d5:38:38:ee:ba:43:5d:36:db:85:24:07:47:20:32:
13:52:4c:71:78:29:46:91:28:8a:0a:29:83:c3:21:79:44:3a:
c7:d5:21:c4:51:7c:ef:d0:28:57:a0:a6:8d:98:ff:b8:5d:05:
1d:fe:2f:8b:60:c4:85:49:cd:82:7e:ff:e7:6a:5c:94:2b:51:
d8:25:99:79:19:d4:ba:56:7c:bf:dc:6b:16:e2:59:82:f0:4a:
ed:5c:31:86:47:f0:ac:fa:f2:dd:20:41:44:27:82:99:03:89:
2b:86:67:be:a3:18:8f:6c:f9:61:18:19:63:b2:55:4c:65:9d:
d8:de:75:e5:5c:9c:b5:d9:23:66:6a:4a:b4:f7:bd:12:80:46:
d0:00:e6:75:2d:de:da:ed:a5:c6:fb:f1:cd:97:4d:0c:ed:64:
02:3c:68:ca:e7:77:35:96:fe:36:0b:8a:5d:42:65:46:09:b5:
a2:c8:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:00 2026 by rpki-client