
$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa
File: 323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (raw, json)
Hash identifier: YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=
Subject key identifier: E9:16:D5:B2:8C:2B:C6:E6:C1:34:DA:50:15:F6:5F:32:E3:2A:A5:C0
Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial: 3D57E1C092206E08B194FD42B996F6F124C4697D
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa
Signing time: Mon 11 May 2026 17:44:45 +0000
ROA not before: Mon 11 May 2026 17:39:45 +0000
ROA not after: Mon 10 May 2027 17:44:45 +0000
asID: 131600
IP address blocks: 2403:a3c0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:57:e1:c0:92:20:6e:08:b1:94:fd:42:b9:96:f6:f1:24:c4:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Validity
Not Before: May 11 17:39:45 2026 GMT
Not After : May 10 17:44:45 2027 GMT
Subject: CN=E916D5B28C2BC6E6C134DA5015F65F32E32AA5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:d7:f1:81:f1:02:e2:fb:a3:ca:17:ad:90:
ef:2f:3b:b6:a3:e2:0b:b2:92:75:36:55:3f:fb:70:
ac:11:26:a2:54:2e:85:8d:51:66:55:aa:eb:db:b3:
bc:60:4a:b0:4e:a0:d9:70:f5:9b:38:c5:df:e9:3c:
28:6a:4c:02:e3:01:47:8d:67:b1:9f:6d:7d:e3:70:
be:54:5b:a6:73:a5:88:d3:36:d1:77:ee:4a:26:0f:
6c:98:69:6a:e9:27:65:d3:0a:00:ef:05:02:b2:0c:
88:55:eb:14:18:93:51:ee:f4:24:e8:b7:f5:41:ef:
a7:a6:d8:e3:f3:5e:7c:40:bc:9b:45:84:0a:6b:e6:
98:ba:bf:56:a0:56:01:5e:8a:58:d0:c6:ad:fd:8a:
4a:1d:68:2c:b6:e7:36:ec:d1:6c:23:66:4f:0a:6c:
52:fe:70:a3:7e:e6:ba:a9:e3:80:1b:ce:8d:56:f3:
e6:02:2b:5d:42:82:5b:86:1d:ca:14:5e:68:74:b2:
38:6d:1f:d5:29:43:b9:09:27:a9:3f:da:d5:fe:25:
49:f8:a3:70:11:7f:28:86:62:6f:18:99:7d:19:9c:
e9:fc:fc:c9:a8:b7:0a:bf:81:a9:84:17:50:f1:8f:
be:80:6b:b0:0f:5f:f4:84:fc:00:5e:72:ea:b4:3f:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:16:D5:B2:8C:2B:C6:E6:C1:34:DA:50:15:F6:5F:32:E3:2A:A5:C0
X509v3 Authority Key Identifier:
keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:69:7b:2d:57:02:a6:56:3c:ea:f2:21:bb:94:e6:b8:bd:f1:
25:cd:75:ef:c4:0e:f9:6d:f1:84:4b:77:60:12:9f:a1:7a:41:
39:49:9a:50:c2:cb:2b:15:f2:dc:63:69:ab:fd:36:35:e8:0d:
90:d7:dd:40:e3:3a:59:46:bf:50:ef:4c:54:fd:1d:5c:79:2d:
ea:f9:73:20:e3:63:c5:93:9d:f7:cf:eb:9b:2a:36:c1:33:2a:
13:28:ac:54:6f:7f:5e:be:02:42:fe:9b:1c:dd:91:23:98:1a:
b5:54:76:c6:21:e7:1f:d9:c1:77:84:b2:e9:b6:62:be:2c:d0:
0a:95:44:4b:ad:10:13:12:f1:89:7d:56:4e:86:73:11:ca:0d:
83:76:5a:bf:7f:03:a3:2f:3d:b4:6f:37:f7:60:49:5e:99:fe:
dc:cd:75:25:ef:78:5d:ae:aa:54:3e:ce:a6:6a:95:ee:ff:4c:
b6:21:93:94:78:19:5a:ed:af:52:78:24:5a:6a:84:de:4b:80:
58:1a:92:db:65:98:91:be:f0:ec:ff:39:aa:2b:df:46:b6:30:
45:79:f4:fd:15:ea:b7:a9:b0:85:18:ef:2e:b6:00:95:ea:d4:
0a:b9:02:33:e5:18:8e:eb:70:d1:41:45:67:d5:99:08:17:14:
8e:ee:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:05 2026 by rpki-client