
$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135392e302f32342d3234203d3e2034373830.roa
File: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (raw, json)
Hash identifier: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=
Subject key identifier: B1:BF:E0:21:3A:D0:C5:79:C3:A9:D5:7F:87:62:0B:30:9D:52:B4:FB
Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial: 239B8FBE976929EFA5CCA197F3E8B003BC1203A0
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135392e302f32342d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 17:07:56 +0000
ROA not before: Mon 11 May 2026 17:02:56 +0000
ROA not after: Mon 10 May 2027 17:07:56 +0000
asID: 4780
IP address blocks: 61.58.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9b:8f:be:97:69:29:ef:a5:cc:a1:97:f3:e8:b0:03:bc:12:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Validity
Not Before: May 11 17:02:56 2026 GMT
Not After : May 10 17:07:56 2027 GMT
Subject: CN=B1BFE0213AD0C579C3A9D57F87620B309D52B4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:19:89:9c:d8:55:63:29:59:87:95:39:a6:
25:5a:4b:60:e7:fd:99:f9:38:9b:03:39:cb:ae:e8:
f7:b1:08:cf:06:d4:f6:7e:ab:aa:a1:d9:29:35:fe:
50:42:94:df:c8:bd:a5:1d:46:0e:01:6d:9d:73:e5:
fe:a4:44:3b:ad:be:b9:35:79:b9:25:e7:36:0e:18:
ed:4a:e5:73:4c:c3:86:30:44:d7:21:09:72:e2:0d:
ae:ab:28:3d:de:92:6d:a9:7f:56:53:33:01:eb:a3:
f9:f4:d3:8e:0e:60:ca:1b:ed:f1:6a:25:e3:85:20:
8c:9f:bc:77:1d:eb:10:45:09:79:09:56:6a:d4:45:
2c:d5:07:7a:33:01:a6:41:c6:ac:54:f8:54:e4:b9:
59:dd:1c:b8:d6:64:6d:56:96:79:38:a6:60:f7:cc:
64:d4:1a:49:3c:b9:90:dd:3a:30:49:c4:18:24:cb:
14:a3:84:f2:f5:6e:1e:87:34:c7:8a:95:7b:8c:47:
bc:5b:6b:f3:c7:fe:07:85:96:56:76:7f:e5:da:77:
80:b6:c9:dd:be:c9:8d:9f:90:07:37:9b:c5:f5:26:
2e:d3:04:bb:ff:d3:e4:41:5e:a2:7f:25:fa:91:5d:
d3:64:67:37:e5:f3:6d:99:93:b1:27:24:39:94:a2:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:E0:21:3A:D0:C5:79:C3:A9:D5:7F:87:62:0B:30:9D:52:B4:FB
X509v3 Authority Key Identifier:
keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135392e302f32342d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:aa:de:b8:cd:c2:76:b8:3c:f9:38:e8:9c:0d:d6:18:1e:02:
9e:77:38:65:a7:ff:6e:d5:74:dc:78:cd:41:e1:31:ea:81:b8:
b2:3d:3e:cc:07:4f:07:a0:7d:c8:97:c9:38:bf:88:d3:ce:da:
fa:17:7e:6a:e2:be:f7:0b:32:81:6c:bf:08:f5:f3:9e:18:92:
c4:68:cf:7e:0c:54:b7:10:bd:9e:a8:80:cc:4d:92:00:62:d5:
84:6b:d0:35:c2:e3:1f:b8:2e:c2:6c:fa:18:af:40:18:c3:fa:
d9:00:eb:bc:e2:37:b0:61:5a:49:d6:85:78:c7:ab:fb:73:ef:
fd:31:d1:ba:27:9c:ea:b6:22:66:c9:4c:64:19:79:41:f4:1a:
c9:eb:a9:7d:6c:fe:30:29:4f:90:46:e5:ed:d4:5e:2d:12:28:
f8:16:90:71:06:e8:06:b6:0a:14:1c:32:8c:bd:a8:1b:25:be:
42:39:28:5d:aa:53:93:c4:da:42:c1:10:ba:02:06:08:aa:ff:
8c:fc:a5:6b:e0:58:97:6a:72:60:db:03:13:b0:7e:bc:91:fa:
2f:3a:f8:5b:c9:4e:18:53:c0:ed:a9:16:a1:91:40:17:eb:90:
58:52:83:c0:ff:ce:2e:ea:b1:17:4e:f1:6a:f9:b8:18:c1:5f:
36:bf:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:56 2026 by rpki-client