
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139322e302f32322d3232203d3e2031363539.roa
File: 3139322e38332e3139322e302f32322d3232203d3e2031363539.roa (raw, json)
Hash identifier: 4yCes+Uj93qX/EQNqSC6/9XLhKoEXGordSu4r9/D2Z0=
Subject key identifier: E5:EB:4F:8F:99:49:E1:83:B2:9C:C2:A1:4C:FF:87:59:EE:F5:41:0A
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 4AE3634143AD232D478C925C81CE1304BAE28C0E
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139322e302f32322d3232203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:39 +0000
ROA not before: Mon 11 May 2026 20:54:39 +0000
ROA not after: Mon 10 May 2027 20:59:39 +0000
asID: 1659
IP address blocks: 192.83.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e3:63:41:43:ad:23:2d:47:8c:92:5c:81:ce:13:04:ba:e2:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:39 2026 GMT
Not After : May 10 20:59:39 2027 GMT
Subject: CN=E5EB4F8F9949E183B29CC2A14CFF8759EEF5410A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:23:32:96:e7:cd:8e:eb:76:7b:13:20:2f:
a0:00:5e:f4:1d:98:d4:1a:29:7c:e6:9d:c6:64:d3:
bd:ad:17:40:1e:a8:02:01:3f:45:c9:fa:d1:7c:8c:
5e:6d:69:d6:3b:34:70:29:d9:79:34:72:b7:3a:4c:
a3:72:1d:d8:f4:19:b7:53:1f:43:ca:2e:6a:4d:30:
61:76:e3:27:92:49:7d:26:e0:42:99:fa:ed:e9:5d:
d6:58:77:55:d6:84:e6:14:23:f2:0a:e8:82:dd:03:
da:1f:7c:2c:79:99:6c:d6:39:9d:a2:4f:4c:0f:5e:
4e:10:d1:58:d4:05:32:43:80:de:17:c2:04:1d:34:
5b:01:5e:d6:89:a3:9c:02:09:cf:ed:70:cb:21:1a:
21:e3:58:5e:40:d6:68:88:cc:0e:33:37:91:08:88:
cd:1d:88:1c:88:de:bd:f0:de:ef:22:2f:df:5a:ef:
35:f7:d0:88:a2:69:9b:9e:e3:bd:ba:3c:a3:7d:32:
4a:e6:7b:c7:80:3a:ec:ae:fe:56:7e:d3:98:7a:8f:
85:6c:17:6d:71:b4:02:48:fc:1c:f7:7e:1a:3f:49:
27:0a:ed:c2:ee:5c:61:c8:1e:13:de:21:51:09:6c:
a9:0a:f6:9b:6c:de:ed:36:f9:78:4d:f5:f0:29:a7:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:4F:8F:99:49:E1:83:B2:9C:C2:A1:4C:FF:87:59:EE:F5:41:0A
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139322e302f32322d3232203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
87:66:fe:4a:d2:f0:a0:f6:68:55:9c:2d:19:d1:c0:fa:ac:f4:
1f:e1:12:bc:8e:17:21:a1:6e:a3:04:ca:a0:30:d8:8f:5a:c4:
04:c4:18:f3:72:2b:9d:bd:64:0b:c5:36:17:36:61:38:45:c3:
e6:b1:93:d3:65:5d:e8:d4:21:9e:63:05:67:34:ee:92:b4:73:
30:0a:9c:a0:14:7a:00:92:1d:b7:e3:a4:99:31:34:1e:7b:1e:
6d:36:fe:ce:79:3b:3a:8a:5a:51:01:04:47:31:ee:41:43:cc:
c6:af:55:f0:12:4e:ce:72:6a:8d:91:54:62:f4:f3:fb:f5:3b:
e2:9e:63:6c:5f:de:57:ff:37:29:88:41:a1:ff:26:84:1a:29:
50:b3:4d:c5:a2:b7:a7:44:cd:e9:14:8c:25:a6:71:5a:7a:70:
4e:e4:3c:2d:9f:32:3c:71:3f:df:bb:00:89:5f:b7:91:65:f8:
c8:5f:3d:00:56:d4:6c:83:47:94:ce:24:1a:4f:f6:c1:4d:51:
4b:fe:72:57:de:8b:d4:40:ba:a1:e0:d1:09:0c:08:0a:8c:53:
a0:d5:f7:ca:4b:97:a8:6f:af:9b:7c:a0:b0:49:0d:98:cb:d6:
6f:06:57:ea:fe:dc:95:a5:4b:14:1b:2c:f6:ff:e3:bb:54:62:
15:7f:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:40 2026 by rpki-client