
$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa
File: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (raw, json)
Hash identifier: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=
Subject key identifier: 0E:61:2D:5F:52:73:21:4C:33:A6:CE:84:4B:28:BD:9B:9E:94:9E:8D
Certificate issuer: /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial: 45CB39597417FA81B9D02EE8B167D3A87C6DC087
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa
Signing time: Mon 11 May 2026 17:56:46 +0000
ROA not before: Mon 11 May 2026 17:51:46 +0000
ROA not after: Mon 10 May 2027 17:56:46 +0000
asID: 199203
IP address blocks: 2401:e3e0:900::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:cb:39:59:74:17:fa:81:b9:d0:2e:e8:b1:67:d3:a8:7c:6d:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Validity
Not Before: May 11 17:51:46 2026 GMT
Not After : May 10 17:56:46 2027 GMT
Subject: CN=0E612D5F5273214C33A6CE844B28BD9B9E949E8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:14:4b:e0:d3:9d:21:84:8a:21:78:2b:92:
9a:5d:d6:e3:92:47:0b:6a:90:db:92:1c:9c:86:bb:
2e:40:20:ed:16:0e:78:e8:f8:0b:7c:cb:1f:a8:cb:
d7:96:8d:54:16:a5:de:dc:e0:68:f8:f1:67:da:da:
91:8b:4c:45:49:00:8b:d7:ba:9f:4c:de:21:07:39:
7c:7a:a9:ba:ca:0d:b6:11:9c:78:3e:e3:f2:08:11:
8a:45:58:ff:23:14:2d:bd:1c:73:8f:a2:fb:e0:50:
e5:9b:f9:4f:84:df:d5:6c:e0:2e:d7:00:37:bc:ee:
85:83:67:85:89:84:ab:6e:f5:9c:1b:f6:74:c2:68:
a8:08:a2:6f:c9:dc:7d:4a:d2:d8:8e:f4:b5:93:a2:
62:71:cb:b1:b2:e2:1c:da:d2:6f:8f:b3:ad:26:fc:
69:84:ad:03:89:19:0d:f5:54:57:0d:a2:5b:94:60:
1f:0d:83:61:a6:ed:49:3e:12:89:c9:69:eb:eb:b9:
df:01:7c:6e:77:15:75:30:e2:83:c8:a0:9d:f9:09:
93:ec:e9:6f:f9:11:b1:20:e7:6b:1c:39:73:7d:98:
a1:ff:eb:13:f9:79:cd:36:ab:24:10:e6:9c:bd:5e:
6b:37:e8:f1:21:52:3f:d1:39:9b:7a:72:98:c0:ee:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:2D:5F:52:73:21:4C:33:A6:CE:84:4B:28:BD:9B:9E:94:9E:8D
X509v3 Authority Key Identifier:
keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:e3e0:900::/44
Signature Algorithm: sha256WithRSAEncryption
ce:fe:b7:6d:23:f1:88:3e:c4:d4:b8:e3:95:81:e6:23:9d:f8:
99:82:2a:cf:3c:da:da:2e:b9:b7:09:c0:97:44:7c:54:b2:e7:
85:ef:57:c0:f7:1e:e0:71:84:16:30:7b:ce:d3:21:2f:05:ae:
4e:1e:eb:4d:d6:7d:0b:25:67:f1:95:7b:64:6b:0d:1d:34:23:
05:10:26:03:fe:38:c9:d9:32:93:8c:bb:a8:73:72:66:31:7f:
27:6f:e9:46:b5:30:e4:7c:76:a2:9f:ab:10:9c:4a:68:b6:c2:
b8:da:07:72:ae:6a:6e:a4:2c:ed:ec:99:e8:81:91:f6:50:4d:
d9:da:3f:2b:83:c6:55:93:24:cf:1e:33:eb:29:25:cd:46:80:
a6:cc:a4:37:4a:4a:64:36:0b:79:5e:66:e6:85:3f:23:74:e2:
da:59:5a:14:57:bf:20:b0:0e:d7:64:a3:9f:1e:1f:e6:6b:92:
10:3c:6c:28:71:e5:46:d2:77:a1:e9:5f:be:78:21:ec:3d:89:
23:da:29:9e:06:fb:80:a8:3d:9d:51:31:ea:51:55:0b:49:5d:
0a:a9:ee:ca:ab:ee:56:71:bc:96:b9:1b:7f:65:5f:0f:c2:34:
6c:e7:ef:a2:d7:ac:a5:b2:f9:85:b3:16:21:9d:8f:b3:1f:52:
e8:6f:28:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:29 2026 by rpki-client