
$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa
File: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (raw, json)
Hash identifier: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=
Subject key identifier: 67:2F:48:9B:FF:C3:9A:3D:F8:01:DD:A7:92:06:43:B2:05:5F:9D:D2
Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial: 5C80A0D3A1A4755AE5DC2FEE5D5DCCDEDA9E0CD4
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa
Signing time: Mon 11 May 2026 16:42:14 +0000
ROA not before: Mon 11 May 2026 16:37:14 +0000
ROA not after: Mon 10 May 2027 16:42:14 +0000
asID: 18049
IP address blocks: 61.60.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 02:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:80:a0:d3:a1:a4:75:5a:e5:dc:2f:ee:5d:5d:cc:de:da:9e:0c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Validity
Not Before: May 11 16:37:14 2026 GMT
Not After : May 10 16:42:14 2027 GMT
Subject: CN=672F489BFFC39A3DF801DDA7920643B2055F9DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:2a:0e:ec:8d:0a:32:ee:99:cf:55:ef:6b:
5d:21:42:af:dc:31:88:9b:12:84:53:ec:99:90:ee:
4b:f0:19:6d:ef:9a:cf:03:17:ca:40:ae:f6:3a:fb:
4d:6c:b6:6a:b6:9a:76:6f:6e:24:84:28:61:1f:5d:
14:18:df:b2:94:78:b8:21:a1:d0:b5:b0:85:a7:26:
11:2d:50:ef:43:45:4a:75:ee:c1:fb:e8:b9:3c:73:
08:9b:22:dc:98:88:cf:33:69:d3:7f:14:b9:08:8d:
47:39:f2:ce:9d:e5:14:14:24:61:07:2b:05:d0:20:
56:44:d8:b1:a5:68:b1:3d:02:03:9f:15:2f:dc:64:
51:1a:6d:6d:5b:3d:aa:75:da:40:ce:55:97:ca:36:
4b:d5:3f:32:22:16:b8:45:ac:f5:4b:ca:04:25:81:
1f:dd:8c:c4:1e:3b:dc:1e:46:a8:e4:63:92:5d:5e:
25:7d:c5:a0:f9:ec:02:ec:ed:04:43:ec:0c:11:38:
b2:df:8e:ef:63:86:48:ff:e4:f0:1d:3b:63:76:48:
a0:d5:6a:e9:69:91:7f:76:58:d6:f7:81:00:97:c1:
8a:65:f1:b9:18:37:23:28:ec:37:cf:0c:bc:ef:88:
56:fb:07:c8:d4:7f:13:ba:a6:8b:f7:85:87:6e:d7:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:48:9B:FF:C3:9A:3D:F8:01:DD:A7:92:06:43:B2:05:5F:9D:D2
X509v3 Authority Key Identifier:
keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.224.0/20
Signature Algorithm: sha256WithRSAEncryption
73:63:5e:cc:e0:be:13:ff:3c:53:34:1b:37:f3:90:cf:fc:53:
33:d4:bf:31:9a:76:e1:58:d9:8b:7d:a1:ea:e4:3f:22:cf:5b:
1c:bb:e2:3c:47:f7:cd:1d:84:76:60:91:53:bf:f6:28:da:2b:
76:5b:82:7a:ab:e0:48:d9:e3:d5:9b:b7:1a:d3:f3:01:e2:b2:
a6:a6:76:90:47:0d:8b:dc:e5:fe:56:ff:b7:3c:08:b7:27:88:
43:8c:35:53:a1:84:9c:e8:d2:e4:c9:36:6a:f7:52:7c:98:2e:
3c:a0:70:04:ff:6c:19:ab:8d:1d:c4:8a:f9:4d:2a:3e:84:ba:
a8:6c:15:57:6c:78:2b:39:ec:ed:92:51:f1:6b:0a:a4:b3:a1:
dc:d4:ca:86:fc:32:ea:43:24:cf:bb:8d:b3:5a:d7:75:6e:00:
3e:37:e4:fb:33:48:6c:cd:b1:43:ec:94:84:b0:78:5f:fb:30:
65:c5:4c:9f:e0:1f:4b:df:f8:2b:37:98:b0:1c:bb:b4:aa:ab:
31:7d:55:23:bf:a6:88:a1:6c:0b:62:dd:f1:f6:7b:79:49:2e:
db:7a:4d:e7:98:03:ea:34:76:39:ff:8e:f9:ea:5d:4d:7a:51:
97:58:08:ab:7f:92:bf:2f:f8:91:70:58:1d:d4:ea:b6:57:82:
5d:7d:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:31 2026 by rpki-client