
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139362e302f32342d3234203d3e2031363539.roa
File: 3139322e38332e3139362e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier: 0mXNsUYFKHtMy5Vtt4TK+PQJfk4MVNscOp9eigg/7lg=
Subject key identifier: FD:89:15:F2:88:F7:05:24:6C:5C:DC:51:66:E0:1B:39:05:CD:6F:39
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 57BB4EFCD13B69820A413C1281C9F19FE1C78D
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139362e302f32342d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 20:59:17 +0000
ROA not before: Mon 11 May 2026 20:54:17 +0000
ROA not after: Mon 10 May 2027 20:59:17 +0000
asID: 1659
IP address blocks: 192.83.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bb:4e:fc:d1:3b:69:82:0a:41:3c:12:81:c9:f1:9f:e1:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: May 11 20:54:17 2026 GMT
Not After : May 10 20:59:17 2027 GMT
Subject: CN=FD8915F288F705246C5CDC5166E01B3905CD6F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:cc:de:b0:93:02:91:e9:9b:46:36:6c:db:
b4:cc:c4:6f:c7:44:d8:f4:44:31:66:c1:1f:3b:01:
ba:7f:8c:76:e3:4e:6d:48:55:e2:9b:2d:b3:2e:72:
a4:78:30:e2:67:46:7b:5c:d4:03:0f:c6:b4:20:02:
90:70:22:ce:4b:31:dd:8b:ce:a5:88:84:1a:75:b4:
88:b7:6e:a3:e9:2e:79:48:7f:49:9b:2e:fe:d6:9a:
32:e3:6d:fb:25:bf:cf:8c:71:90:ad:1a:cd:df:25:
71:cf:7b:15:b6:23:03:4d:64:63:7c:30:de:c2:cf:
ef:c0:34:32:f6:51:17:f4:89:dd:10:ae:15:c0:89:
a1:19:a2:b6:3f:ed:68:9d:5d:a4:03:48:df:84:0a:
01:a9:f3:9d:21:4b:8d:c5:23:b8:f0:04:8c:66:c0:
64:24:a2:5d:b2:b5:0c:a0:a9:3b:6a:8b:2d:98:4a:
f0:79:40:e0:fc:4d:ed:6f:c3:9f:b2:f7:4d:db:85:
47:e9:72:a2:cc:6d:64:6c:a9:ea:fe:f8:e9:ee:69:
1f:56:31:33:4f:a4:18:95:4e:01:96:ec:9e:39:4f:
2a:71:83:de:2e:f3:17:fd:41:02:c7:17:9a:11:58:
39:45:ca:c6:7b:11:da:39:dd:2e:24:f3:43:ff:e0:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:15:F2:88:F7:05:24:6C:5C:DC:51:66:E0:1B:39:05:CD:6F:39
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3139362e302f32342d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.83.196.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c7:72:af:a3:0f:7b:f0:bb:06:2d:a9:ee:ba:a5:77:31:85:
4b:4d:c1:67:21:94:77:f4:69:43:46:cf:cd:c7:d2:0e:d1:6c:
9c:18:72:f9:99:0c:96:52:d5:a7:61:73:6a:26:11:63:0c:7a:
44:d7:8c:4f:08:d0:8d:b6:f5:92:7a:34:69:93:bd:90:5b:7b:
18:a6:e0:7b:b5:81:2c:da:de:c4:9a:93:5f:d4:28:28:74:f1:
83:81:e8:7e:cf:01:cd:23:c9:72:68:02:dd:e5:aa:f5:8f:f5:
e3:b4:62:98:e9:b7:d4:30:36:bd:87:ef:ad:41:48:e7:35:87:
99:0a:a7:9e:49:e7:11:0f:7a:46:4f:8a:a4:53:e3:95:17:84:
50:b4:88:98:33:73:ce:fc:16:64:60:c3:53:59:3e:cf:9e:f2:
30:3b:91:2a:d3:6d:d5:2a:dd:50:9c:57:b1:b5:b0:5b:33:4c:
33:d5:af:11:0d:58:ef:13:32:2f:3b:ee:ee:87:f3:60:bb:7e:
f2:65:f2:b0:7e:c2:84:e9:ac:1b:d3:78:1a:87:45:85:7d:fd:
48:f3:21:ca:19:f4:59:81:cf:78:bc:d5:ee:b6:d8:41:9f:bf:
03:2a:43:e7:37:ed:e8:ac:49:2a:1c:3a:ff:c4:6e:57:f4:3d:
63:45:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:22 2026 by rpki-client