
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa
File: 3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa (raw, json)
Hash identifier: oaNsp11upkBZ+JGYlmo3nCJ8dB+RQUZt5gJM6iJrwHk=
Subject key identifier: D9:3F:3D:89:BC:21:03:50:6A:2F:AF:C5:4D:5F:C8:74:7E:3F:12:7B
Certificate issuer: /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial: 35EAF6D10DC5980FF9180EA16ACBD55D3AC96834
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANIN/0/3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa
Signing time: Mon 11 May 2026 17:40:35 +0000
ROA not before: Mon 11 May 2026 17:35:35 +0000
ROA not after: Mon 10 May 2027 17:40:35 +0000
asID: 131636
IP address blocks: 211.76.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:34:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ea:f6:d1:0d:c5:98:0f:f9:18:0e:a1:6a:cb:d5:5d:3a:c9:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Validity
Not Before: May 11 17:35:35 2026 GMT
Not After : May 10 17:40:35 2027 GMT
Subject: CN=D93F3D89BC2103506A2FAFC54D5FC8747E3F127B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:cd:9c:bb:ff:41:90:11:1b:57:29:54:5f:
6c:e1:52:ae:c0:e6:a1:c7:d0:f1:bd:cc:67:a3:b5:
dc:aa:fa:a7:8e:91:70:19:08:07:90:66:22:e9:ba:
97:15:be:0a:0c:d1:05:d2:33:dc:7b:7e:b7:1e:80:
67:d0:51:ed:15:60:93:5a:49:a6:cc:ae:99:6f:0b:
a5:97:24:ed:38:79:45:42:76:87:80:de:9a:7d:dc:
61:58:52:8f:cd:5b:98:2a:eb:b1:b9:c1:09:5d:1a:
d6:12:e5:d3:ef:b5:91:7a:10:ba:43:c3:4c:79:70:
a1:fd:f4:72:b0:ac:11:f3:a9:4d:b6:f1:62:4f:e9:
71:d2:ff:f0:8f:40:f0:d5:7d:aa:19:cf:5d:18:bc:
b2:76:d7:df:11:f1:af:72:59:e2:ff:f1:81:5a:dd:
fc:91:be:a6:da:aa:a1:11:ec:b0:d6:77:77:b1:aa:
00:96:c3:96:b1:fe:7a:d8:63:ce:ec:1f:80:85:f0:
d3:50:ae:cf:1e:bc:d6:b6:80:7d:2c:41:5a:76:78:
a1:d1:bc:e8:ef:94:5e:c0:d5:01:81:90:fc:5b:3c:
78:84:2a:8a:e4:bb:2b:e7:43:93:e1:e0:7d:b7:df:
33:22:c2:e1:de:40:dd:96:ff:c0:70:43:a9:e5:fa:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:3D:89:BC:21:03:50:6A:2F:AF:C5:4D:5F:C8:74:7E:3F:12:7B
X509v3 Authority Key Identifier:
keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/3231312e37362e3138382e302f32332d3234203d3e20313331363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:3b:0f:95:70:ff:75:c9:3b:1c:0d:03:0f:1e:96:b4:ec:7a:
9b:b1:a1:3f:fd:0a:25:cc:ae:eb:27:41:f9:42:9a:10:8b:c2:
72:2e:6a:61:b1:9d:51:f4:88:71:00:19:8c:ba:ae:9a:17:8c:
15:98:66:d6:e5:27:ea:31:3a:d5:0b:66:10:0d:03:1c:d8:75:
18:11:c1:13:d5:03:28:b0:86:50:5e:ac:d6:65:69:a2:82:c3:
f1:ad:7d:6a:1c:08:9a:a1:2c:3a:a2:3d:ce:9e:2e:d9:11:92:
b6:02:a1:c7:6d:36:55:55:12:6f:25:85:ac:38:45:41:68:29:
c6:f7:ee:a2:81:be:d0:88:3d:f8:cd:df:2a:84:6c:9a:d5:9b:
1b:21:e3:14:f0:5e:cd:44:f3:d4:c8:94:6e:aa:57:f4:5f:2b:
d9:1f:4a:97:74:c7:43:c7:30:38:7a:0c:58:1f:4e:25:c0:38:
e5:46:cb:19:2d:ac:14:a8:38:f4:64:3c:bc:fb:2d:56:94:36:
0e:35:a6:f7:6f:2e:21:02:a9:23:12:19:c0:17:82:82:a7:7c:
d7:1c:cb:22:f1:00:a1:e3:e0:26:cb:8a:d7:7f:b6:db:19:22:
42:8b:ac:ce:e9:99:d3:40:38:83:aa:ed:c2:21:57:32:bf:05:
4a:e6:0a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:39 2026 by rpki-client