
$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa
File: 3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa (raw, json)
Hash identifier: N130VCEwGnahMmdQnEoFsloWsrRvCZQOZhmdArYbsZw=
Subject key identifier: 9C:6B:01:6F:27:F2:77:96:7B:F1:07:DB:43:B0:49:BB:EF:D7:98:B3
Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Certificate serial: 344E009C9A139509584C5B28E7F820405D4FE514
Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa
Signing time: Mon 11 May 2026 17:58:10 +0000
ROA not before: Mon 11 May 2026 17:53:10 +0000
ROA not after: Mon 10 May 2027 17:58:10 +0000
asID: 142046
IP address blocks: 151.158.168.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:22:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4e:00:9c:9a:13:95:09:58:4c:5b:28:e7:f8:20:40:5d:4f:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631
Validity
Not Before: May 11 17:53:10 2026 GMT
Not After : May 10 17:58:10 2027 GMT
Subject: CN=9C6B016F27F277967BF107DB43B049BBEFD798B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:73:b7:1a:02:0b:6e:c4:ee:1e:fe:e7:23:
eb:40:91:45:9c:01:55:52:26:01:6d:36:6c:de:a0:
af:f0:2d:12:ab:c1:b5:5c:24:dc:57:7c:6b:89:f8:
3f:d0:89:e2:ad:46:78:8b:b1:39:1b:96:de:ce:c0:
fb:b3:73:2d:a3:bb:71:4b:c2:b1:3e:0a:7b:4e:ee:
0d:f3:c0:87:8c:fe:57:df:d3:67:ac:e4:be:55:7a:
9a:aa:3e:4a:25:55:39:b0:66:e6:f1:2f:5f:5a:db:
8a:2c:14:91:33:78:ba:a0:f8:eb:92:8f:69:34:d7:
54:bc:4e:de:36:ae:13:fa:69:32:25:7f:a6:59:dc:
24:75:a3:bd:1f:89:a8:bc:29:03:6f:71:13:38:70:
51:9c:57:3a:fa:f8:14:df:53:e1:22:f6:33:cd:2d:
54:ce:35:db:92:08:0f:85:51:0f:9a:cc:1d:1c:b5:
b8:32:b7:32:a2:0a:38:d4:93:61:37:6c:29:ae:9d:
40:88:eb:bb:08:6e:e2:4f:cc:23:93:98:0e:16:7e:
1b:98:8a:94:7e:5a:e6:09:4b:9e:c2:ee:14:3f:16:
d0:09:9f:85:ca:93:1a:aa:03:aa:1f:72:45:ba:56:
b2:7d:3f:9c:f7:e3:ec:59:90:8c:f4:f9:2d:ac:9f:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6B:01:6F:27:F2:77:96:7B:F1:07:DB:43:B0:49:BB:EF:D7:98:B3
X509v3 Authority Key Identifier:
keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313432303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.168.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:d2:50:fc:9c:3f:53:42:15:38:83:fc:a0:c5:c3:f3:e6:e8:
f5:08:27:bd:43:6e:e9:3b:df:d0:6a:ac:dc:5a:d9:3b:94:ad:
c9:bd:86:ab:f3:0b:bb:24:5d:5b:be:59:de:84:85:fe:ca:0e:
b2:10:47:ca:b1:7d:08:3a:6c:23:07:9b:a2:7b:a4:fe:89:d9:
b8:02:b1:10:34:9f:1a:67:4a:9a:bb:24:8b:b0:ee:97:26:90:
63:aa:a1:23:c5:a5:46:92:32:dc:87:d2:70:01:14:3e:50:1b:
40:c0:fe:96:90:11:6f:a4:32:1b:07:53:6f:f3:90:cf:c8:6c:
00:b9:34:19:dd:6b:38:be:74:bd:45:0a:25:3e:eb:4b:ef:d1:
79:63:b7:c6:f9:4b:2d:c6:44:e9:c4:18:e3:f0:ff:f4:74:fb:
66:7c:c9:ee:3c:0f:ba:6b:4c:62:65:41:71:bc:94:3f:64:14:
c4:72:f4:e4:d6:a3:a9:55:40:fc:e2:09:fb:ff:bc:f0:ce:c1:
fa:d2:fb:dc:9b:46:30:c4:a7:12:63:3d:fe:3d:1a:85:fa:92:
22:36:9c:16:5e:70:04:f0:a3:e0:79:68:33:5a:fc:2a:c5:aa:
0c:62:55:a7:f5:c4:6c:15:95:14:e0:3a:96:ae:97:d1:08:b9:
9e:67:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:32 2026 by rpki-client