
$ rpki-client -vvf rpkica.twnic.tw/rpki/WOQUAN/0/323430313a663132303a3a2f33322d3332203d3e20313532363233.roa
File: 323430313a663132303a3a2f33322d3332203d3e20313532363233.roa (raw, json)
Hash identifier: wjHlV5Tv8i9IzXptK84jE7gpZo88QjhSM7shS1dGz3o=
Subject key identifier: 4C:1D:44:D7:C3:A1:0B:45:91:F3:0E:50:B1:03:96:E7:2C:37:2E:60
Certificate issuer: /CN=27E99028E687CF3D07E1A45E549685C8F7776153
Certificate serial: 7DECD82FF0D2041F1D10751D1FA9C388A245C5CD
Authority key identifier: 27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WOQUAN/0/323430313a663132303a3a2f33322d3332203d3e20313532363233.roa
Signing time: Mon 11 May 2026 17:40:02 +0000
ROA not before: Mon 11 May 2026 17:35:02 +0000
ROA not after: Mon 10 May 2027 17:40:02 +0000
asID: 152623
IP address blocks: 2401:f120::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl
rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ec:d8:2f:f0:d2:04:1f:1d:10:75:1d:1f:a9:c3:88:a2:45:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27E99028E687CF3D07E1A45E549685C8F7776153
Validity
Not Before: May 11 17:35:02 2026 GMT
Not After : May 10 17:40:02 2027 GMT
Subject: CN=4C1D44D7C3A10B4591F30E50B10396E72C372E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:d7:e7:f8:ca:a2:07:2b:c8:92:da:7c:37:
5c:99:99:82:75:33:2e:8c:c6:40:57:9a:43:d5:b6:
f2:c1:c3:e9:3a:56:0b:8b:87:3a:9c:64:73:3a:c6:
dc:48:bd:f1:0e:e1:b7:d7:e5:26:44:b5:1f:cd:00:
1c:8d:7b:52:d0:fe:38:dd:06:d1:60:b5:75:11:42:
7e:9b:ac:03:11:87:aa:0b:95:29:d1:33:d6:77:4d:
30:d9:bd:8c:ea:d9:34:3e:55:e4:45:cf:72:52:d6:
e2:92:04:1f:a4:6a:b9:91:84:90:cf:c6:ab:96:6f:
a9:e1:ff:cc:72:f1:54:a2:b0:81:cc:cd:fc:97:e2:
59:34:80:a7:e2:0b:fc:5d:51:a3:0e:ff:f0:6c:e9:
1d:33:f1:0e:7f:3f:ea:8a:69:6f:4e:b5:9f:c9:9d:
b8:9b:7f:51:08:f4:9f:58:46:79:3e:e7:dd:fd:c7:
06:cf:d1:a8:8d:d3:07:0b:0b:a7:86:a4:c7:ab:e1:
e5:ff:5c:1f:f5:9d:3d:6d:35:36:86:62:28:89:c1:
f8:a1:3f:7f:93:4a:2d:32:b1:4d:ca:62:ba:cf:97:
2d:58:2b:60:4d:a7:fa:39:fb:16:22:75:c6:c7:99:
f5:23:a7:b8:ec:01:f1:88:9f:13:c2:0a:79:26:70:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:44:D7:C3:A1:0B:45:91:F3:0E:50:B1:03:96:E7:2C:37:2E:60
X509v3 Authority Key Identifier:
keyid:27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/323430313a663132303a3a2f33322d3332203d3e20313532363233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:f120::/32
Signature Algorithm: sha256WithRSAEncryption
04:23:5c:d6:77:f6:b9:7f:aa:63:e0:d3:d5:ff:4f:91:c6:c8:
67:86:85:7a:8e:7d:8f:29:cf:a8:b9:b8:37:0c:57:ee:ff:e7:
ba:56:21:db:6b:b0:cd:96:75:b0:95:4d:ca:8f:32:bf:7b:7f:
66:13:68:6a:18:fb:e8:7f:39:f4:45:e3:49:c7:6d:14:a4:e7:
98:bc:ae:c9:19:19:c7:b6:11:4a:7f:e7:a5:0b:f4:70:79:3d:
23:91:9e:9f:1c:6d:81:db:fd:6a:fb:f5:9c:e1:2a:f5:34:a0:
78:22:77:85:f0:66:f5:66:5f:36:d6:a5:6e:5b:8e:19:68:94:
eb:cd:90:4d:84:c4:aa:5e:33:8f:a6:31:2e:b0:b3:33:49:41:
fd:47:87:2c:2c:cf:e9:e2:96:4d:68:99:7d:b3:68:39:85:29:
97:60:ac:8a:f3:91:c5:38:f7:6e:02:6a:e2:50:e5:07:56:58:
fe:b2:f9:9f:5e:8a:67:0d:47:b3:84:a4:ac:35:7d:8e:1e:45:
f2:c9:c7:84:68:29:84:40:f2:67:24:07:5a:6e:92:53:9c:f8:
f3:e5:c8:d0:94:ba:2f:43:b2:9e:64:75:c7:45:ae:81:6b:e5:
be:30:e4:b8:34:d7:d6:1e:fe:e9:4d:45:03:d4:ac:aa:65:1d:
86:ed:2e:c5
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUfezYL/DSBB8dEHUdH6nDiKJFxc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdFOTkwMjhFNjg3Q0YzRDA3RTFBNDVFNTQ5Njg1QzhG
Nzc3NjE1MzAeFw0yNjA1MTExNzM1MDJaFw0yNzA1MTAxNzQwMDJaMDMxMTAvBgNV
BAMTKDRDMUQ0NEQ3QzNBMTBCNDU5MUYzMEU1MEIxMDM5NkU3MkMzNzJFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcK9fn+MqiByvIktp8N1yZmYJ1
My6MxkBXmkPVtvLBw+k6VguLhzqcZHM6xtxIvfEO4bfX5SZEtR/NAByNe1LQ/jjd
BtFgtXURQn6brAMRh6oLlSnRM9Z3TTDZvYzq2TQ+VeRFz3JS1uKSBB+karmRhJDP
xquWb6nh/8xy8VSisIHMzfyX4lk0gKfiC/xdUaMO//Bs6R0z8Q5/P+qKaW9OtZ/J
nbibf1EI9J9YRnk+5939xwbP0aiN0wcLC6eGpMer4eX/XB/1nT1tNTaGYiiJwfih
P3+TSi0ysU3KYrrPly1YK2BNp/o5+xYidcbHmfUjp7jsAfGInxPCCnkmcI6lAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQUTB1E18OhC0WR8w5QsQOW5yw3LmAwHwYDVR0j
BBgwFoAUJ+mQKOaHzz0H4aReVJaFyPd3YVMwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV09RVUFO
LzAvMjdFOTkwMjhFNjg3Q0YzRDA3RTFBNDVFNTQ5Njg1QzhGNzc3NjE1My5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8yN0U5OTAyOEU2ODdDRjNEMDdFMUE0NUU1NDk2
ODVDOEY3Nzc2MTUzLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV09RVUFOLzAvMzIzNDMwMzEzYTY2
MzEzMjMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzNTMyMzYzMjMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJAHxIDANBgkqhkiG9w0BAQsFAAOCAQEABCNc1nf2uX+qY+DT1f9PkcbI
Z4aFeo59jynPqLm4NwxX7v/nulYh22uwzZZ1sJVNyo8yv3t/ZhNoahj76H859EXj
ScdtFKTnmLyuyRkZx7YRSn/npQv0cHk9I5Genxxtgdv9avv1nOEq9TSgeCJ3hfBm
9WZfNtalbluOGWiU682QTYTEql4zj6YxLrCzM0lB/UeHLCzP6eKWTWiZfbNoOYUp
l2CsivORxTj3bgJq4lDlB1ZY/rL5n16KZw1Hs4SkrDV9jh5F8snHhGgphEDyZyQH
Wm6SU5z48+XI0JS6L0OynmR1x0WugWvlvjDkuDTX1h7+6U1FA9SsqmUdhu0uxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:36:18 2026 by rpki-client