
$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e203137373039.roa
File: 35392e3130322e3132382e302f31372d3234203d3e203137373039.roa (raw, json)
Hash identifier: cNaeE82PpDWQd2/pTuIqOXSZXIqhlBEajwC/XMqiYkQ=
Subject key identifier: 40:32:63:69:A5:79:32:3A:77:80:44:30:75:7E:71:0C:3A:AC:1E:74
Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial: 2E64F6718E88B0D122EEA0ED73CB682C1E49E786
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e203137373039.roa
Signing time: Mon 11 May 2026 17:37:05 +0000
ROA not before: Mon 11 May 2026 17:32:05 +0000
ROA not after: Mon 10 May 2027 17:37:05 +0000
asID: 17709
IP address blocks: 59.102.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:45:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:64:f6:71:8e:88:b0:d1:22:ee:a0:ed:73:cb:68:2c:1e:49:e7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
Validity
Not Before: May 11 17:32:05 2026 GMT
Not After : May 10 17:37:05 2027 GMT
Subject: CN=40326369A579323A77804430757E710C3AAC1E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:57:46:75:54:f6:48:09:f2:08:6e:7b:9c:a2:
12:fe:b2:69:f3:9e:03:c7:bd:c8:c9:9c:ef:7f:e5:
34:96:a3:45:7f:b2:4e:1f:11:82:f5:ab:bd:2e:65:
4e:97:e2:be:5d:2a:ce:7f:e9:9b:c9:7c:bf:31:97:
19:35:95:89:f3:9c:cf:60:3a:2d:82:5b:b3:ac:68:
36:5b:94:cc:67:63:12:96:86:f1:92:3f:a4:6a:35:
de:74:43:80:26:d5:72:62:1e:d3:23:7d:95:6d:29:
24:26:df:74:37:90:eb:21:f6:15:18:e4:b0:b7:19:
5b:b9:23:10:68:44:d2:09:fd:09:d7:c6:1b:bb:f7:
81:75:75:3c:7a:90:8c:49:80:2b:58:d6:bd:53:37:
69:00:73:94:b5:69:85:49:04:f4:9c:9f:03:1f:3d:
3e:4d:3d:fc:5b:a8:d5:2f:1c:e1:5f:0a:57:8b:f2:
8f:33:4c:c5:48:13:14:5a:28:1e:f1:24:57:48:64:
eb:a0:0c:4d:77:02:80:f0:f1:57:02:eb:1e:da:d3:
ff:79:94:9c:3f:b3:6e:fa:4b:3c:a3:02:10:44:05:
4d:15:f0:56:d2:9e:84:ee:bb:c9:55:1f:90:52:71:
3c:b2:b8:5e:6d:0e:55:58:b4:b1:6b:c4:9c:65:ec:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:32:63:69:A5:79:32:3A:77:80:44:30:75:7E:71:0C:3A:AC:1E:74
X509v3 Authority Key Identifier:
keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e203137373039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.102.128.0/17
Signature Algorithm: sha256WithRSAEncryption
53:ad:68:f1:84:1b:a3:39:7d:84:92:a7:e2:e9:9d:6d:45:17:
26:ab:5c:cf:bc:a1:6b:6c:2e:db:28:0d:18:33:87:f2:97:c6:
a7:61:ff:29:6f:34:b9:1f:b7:fd:02:97:81:59:1f:69:61:da:
97:26:34:9c:c3:a5:08:62:68:89:fc:58:75:91:33:17:cf:06:
6f:47:e5:14:5e:fa:1f:50:48:3d:ab:45:51:59:1c:69:89:9c:
ab:7d:46:67:46:77:07:b9:20:84:87:be:76:14:39:9c:4f:d1:
10:ef:b0:ae:0a:93:9e:8d:e9:56:b7:79:94:34:d9:09:f4:07:
41:7b:ef:14:b9:82:8b:a8:d2:67:ab:30:16:10:0a:2a:d2:4a:
38:41:c7:4f:8c:aa:9b:97:f1:7b:d5:87:b2:ee:6a:43:98:13:
ca:f7:a6:2e:92:66:45:ad:02:b8:c2:3b:c8:61:70:fa:0b:ec:
dd:c5:00:e7:37:9d:14:a8:f6:2a:61:85:47:9e:48:20:8b:a2:
a6:b6:41:b5:1c:42:97:92:fe:00:30:e7:08:0e:24:4a:48:e4:
0d:ef:e1:5c:44:dd:da:c8:de:b0:77:f0:8e:0a:1f:87:a0:b4:
fe:4f:7a:43:fd:05:03:58:b0:6e:9b:ee:4b:ba:3d:3f:ac:7c:
db:12:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:46 2026 by rpki-client