
$ rpki-client -vvf rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa
File: 3231312e37392e3130322e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier: 3v3LP5j06Samtgaxz1mv2fEZi56D7EIyXnL/h/+knlQ=
Subject key identifier: 99:AE:1D:A5:2E:44:72:F3:44:EC:FF:D4:4C:63:E2:A2:23:4E:D6:CD
Certificate issuer: /CN=73E6AC8F948D0C97D941F26531617C19223508E6
Certificate serial: 441EB7D2C71D049D55C058548BDCA662A1B3D592
Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa
Signing time: Mon 11 May 2026 17:56:37 +0000
ROA not before: Mon 11 May 2026 17:51:37 +0000
ROA not after: Mon 10 May 2027 17:56:37 +0000
asID: 7536
IP address blocks: 211.79.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl
rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1e:b7:d2:c7:1d:04:9d:55:c0:58:54:8b:dc:a6:62:a1:b3:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6
Validity
Not Before: May 11 17:51:37 2026 GMT
Not After : May 10 17:56:37 2027 GMT
Subject: CN=99AE1DA52E4472F344ECFFD44C63E2A2234ED6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:10:1c:73:7e:d9:24:20:65:11:f5:86:e9:
77:f5:3a:59:60:69:f6:11:d8:86:fb:06:4e:36:29:
0d:1f:d5:fa:87:09:52:74:b8:00:3b:89:59:13:0d:
68:ad:d7:7f:20:83:2c:6d:f6:99:c9:37:57:68:5a:
a8:9a:78:24:b5:f2:0c:1e:e5:0d:26:a0:32:af:d6:
47:67:68:2e:49:70:ff:06:d8:32:31:a9:61:35:b2:
de:10:1a:ca:c7:0b:f6:7e:fd:03:ca:8c:ac:90:49:
92:a6:56:d2:b6:ac:3e:2e:d1:13:c2:75:30:49:7f:
44:50:29:94:9d:b4:77:0a:12:76:ee:77:ad:e6:7a:
fc:86:24:1d:a9:80:83:79:89:2d:b1:68:75:83:32:
53:5a:12:a0:2d:04:7a:8d:e3:61:ba:36:66:75:e9:
81:04:c5:76:50:dd:00:10:2b:9b:25:a3:35:9d:13:
61:c6:d0:06:c1:98:0f:47:eb:14:fd:4f:e5:bc:0c:
7a:57:7f:ac:ac:45:3a:b7:75:ca:ca:73:4e:ce:30:
f6:aa:ec:c6:7b:97:37:49:4b:e1:e5:45:88:3b:68:
9f:08:f5:ce:6b:56:f8:36:ac:f4:90:3d:cb:20:01:
c9:ee:fc:2a:5e:7e:e0:2a:03:b0:f7:14:5d:28:1a:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:1D:A5:2E:44:72:F3:44:EC:FF:D4:4C:63:E2:A2:23:4E:D6:CD
X509v3 Authority Key Identifier:
keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.79.102.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:05:c5:07:99:ff:ef:e0:ed:a4:15:3b:24:58:9a:97:ce:d9:
22:2a:b5:f9:7a:71:36:9e:84:2c:a9:c1:58:06:da:6a:d8:e3:
2d:4c:ad:02:fd:60:90:b8:63:eb:d2:2d:37:4d:85:89:e0:75:
e3:2f:ef:90:88:5b:75:cf:9d:35:db:8e:20:67:b5:3d:32:9b:
78:04:f8:e1:df:7f:b6:ff:96:3a:88:97:fc:fb:f0:ac:a7:4b:
94:94:a1:c7:e2:f7:09:0b:8f:9e:4a:33:54:3d:41:ba:8b:ae:
a8:b8:d1:c9:7b:49:dc:bf:29:13:12:2e:6f:7b:8b:6e:86:4c:
70:38:4c:41:25:3d:e3:4c:fd:ea:1d:97:07:67:52:64:da:e0:
af:d7:ca:49:fb:25:c5:c9:f3:28:b4:b7:5b:cc:e7:7f:76:13:
45:88:fb:89:64:7d:50:00:55:61:78:7a:33:9e:ea:8e:50:47:
5c:33:d9:dd:20:69:b1:fb:94:ef:60:65:dc:75:aa:d7:b4:f2:
07:9e:44:1a:d5:27:a8:8d:ca:e2:0c:93:b8:8f:e0:61:c8:b1:
45:14:44:62:50:df:68:76:0f:28:07:64:f3:14:b6:68:c6:55:
cd:cc:6e:8c:f6:71:8f:d9:dd:6c:43:4a:96:0f:7d:51:ca:e6:
44:7c:ae:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:10:48 2026 by rpki-client