
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa
File: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (raw, json)
Hash identifier: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=
Subject key identifier: 86:AE:5E:2A:A3:91:79:4C:97:8A:DC:B4:AF:26:53:47:6E:85:1F:5C
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 0FB4120ECFDAF5252D504C9FAD82B267652EAA60
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa
Signing time: Mon 11 May 2026 17:56:45 +0000
ROA not before: Mon 11 May 2026 17:51:45 +0000
ROA not after: Mon 10 May 2027 17:56:45 +0000
asID: 198954
IP address blocks: 2401:e3e0:300::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b4:12:0e:cf:da:f5:25:2d:50:4c:9f:ad:82:b2:67:65:2e:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: May 11 17:51:45 2026 GMT
Not After : May 10 17:56:45 2027 GMT
Subject: CN=86AE5E2AA391794C978ADCB4AF2653476E851F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:4d:9e:e1:ad:8b:61:8f:37:82:b0:97:39:
5b:7d:fb:d7:45:bb:a5:1c:54:86:5f:72:10:20:12:
15:9e:25:49:08:2a:69:d8:c2:71:b0:87:e9:28:e7:
cd:88:6e:5d:f6:52:54:2e:ab:a9:75:8a:57:9c:57:
5f:44:46:67:a6:84:de:72:2a:7e:ae:35:0f:5e:e0:
99:d4:6b:9f:d5:c5:78:46:8d:bc:4f:5f:7c:4b:4c:
eb:bf:ac:62:20:dc:1d:ae:1f:47:3e:1c:00:93:aa:
14:21:e1:9d:ce:fe:e1:25:48:d6:f5:11:10:9e:5b:
27:e4:e5:d9:d3:12:c0:cd:52:1d:9a:c6:61:33:c1:
64:d3:31:b0:e5:2f:42:bc:d1:78:1d:91:71:60:2a:
d3:e0:d3:84:c5:3f:77:85:9b:28:3a:b0:bb:0c:8e:
5f:9b:e4:13:ce:a3:77:3e:b7:60:ae:38:fe:13:13:
3a:2a:07:47:8c:96:87:d0:1a:56:66:ef:9c:08:ab:
43:58:69:6c:16:48:07:1c:85:73:ba:e8:e1:4f:6c:
cf:66:7e:a8:10:f7:5d:d6:16:c1:48:e1:57:dd:db:
3b:a2:43:75:65:3b:82:e9:da:ec:d8:dd:79:05:82:
35:5c:a1:b8:bd:bd:2c:1b:8b:93:e0:32:29:cf:55:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:5E:2A:A3:91:79:4C:97:8A:DC:B4:AF:26:53:47:6E:85:1F:5C
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:e3e0:300::/44
Signature Algorithm: sha256WithRSAEncryption
5f:1d:0e:5c:70:7c:aa:b4:91:11:e3:6c:eb:a4:d6:ab:f8:7b:
b0:a1:56:f1:cd:83:1e:32:df:dd:4b:be:e4:23:41:a1:0d:c6:
b2:24:a5:fa:8d:06:bf:0d:e0:c1:61:dc:e0:1d:a9:31:79:55:
fb:ce:7b:30:30:99:b4:2a:95:65:cf:e0:c8:d2:23:5a:57:d7:
8e:42:63:4e:10:16:87:bf:c7:c9:ba:bd:83:79:90:77:bc:5f:
fd:0c:dc:b8:dd:1b:f8:7d:c2:27:cb:ba:11:98:87:a1:0e:df:
f0:a2:a5:5e:12:64:79:44:e2:ce:cf:08:46:af:5e:99:3d:1f:
94:69:89:04:11:b6:21:7c:a6:a8:78:ab:1e:39:65:c2:e1:11:
35:0c:e5:c7:5a:1e:b4:90:4c:f1:85:a5:bd:bc:c9:f6:e7:0b:
a9:25:eb:e7:48:6f:72:ed:10:c6:e4:79:9b:51:04:de:d7:ff:
d0:8a:d3:14:ca:a2:df:5b:de:b3:a1:f3:23:eb:4a:d6:98:dc:
62:78:2f:dc:f8:aa:05:07:37:6a:4b:a5:31:b7:58:4f:23:cb:
aa:25:f9:2f:c8:5a:a2:87:fa:24:ed:a5:f3:88:e8:03:93:ba:
ca:b8:e2:e2:55:07:56:63:ea:53:ab:16:d3:c5:de:b2:60:95:
d8:bc:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:38 2026 by rpki-client