
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363231.roa
File: 3130312e3130322e3130332e302f32342d3234203d3e20313331363231.roa (raw, json)
Hash identifier: sGFH6SDZzBonTXU6Sw0VKt1fc1JTIsAbjLzTNhjIw/U=
Subject key identifier: AE:79:04:CE:70:D6:79:1B:FF:01:F1:45:45:3D:66:58:05:0C:DD:05
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 41BD88D9BB33F8011C08B1825CAA1663AABD733D
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363231.roa
Signing time: Mon 11 May 2026 17:20:05 +0000
ROA not before: Mon 11 May 2026 17:15:05 +0000
ROA not after: Mon 10 May 2027 17:20:05 +0000
asID: 131621
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:bd:88:d9:bb:33:f8:01:1c:08:b1:82:5c:aa:16:63:aa:bd:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:15:05 2026 GMT
Not After : May 10 17:20:05 2027 GMT
Subject: CN=AE7904CE70D6791BFF01F145453D6658050CDD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:25:fd:75:5c:f1:84:86:71:d6:27:cc:7c:
df:04:b8:4f:82:ba:33:2c:ab:2a:8d:83:27:c0:2c:
97:49:8a:77:d9:eb:91:58:8e:9b:2c:29:c1:a8:87:
ad:f6:48:0d:45:05:90:64:48:5d:dc:4b:82:6b:e0:
6e:03:7e:a3:78:39:c3:53:fd:b4:78:5c:5b:40:31:
47:d5:47:06:68:bf:f8:91:2c:a4:42:3e:16:0a:5b:
84:9c:34:38:d5:40:77:91:29:a6:7b:68:c2:30:b4:
81:47:ff:6a:dc:4c:e0:17:21:40:d3:5f:a2:8f:2d:
7f:5c:7e:f7:84:a0:fa:61:d6:0e:0c:2b:0b:de:56:
a5:29:0c:f2:c7:73:d9:52:72:e3:27:2d:fe:b5:ab:
06:6c:82:c8:63:21:50:ae:35:7b:8d:ac:fb:22:df:
36:7f:8f:e6:83:8e:53:1a:98:5d:7b:0b:7d:2c:f6:
5c:4c:f7:ab:83:f7:b5:0f:1d:0b:c3:fd:57:9a:93:
05:ad:00:77:78:4b:69:87:b5:da:fa:e3:be:1a:5d:
87:ae:30:1b:5a:5c:a6:74:f3:3e:89:7e:6d:12:a9:
5d:4c:2f:cd:d5:a5:d3:e0:7c:75:ff:dd:55:56:a5:
83:b3:14:75:15:fd:4e:69:e0:3a:11:1c:60:82:2e:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:79:04:CE:70:D6:79:1B:FF:01:F1:45:45:3D:66:58:05:0C:DD:05
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a9:34:93:f7:2a:5c:42:83:8b:49:a4:92:4a:9c:7c:1b:a2:
46:60:8d:bf:40:55:da:8e:c6:1e:16:ff:45:84:8e:8b:37:52:
8d:f2:71:1e:60:95:a3:72:72:68:4a:77:a3:52:df:8c:a4:75:
40:7f:86:52:3b:2d:8d:2f:e0:2f:36:64:e9:b6:a8:8a:74:10:
16:e9:3d:d8:86:58:9a:0b:c6:16:3a:d2:ed:d4:1a:d0:1f:b7:
8a:48:bb:b0:90:42:65:b9:05:d5:35:7a:87:c7:c0:5e:af:39:
6e:f7:60:b1:b5:37:b5:82:ad:9b:19:5f:52:6f:c8:8b:a4:c4:
78:9b:e0:71:f3:29:e4:64:45:be:9a:f9:f6:2c:1c:15:f7:df:
fc:62:f5:ab:0d:e1:cf:78:b6:4e:47:98:ce:27:27:bc:e6:05:
25:b3:04:2d:70:e2:fd:1b:e1:18:0b:5f:cd:cf:e1:00:32:bd:
6f:ef:98:29:dc:36:0d:d2:95:ec:f3:73:66:b2:11:a1:2d:77:
40:aa:77:0f:73:02:8d:a6:dc:ab:31:1c:4f:28:fa:f0:81:2e:
b3:23:6b:75:36:f2:02:8c:a0:dd:23:60:f3:e7:f1:00:c5:7b:
38:cf:8f:a0:39:a5:e2:4f:0f:65:7d:68:0d:1d:a3:ae:97:5c:
c7:c1:7a:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:01:19 2026 by rpki-client