
$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa
File: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (raw, json)
Hash identifier: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=
Subject key identifier: B1:CE:E7:06:EF:0D:43:57:B4:E7:B0:11:2B:D1:13:FC:DC:22:0E:2E
Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial: 7365D361BF47BE2A622471A242761B2EEC373EEB
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 17:57:00 +0000
ROA not before: Mon 11 May 2026 17:52:00 +0000
ROA not after: Mon 10 May 2027 17:57:00 +0000
asID: 4780
IP address blocks: 116.118.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:65:d3:61:bf:47:be:2a:62:24:71:a2:42:76:1b:2e:ec:37:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Validity
Not Before: May 11 17:52:00 2026 GMT
Not After : May 10 17:57:00 2027 GMT
Subject: CN=B1CEE706EF0D4357B4E7B0112BD113FCDC220E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:be:ab:a3:58:5a:8e:20:36:f6:c7:49:67:
51:71:06:42:dd:77:b7:4f:14:5a:ca:73:1f:2f:2c:
d8:8e:1f:3f:ab:22:c6:ea:0c:2c:23:9f:77:d4:b6:
d1:93:fe:2c:91:12:ca:b0:63:07:98:66:fb:b9:5b:
2b:27:1c:56:45:85:bf:d5:02:62:86:f9:a8:3e:34:
62:fe:f4:1b:92:ad:0c:51:9e:7c:0f:9f:ba:ff:fb:
2c:85:02:0d:48:90:b5:6d:25:9e:06:42:d2:9a:08:
78:91:73:da:46:94:ba:fa:5b:40:e0:de:72:de:54:
b2:02:0f:73:d3:ac:2a:3b:a8:7b:eb:56:89:10:ec:
e9:3c:15:76:ef:19:bf:40:e7:28:01:81:74:1e:2f:
eb:c3:26:08:2b:d6:ff:6c:09:53:47:e4:a4:03:2f:
23:eb:ea:bb:03:dd:59:d3:7b:e4:55:56:4c:c1:43:
a1:0f:30:a3:3e:43:11:e5:4f:5d:94:cb:b2:c5:ee:
58:f8:7a:8b:d3:41:42:3d:0d:cf:79:5b:57:ed:39:
fc:ad:f7:87:c0:f6:6b:8b:7c:3a:5f:08:fe:8f:73:
82:af:cb:b8:7d:e2:3d:52:b5:d2:5c:46:6e:3f:48:
f9:ef:c9:ad:f5:19:33:71:79:78:78:a2:ba:37:32:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:E7:06:EF:0D:43:57:B4:E7:B0:11:2B:D1:13:FC:DC:22:0E:2E
X509v3 Authority Key Identifier:
keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.118.128.0/18
Signature Algorithm: sha256WithRSAEncryption
84:39:9b:1b:ed:02:8c:4a:8b:ae:58:c0:8f:35:39:d2:c2:df:
4e:5e:04:13:ea:e4:31:bb:ac:d1:e0:db:53:e6:fa:3f:23:38:
a4:d8:fe:03:18:24:42:99:04:ae:f5:29:cd:79:60:d3:df:7b:
8f:8a:58:15:db:75:6c:e7:07:01:8e:df:1c:2f:1d:15:e3:09:
9e:c4:ab:c8:cb:23:02:c7:63:76:8d:0a:60:10:20:5c:ec:f2:
01:7b:6d:18:fa:d2:7f:2d:e8:a4:85:60:57:f7:02:dc:39:4d:
ad:b3:97:2c:30:13:84:ae:49:95:e2:31:32:bc:e7:24:20:b5:
12:10:a3:c0:18:a4:34:f4:c1:6b:8d:7f:72:17:bb:6d:5e:cf:
52:8f:6a:c4:f4:b7:b0:c1:21:e3:52:ba:76:1f:82:d2:7b:72:
43:90:95:8e:86:4b:1b:2f:c7:7e:5d:2f:5b:cd:84:e7:9a:b0:
45:d2:e6:ed:b1:57:72:6a:d1:01:3d:95:a7:96:df:aa:f1:3f:
95:2b:d3:3c:00:4c:e2:ae:1b:3e:56:68:d9:c2:c4:e4:26:ea:
de:5b:00:72:10:40:07:9f:4b:de:e6:30:21:db:2d:fa:c2:c9:
27:9f:b0:7a:10:06:e8:ed:03:c1:ff:5d:fd:39:3c:7a:77:ea:
15:63:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:58 2026 by rpki-client