
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e20313331363231.roa
File: 323030313a6465343a3a2f34382d3438203d3e20313331363231.roa (raw, json)
Hash identifier: TTG0rYXqJIoEzdZuj4Qil510pqROUROw33etTNxxO24=
Subject key identifier: 8B:1A:7A:E5:B5:AE:56:A4:AF:54:2A:D7:80:47:9C:6B:F5:1F:38:39
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 2B4ADFECA95BB1C0A24E06C18823489E9BDF7DDF
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e20313331363231.roa
Signing time: Mon 11 May 2026 17:20:09 +0000
ROA not before: Mon 11 May 2026 17:15:09 +0000
ROA not after: Mon 10 May 2027 17:20:09 +0000
asID: 131621
IP address blocks: 2001:de4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:4a:df:ec:a9:5b:b1:c0:a2:4e:06:c1:88:23:48:9e:9b:df:7d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:15:09 2026 GMT
Not After : May 10 17:20:09 2027 GMT
Subject: CN=8B1A7AE5B5AE56A4AF542AD780479C6BF51F3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:90:cf:9c:aa:62:61:3e:19:fc:7f:4c:08:
15:f0:55:d5:49:79:d2:02:ed:fa:28:58:62:98:93:
34:17:29:20:20:96:67:87:a5:b2:0d:52:db:c7:64:
88:5e:48:05:ab:44:fd:78:15:b9:07:c8:f4:03:91:
7b:78:e4:17:e5:fd:b1:1d:19:b3:9f:b6:0c:58:e7:
0b:2c:d0:f8:e7:a3:47:60:a2:6e:d0:c3:39:48:98:
f1:bb:bf:97:60:39:9a:ba:75:80:b1:b0:9d:aa:15:
cc:4c:89:02:cc:dd:12:d8:88:25:6e:a7:ab:c8:9e:
2e:85:e6:41:55:2d:78:43:ef:7b:df:74:8d:07:83:
e0:26:1a:b6:bb:65:3c:c5:98:be:76:cc:52:93:61:
c8:ab:54:b5:a5:27:55:31:2e:bb:6c:22:6d:ce:1e:
b7:16:8b:e7:0b:80:91:0d:3b:cc:b1:c1:1a:68:b6:
f8:7e:86:ce:0b:03:4d:ce:2d:52:92:24:7b:8c:ed:
b0:b3:d9:ce:c7:a1:9b:4d:82:20:f3:5f:e5:e3:08:
49:d1:c3:e5:41:21:64:60:d3:58:9d:36:85:4a:e0:
3d:6c:4e:8a:bd:0f:8e:f4:52:da:7e:65:5b:a9:1f:
0f:3a:96:b0:9f:d3:02:14:f2:42:7b:c2:eb:83:60:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:7A:E5:B5:AE:56:A4:AF:54:2A:D7:80:47:9C:6B:F5:1F:38:39
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e20313331363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:de4::/48
Signature Algorithm: sha256WithRSAEncryption
8a:9c:c9:3e:c3:cd:cd:d1:f2:2e:cd:aa:dd:17:db:0b:71:eb:
8f:0c:77:c6:dd:42:9f:e1:73:ef:e1:20:19:91:cb:04:12:2a:
0e:72:57:7a:e7:b1:ae:af:c0:a9:17:35:57:d4:08:26:34:17:
33:85:34:f2:84:c4:e6:b8:d3:27:d0:12:d7:25:c9:10:46:54:
80:cb:34:66:84:b7:cb:4c:6d:47:19:c9:54:14:1b:0f:83:57:
d5:e1:40:2f:e4:9e:0f:ed:9c:38:1e:62:a3:e0:34:75:de:29:
4e:d9:04:60:ed:f3:e8:4f:da:b5:8d:3a:f5:4a:28:4b:ca:45:
7e:d6:95:66:c2:6c:d4:b2:2f:75:32:62:3c:50:0a:f0:28:38:
27:4b:40:f3:08:11:30:70:85:53:d8:ed:ba:ac:8c:a1:cb:ca:
dd:37:0c:1f:28:a3:32:43:5f:37:98:a7:d3:e3:26:2a:97:5c:
e6:0a:0d:3f:96:1e:f8:28:c8:ae:f7:1f:9f:62:7e:2d:72:a8:
9f:ed:94:ad:aa:7d:7d:1e:ce:7b:fb:5d:63:40:f9:5b:27:2a:
d1:ea:5b:91:0c:d9:6f:47:ba:18:fe:4e:1f:fc:60:c3:b9:8d:
f6:f8:82:8b:5d:cb:b2:3d:73:4c:7d:8e:49:a3:43:c0:4c:f7:
99:a4:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:21 2026 by rpki-client