
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa
File: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (raw, json)
Hash identifier: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=
Subject key identifier: C0:84:14:C7:CB:5B:93:6F:46:E8:B1:23:C0:79:1D:67:83:81:BE:BA
Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial: 2D77C0B0D1BD9F1CD9BB8F5E65F610AC382CB74C
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa
Signing time: Mon 11 May 2026 17:18:11 +0000
ROA not before: Mon 11 May 2026 17:13:11 +0000
ROA not after: Mon 10 May 2027 17:18:11 +0000
asID: 38047
IP address blocks: 2400:61a0:a055::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:77:c0:b0:d1:bd:9f:1c:d9:bb:8f:5e:65:f6:10:ac:38:2c:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Validity
Not Before: May 11 17:13:11 2026 GMT
Not After : May 10 17:18:11 2027 GMT
Subject: CN=C08414C7CB5B936F46E8B123C0791D678381BEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:40:cd:75:ef:cf:55:53:e1:f0:3f:ed:31:
91:b1:01:8a:15:d7:ee:23:d3:68:62:86:1e:23:c7:
88:44:d5:e4:ef:94:48:ea:38:7e:8d:fd:de:df:cd:
3f:33:a5:a8:c0:29:f2:32:4c:74:fc:85:35:49:44:
13:c7:01:77:dc:8a:d6:ce:0e:d5:6f:87:aa:b5:2f:
86:32:eb:91:fb:7f:8e:1a:be:af:02:f8:4e:b3:bd:
b1:19:5e:49:8b:3c:cf:1f:fe:14:db:23:e0:a4:25:
d1:51:83:4f:f6:da:ca:f0:d8:92:03:48:05:2e:b5:
7b:ca:c8:a9:c6:a9:a1:16:82:e2:31:65:73:b7:e8:
15:77:b7:1f:6b:77:c8:56:3a:2f:de:b9:e2:9d:5c:
72:e2:12:eb:e8:df:8e:e9:c6:d2:f5:56:21:53:17:
db:20:ea:37:c6:fa:a2:5c:ac:25:ea:67:b7:a8:94:
83:e1:30:24:67:3b:06:8b:81:1d:95:a6:f1:9b:c4:
c0:90:6b:12:0e:64:96:3c:a7:97:59:cf:32:16:e7:
5d:7d:b6:29:8e:8a:19:fd:a7:3e:42:1d:15:77:43:
ad:c5:5a:9d:cd:6d:a8:c1:01:0b:a7:1a:8c:cd:41:
e2:dd:7b:a1:cb:85:ef:43:89:2f:75:64:01:48:9d:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:14:C7:CB:5B:93:6F:46:E8:B1:23:C0:79:1D:67:83:81:BE:BA
X509v3 Authority Key Identifier:
keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:61a0:a055::/48
Signature Algorithm: sha256WithRSAEncryption
33:05:0f:f3:7b:78:09:9f:10:39:ff:03:79:69:13:e9:99:0f:
77:ae:6c:6a:ad:d1:f9:fa:e4:a3:f4:81:ba:86:34:21:59:66:
bc:08:2e:5f:33:41:55:4b:a6:46:3e:60:41:12:d2:dd:b8:fd:
ff:c1:68:28:3f:a5:7f:51:d0:cb:aa:1d:8a:08:0e:e3:d6:60:
10:53:49:b6:25:87:89:d0:70:87:0f:ab:e8:ae:4a:97:17:d3:
ba:d1:19:d6:b2:8e:85:d1:26:6d:97:de:d5:1c:68:13:93:e6:
61:24:ea:d7:93:1a:7e:da:11:bd:72:5f:11:7b:95:9d:c7:55:
90:e8:8f:43:ba:68:3a:7b:ff:c9:b1:e2:da:fe:5a:62:c7:07:
44:9a:ff:67:37:c1:e1:c1:91:56:31:f8:22:2c:30:17:ef:ae:
82:97:8e:55:ee:28:9c:7b:ff:7d:06:04:4e:c2:e5:ac:4f:57:
eb:9f:60:08:3b:77:f0:7d:e8:69:0e:2b:b4:73:b4:df:72:2e:
6f:7a:95:eb:30:f5:75:46:db:77:70:6d:36:ec:0d:9f:04:9f:
88:46:94:9d:1a:c1:94:72:fa:8a:88:9c:22:c6:17:41:16:cd:
77:d1:6a:85:9a:b8:53:07:0d:ad:f4:b9:bc:43:17:aa:cc:c5:
e8:51:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:21 2026 by rpki-client