
$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20313438393936.roa
File: 3230322e3136302e37322e302f32312d3234203d3e20313438393936.roa (raw, json)
Hash identifier: KSDBUUgXwoTzVoKs2VPWHvlTEbWUgaBWZ7eagtipaQM=
Subject key identifier: DF:DB:FC:8B:5B:99:9B:5C:1D:2A:D5:EE:D3:01:66:52:57:C6:04:8D
Certificate issuer: /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial: 3B1854C76667100E181C42867065B520DE657F75
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20313438393936.roa
Signing time: Mon 11 May 2026 17:57:27 +0000
ROA not before: Mon 11 May 2026 17:52:27 +0000
ROA not after: Mon 10 May 2027 17:57:27 +0000
asID: 148996
IP address blocks: 202.160.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:18:54:c7:66:67:10:0e:18:1c:42:86:70:65:b5:20:de:65:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
Validity
Not Before: May 11 17:52:27 2026 GMT
Not After : May 10 17:57:27 2027 GMT
Subject: CN=DFDBFC8B5B999B5C1D2AD5EED301665257C6048D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:dd:74:78:d5:c8:77:16:6e:0f:92:84:5a:
8f:af:27:54:69:f9:d0:de:3e:e3:e7:d6:63:34:c6:
da:c2:26:37:ab:65:ef:22:f5:f2:47:f8:8d:10:66:
c0:3c:57:88:8f:7c:d4:2e:09:a2:54:67:1d:8b:7a:
60:0a:65:0f:44:ae:ae:1f:c7:66:32:c3:6e:17:80:
49:dc:94:51:9b:04:4b:48:08:fb:36:25:56:39:ee:
60:47:74:06:ce:46:d1:f2:ff:77:dc:77:75:c5:1c:
b9:51:9a:28:76:2f:d5:bd:f0:ea:91:10:4d:bc:db:
47:5c:46:84:80:eb:0d:02:cb:3f:ca:12:fb:db:a5:
5f:eb:84:8a:5f:64:da:a7:26:11:f0:53:eb:1e:a7:
09:08:d1:7d:51:eb:c2:ae:20:ac:72:5c:58:d0:c3:
16:74:a3:5c:af:15:05:f7:6f:c1:a4:37:35:a3:9e:
f3:66:34:47:1d:a9:70:90:8f:d5:a3:4f:58:59:57:
b5:da:05:6c:f6:da:df:06:c7:14:6e:81:5b:b5:96:
37:26:24:47:04:97:14:04:5a:d9:34:97:ea:47:95:
74:e0:06:f4:6b:94:26:e7:a2:50:ca:f1:db:0b:f3:
77:e7:2c:40:43:5a:48:eb:9b:fd:3a:ee:3e:a6:32:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:FC:8B:5B:99:9B:5C:1D:2A:D5:EE:D3:01:66:52:57:C6:04:8D
X509v3 Authority Key Identifier:
keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.160.72.0/21
Signature Algorithm: sha256WithRSAEncryption
03:12:0f:f6:03:22:87:f8:a8:76:0a:61:f3:62:e5:3a:10:19:
ca:84:a7:a5:fa:f6:ad:47:5e:b0:ef:b5:3f:12:12:e3:b3:4a:
16:34:3f:9a:f0:0a:54:a5:2e:9e:f6:c4:fb:79:81:30:af:1c:
ef:3f:a5:f2:a0:71:bb:04:51:5b:03:ad:a0:82:18:f5:c5:3b:
6d:02:6d:31:69:3b:71:28:e6:ae:6b:bd:9a:93:8b:de:56:8e:
60:91:32:01:71:b2:38:7e:0e:15:ce:84:ed:07:8a:2a:86:4b:
12:98:d3:c9:9c:88:00:c4:48:65:be:9c:6b:eb:0c:68:24:5b:
43:a1:df:e2:af:34:8d:7c:c5:54:a1:b3:41:d3:23:22:7a:a8:
c5:6d:c4:f8:32:b1:e8:dd:27:f9:0e:98:7f:4d:09:d9:96:c0:
a8:d0:2e:f1:86:5b:5f:1f:cb:97:6d:35:c9:da:50:51:fd:f5:
51:74:aa:ea:79:1c:b3:6c:da:a6:4b:73:64:9a:50:e2:a2:cf:
7b:b9:f2:0f:42:ff:64:48:89:16:99:90:f7:93:71:e6:2b:07:
fe:47:88:03:04:c6:9e:09:a2:51:55:d6:59:58:5d:32:3f:28:
e7:27:24:77:67:32:72:2a:e9:fb:15:a8:fe:63:84:3b:dc:a3:
f7:41:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:51 2026 by rpki-client