
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa
File: 3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=
Subject key identifier: 7C:94:D8:A3:A4:41:98:D9:69:6A:6F:DC:AF:AF:37:D8:82:56:65:4B
Certificate issuer: /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial: 5455923B01A4EEAA4716C0CF87D7B79EFAFEF849
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:39:32 +0000
ROA not before: Mon 11 May 2026 17:34:32 +0000
ROA not after: Mon 10 May 2027 17:39:32 +0000
asID: 134823
IP address blocks: 161.248.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:55:92:3b:01:a4:ee:aa:47:16:c0:cf:87:d7:b7:9e:fa:fe:f8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Validity
Not Before: May 11 17:34:32 2026 GMT
Not After : May 10 17:39:32 2027 GMT
Subject: CN=7C94D8A3A44198D9696A6FDCAFAF37D88256654B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:e0:1d:08:96:58:04:95:df:6f:25:ba:9b:
d2:78:e0:e6:f7:f0:cf:23:2d:34:88:67:22:e0:4f:
dc:b1:b7:8a:68:b0:bb:97:18:6f:09:1b:69:aa:40:
ef:20:5a:91:eb:f4:57:78:89:de:1c:8f:0e:53:cb:
60:19:22:45:0c:d6:aa:c7:c2:e4:7b:f8:d9:50:49:
88:94:18:b7:76:4d:9c:f7:eb:90:20:76:06:87:20:
32:e6:bf:81:4c:27:4c:b3:ed:7b:91:d8:6c:cb:60:
ba:11:67:0b:7d:ce:37:a4:8d:0e:d3:98:00:97:5e:
92:cd:fd:f8:f5:da:49:32:64:09:04:bf:07:28:29:
bb:e8:1a:65:cb:c1:4f:0c:b2:24:a7:3d:b4:79:17:
25:ec:39:25:bf:46:fe:32:49:93:92:e4:1b:01:8a:
33:40:5e:23:bf:03:17:ce:6e:47:fe:f0:9b:94:e6:
00:69:49:29:8a:2b:83:74:cb:98:ce:f2:8c:ff:a4:
6d:1b:27:37:96:b5:72:cf:27:b5:8a:83:d7:51:c7:
8c:40:e8:19:09:0b:b9:45:08:f2:48:f9:f3:a3:f5:
b5:5d:b4:69:e3:a2:ab:c3:df:9e:ae:f0:30:d9:af:
f5:fc:91:28:f2:53:94:20:3b:f0:3d:24:b6:92:0f:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:D8:A3:A4:41:98:D9:69:6A:6F:DC:AF:AF:37:D8:82:56:65:4B
X509v3 Authority Key Identifier:
keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.248.144.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:c2:30:57:9f:f0:89:8f:ac:aa:de:5f:d7:5d:24:ab:d4:25:
70:9b:c6:96:fa:53:99:34:1d:dd:66:e7:fb:a0:44:37:7c:84:
7c:f7:93:92:16:15:2d:a2:ab:41:c3:3e:ed:2c:67:9f:5f:9c:
34:50:43:27:10:7b:9a:f0:e1:22:94:65:66:39:59:f7:68:43:
53:2b:f5:58:10:e0:18:2b:a0:e6:cd:51:53:e3:d1:05:54:99:
b2:3e:ef:19:d2:45:ba:da:b7:66:ff:d4:3a:6b:4f:5c:bf:a1:
ac:c4:7f:73:cd:df:ba:66:67:5a:0d:14:47:aa:97:1d:f8:7a:
a5:98:3c:5f:8b:0f:e0:13:3b:bf:dc:07:51:dd:a6:f1:ee:a1:
e2:c9:41:ce:6f:ae:da:75:80:fc:47:d2:c9:30:cd:71:dc:f7:
83:26:42:cd:f8:a7:18:a8:5c:37:ef:02:e1:3d:c6:8b:aa:20:
31:43:84:23:f0:4f:c1:0c:37:49:ca:df:a3:1a:44:b1:62:55:
dd:4b:f0:28:2f:00:2e:1d:2f:59:2f:7e:1b:9e:1b:61:51:4f:
89:90:a8:42:15:99:56:92:55:02:7c:af:a8:21:05:27:58:fa:
95:51:99:c0:60:7d:8d:00:ec:3e:6c:2b:0d:81:22:b7:d4:d1:
de:0b:4b:6f
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUVFWSOwGk7qpHFsDPh9e3nvr++EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3RENGM0ZFMThFM0M5REIzM0FDNkM1MEU4QkUzNTdE
MDcyOTk5MTAeFw0yNjA1MTExNzM0MzJaFw0yNzA1MTAxNzM5MzJaMDMxMTAvBgNV
BAMTKDdDOTREOEEzQTQ0MTk4RDk2OTZBNkZEQ0FGQUYzN0Q4ODI1NjY1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg+AdCJZYBJXfbyW6m9J44Ob3
8M8jLTSIZyLgT9yxt4posLuXGG8JG2mqQO8gWpHr9Fd4id4cjw5Ty2AZIkUM1qrH
wuR7+NlQSYiUGLd2TZz365AgdgaHIDLmv4FMJ0yz7XuR2GzLYLoRZwt9zjekjQ7T
mACXXpLN/fj12kkyZAkEvwcoKbvoGmXLwU8MsiSnPbR5FyXsOSW/Rv4ySZOS5BsB
ijNAXiO/AxfObkf+8JuU5gBpSSmKK4N0y5jO8oz/pG0bJzeWtXLPJ7WKg9dRx4xA
6BkJC7lFCPJI+fOj9bVdtGnjoqvD356u8DDZr/X8kSjyU5QgO/A9JLaSDwRpAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUfJTYo6RBmNlpam/cr6832IJWZUswHwYDVR0j
BBgwFoAUE33PP+GOPJ2zOsbFDovjV9BymZEwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJ
QU4vMC8xMzdEQ0YzRkUxOEUzQzlEQjMzQUM2QzUwRThCRTM1N0QwNzI5OTkxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzEzN0RDRjNGRTE4RTNDOURCMzNBQzZDNTBF
OEJFMzU3RDA3Mjk5OTEuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0FOR1RJQU4vMC8zMTM2MzEy
ZTMyMzQzODJlMzEzNDM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzM0Mzgz
MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBofiQMA0GCSqGSIb3DQEBCwUAA4IBAQCywjBXn/CJj6yq
3l/XXSSr1CVwm8aW+lOZNB3dZuf7oEQ3fIR895OSFhUtoqtBwz7tLGefX5w0UEMn
EHua8OEilGVmOVn3aENTK/VYEOAYK6DmzVFT49EFVJmyPu8Z0kW62rdm/9Q6a09c
v6GsxH9zzd+6ZmdaDRRHqpcd+HqlmDxfiw/gEzu/3AdR3abx7qHiyUHOb67adYD8
R9LJMM1x3PeDJkLN+KcYqFw37wLhPcaLqiAxQ4Qj8E/BDDdJyt+jGkSxYlXdS/Ao
LwAuHS9ZL34bnhthUU+JkKhCFZlWklUCfK+oIQUnWPqVUZnAYH2NAOw+bCsNgSK3
1NHeC0tv
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:08 2026 by rpki-client