
$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203234313638.roa
File: 3231312e37392e3130312e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier: t3MrunIJ/zMyRmxr4Dk+EKavOlTkQOTzzVdT8PGzqik=
Subject key identifier: 45:37:DC:B1:27:77:B8:06:D6:7C:B2:EC:A9:61:C0:96:C2:B1:FF:10
Certificate issuer: /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial: 49085BF2928B980E2E30008870786C5C5C9FA1D5
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203234313638.roa
Signing time: Mon 11 May 2026 17:56:29 +0000
ROA not before: Mon 11 May 2026 17:51:29 +0000
ROA not after: Mon 10 May 2027 17:56:29 +0000
asID: 24168
IP address blocks: 211.79.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:08:5b:f2:92:8b:98:0e:2e:30:00:88:70:78:6c:5c:5c:9f:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Validity
Not Before: May 11 17:51:29 2026 GMT
Not After : May 10 17:56:29 2027 GMT
Subject: CN=4537DCB12777B806D67CB2ECA961C096C2B1FF10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:0b:23:5f:d9:ba:86:d5:ff:36:b4:b3:31:
c4:fe:a1:4f:f3:ec:5a:03:a7:23:ae:c1:1e:73:e1:
e6:19:a4:4a:a4:52:22:cf:82:9e:9f:cc:8c:9b:56:
ca:e3:44:3a:dc:90:9f:bf:28:1f:57:0f:67:6c:0a:
c7:7d:35:3e:b2:a9:3d:de:88:16:b8:bd:cc:b9:9b:
de:36:f5:02:05:23:ab:8b:2e:67:b9:99:58:70:28:
59:db:51:41:82:c8:92:f8:6a:db:dd:f6:17:65:6f:
7b:75:8a:a5:e3:60:32:2a:43:a3:10:ee:04:f8:1a:
12:dd:14:8c:9e:b5:75:e3:0f:8b:74:7d:25:11:4e:
d2:f6:0c:8d:ac:b8:a7:08:60:19:93:7c:d3:3e:a5:
4b:c4:ef:fd:26:e8:23:a0:a0:58:fe:48:6b:2b:39:
1e:78:58:51:76:31:05:44:36:19:3d:cb:5f:99:dc:
af:5a:23:22:a9:6b:f0:dd:e9:af:5f:c8:fb:b5:d8:
7e:2d:98:82:ba:88:a5:54:9d:5b:08:20:96:92:f6:
98:88:f0:73:30:dc:c3:96:0f:b7:40:22:b4:98:c1:
98:36:dd:24:3f:88:93:81:2f:60:8b:97:09:cc:1f:
05:e5:c2:d4:17:ba:c3:16:05:ed:a7:b5:8b:49:a0:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:DC:B1:27:77:B8:06:D6:7C:B2:EC:A9:61:C0:96:C2:B1:FF:10
X509v3 Authority Key Identifier:
keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203234313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.79.101.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4f:f3:2b:67:3b:7e:ad:60:b8:c6:1a:43:58:61:44:99:9c:
7f:2c:29:22:01:c3:32:c1:45:5a:63:95:11:8c:f7:b5:94:23:
6c:51:25:bb:e2:5b:ea:a1:57:d9:32:10:43:0b:cd:74:80:e6:
65:9e:18:bc:c5:19:a9:79:f4:1a:01:49:29:25:f9:4a:a8:54:
70:46:fc:46:f4:b0:5f:65:55:77:26:9c:5e:9c:a8:84:2e:76:
4e:d6:52:fb:8c:9d:3c:e9:a8:9c:23:92:20:83:03:6e:1f:91:
36:88:14:b1:e5:38:12:ce:57:6d:82:1a:ae:99:66:0e:2e:7e:
8c:06:44:8e:bc:b0:cc:91:97:0f:02:49:f9:a0:af:87:5f:67:
57:db:cb:08:09:fb:b5:0e:92:d0:61:73:0f:9c:46:41:4e:0b:
16:9d:37:4f:b7:2f:f5:b5:4f:9c:44:97:5b:05:4f:bd:15:f9:
4a:e1:f1:6c:c1:eb:cf:a8:7a:a7:82:7c:2f:c5:2b:83:7c:eb:
b0:0a:6b:d8:4b:c6:cb:ec:69:27:21:95:57:0f:09:99:04:f3:
b1:30:d4:b1:8b:a5:16:29:10:fa:36:5e:66:fe:84:31:53:8d:
0c:c2:53:f2:a8:1f:aa:e2:cf:8a:af:d5:83:4e:2f:82:ca:ab:
2a:f3:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:24 2026 by rpki-client