
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3137362e302f32302d3230203d3e2031363539.roa
File: 3139322e38332e3137362e302f32302d3230203d3e2031363539.roa (raw, json)
Hash identifier: zQNT2inglUeiQxd/EsFYUFGx8emQ9sCiSloMXpi34Eg=
Subject key identifier: D3:B5:38:D8:63:BE:5F:18:C9:32:A9:FA:E0:86:7B:10:7A:67:81:58
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 28EEADB5B8FC90A75B6D855FFE8318202B5197FD
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3137362e302f32302d3230203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:52 +0000
ROA not before: Mon 11 May 2026 20:54:52 +0000
ROA not after: Mon 10 May 2027 20:59:52 +0000
asID: 1659
IP address blocks: 192.83.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ee:ad:b5:b8:fc:90:a7:5b:6d:85:5f:fe:83:18:20:2b:51:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:52 2026 GMT
Not After : May 10 20:59:52 2027 GMT
Subject: CN=D3B538D863BE5F18C932A9FAE0867B107A678158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:ee:ba:97:25:b5:7f:5c:21:c5:72:69:ad:
02:93:e2:d0:36:e8:c8:64:b1:6c:ae:f3:aa:69:f1:
a6:c5:1e:55:8e:4d:4e:21:9f:1e:2b:5e:da:6c:ba:
06:b4:00:5e:bd:30:67:95:c8:1a:2d:69:43:53:81:
0e:36:04:d6:c8:9f:0d:40:bb:ce:69:4d:92:2d:5f:
54:ce:57:cf:f0:d8:f0:26:00:83:29:e8:2b:c4:ac:
b5:3f:91:22:8c:5b:84:c0:81:73:61:df:bc:4e:9a:
c7:f8:11:b7:3e:df:87:90:9b:52:7d:aa:c5:3f:7b:
a7:1c:e6:a3:d8:0b:83:29:4f:3e:d9:90:ec:fc:9b:
e3:a4:20:6b:56:f9:ad:f5:b7:4e:0c:0c:00:32:11:
73:5d:2c:c1:59:a6:83:1e:79:27:6b:78:29:81:22:
7b:36:2f:35:1e:b0:e1:6e:af:e6:81:30:78:1a:30:
f2:91:1a:e6:58:bc:2b:cc:66:90:c9:66:c2:e0:5c:
7a:37:65:63:ab:70:ac:34:62:91:5e:bc:fd:b0:39:
cb:06:8c:8f:db:ba:ac:65:01:4e:73:ba:a6:a8:2e:
52:fb:b2:9b:c1:ae:53:24:58:d5:8f:48:5f:78:2e:
b4:09:96:3d:53:08:35:0f:d7:da:54:63:6d:7a:1a:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:38:D8:63:BE:5F:18:C9:32:A9:FA:E0:86:7B:10:7A:67:81:58
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3137362e302f32302d3230203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.83.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:38:f7:1b:a4:cd:cb:fc:bb:65:59:35:0f:6f:81:20:9b:42:
f8:7c:1f:dc:da:72:eb:06:7c:c0:50:f4:6b:9f:f2:7e:9e:a3:
31:61:8c:8f:f0:01:de:5f:00:b9:bc:29:22:e8:43:75:23:c4:
ed:bc:d3:db:d6:b6:aa:9e:ae:3a:fe:7b:16:49:1e:7a:c4:51:
69:ab:fa:1e:78:71:55:80:2c:fa:63:f5:15:a0:4e:a2:b5:41:
12:b2:c8:30:1e:20:e5:27:dd:3c:97:a5:69:e0:08:79:bd:b0:
bc:a7:d9:4f:be:93:7b:21:24:ab:51:bc:d4:f8:dc:e4:43:de:
e5:ff:d0:0a:a7:38:55:aa:59:42:b5:2e:75:f6:55:62:30:c0:
04:d1:f5:73:f1:6a:14:f7:2b:ce:80:da:e0:c4:ec:61:15:14:
a4:b0:1e:07:fa:7f:4c:49:ba:32:5c:40:6f:38:dc:36:46:cf:
e8:2e:b1:73:78:43:19:c8:01:2a:f1:7b:3a:71:96:88:ae:7a:
07:28:75:00:25:30:e5:37:fa:fc:a0:ba:99:c4:b9:92:66:1d:
a4:ae:26:c0:96:14:0a:80:5a:23:f8:ae:e9:6a:18:cc:61:4b:
36:2e:52:d2:5c:57:0f:ab:e1:01:da:b7:04:32:05:e2:0a:68:
87:8d:5d:f1
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUKO6ttbj8kKdbbYVf/oMYICtRl/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU0NTJaFw0yNzA1MTAyMDU5NTJaMDMxMTAvBgNV
BAMTKEQzQjUzOEQ4NjNCRTVGMThDOTMyQTlGQUUwODY3QjEwN0E2NzgxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNe66lyW1f1whxXJprQKT4tA2
6MhksWyu86pp8abFHlWOTU4hnx4rXtpsuga0AF69MGeVyBotaUNTgQ42BNbInw1A
u85pTZItX1TOV8/w2PAmAIMp6CvErLU/kSKMW4TAgXNh37xOmsf4Ebc+34eQm1J9
qsU/e6cc5qPYC4MpTz7ZkOz8m+OkIGtW+a31t04MDAAyEXNdLMFZpoMeeSdreCmB
Ins2LzUesOFur+aBMHgaMPKRGuZYvCvMZpDJZsLgXHo3ZWOrcKw0YpFevP2wOcsG
jI/buqxlAU5zuqaoLlL7spvBrlMkWNWPSF94LrQJlj1TCDUP19pUY216Gox1AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQU07U42GO+XxjJMqn64IZ7EHpngVgwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzgzMzJl
MzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNjM1Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATAU7AwDQYJKoZIhvcNAQELBQADggEBAKc49xukzcv8u2VZNQ9vgSCbQvh8H9za
cusGfMBQ9Guf8n6eozFhjI/wAd5fALm8KSLoQ3UjxO2809vWtqqerjr+exZJHnrE
UWmr+h54cVWALPpj9RWgTqK1QRKyyDAeIOUn3TyXpWngCHm9sLyn2U++k3shJKtR
vNT43ORD3uX/0AqnOFWqWUK1LnX2VWIwwATR9XPxahT3K86A2uDE7GEVFKSwHgf6
f0xJujJcQG843DZGz+gusXN4QxnIASrxezpxloiuegcodQAlMOU3+vygupnEuZJm
HaSuJsCWFAqAWiP4rulqGMxhSzYuUtJcVw+r4QHatwQyBeIKaIeNXfE=
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:37 2026 by rpki-client