
$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa
File: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (raw, json)
Hash identifier: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=
Subject key identifier: 6F:B7:45:E5:34:74:2E:C2:79:B9:49:AA:1D:D8:4E:4C:20:48:6C:E6
Certificate issuer: /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial: 2592C8CA7BD895F5FE88AC4627484A45E45A75FB
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa
Signing time: Mon 11 May 2026 17:05:51 +0000
ROA not before: Mon 11 May 2026 17:00:51 +0000
ROA not after: Mon 10 May 2027 17:05:51 +0000
asID: 133747
IP address blocks: 103.119.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:92:c8:ca:7b:d8:95:f5:fe:88:ac:46:27:48:4a:45:e4:5a:75:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
Validity
Not Before: May 11 17:00:51 2026 GMT
Not After : May 10 17:05:51 2027 GMT
Subject: CN=6FB745E534742EC279B949AA1DD84E4C20486CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:02:3d:3a:d2:d7:d9:a6:f8:8b:cc:1c:a2:
98:ee:82:4a:9a:af:bf:89:86:8d:a4:db:13:96:61:
f9:9f:bb:9d:93:c1:1c:1f:5d:c6:73:92:2e:e2:ee:
ce:07:7b:7f:00:3d:44:be:1b:2a:00:2f:1e:f5:e7:
7f:0b:38:43:0f:59:47:e8:81:87:f9:17:a5:4c:56:
c4:aa:28:e3:81:19:b9:bc:2f:2f:16:6f:1e:66:b3:
5e:25:c6:5f:81:93:74:9e:76:c1:5f:a3:d7:2c:c5:
38:60:11:70:f0:18:c1:4a:70:eb:44:4e:b7:d5:92:
25:d2:81:ba:55:44:88:ce:c3:e0:87:dc:16:8f:ff:
94:c8:0d:1d:e1:e6:3b:47:76:80:e5:d7:a0:1a:7e:
6e:94:74:86:a1:7c:1b:ff:33:61:dd:0f:91:a1:f4:
47:f9:bb:b3:ab:a1:66:af:79:23:8e:71:49:8b:72:
18:21:11:77:b9:66:b7:79:25:f8:2b:40:9a:70:b1:
69:cc:53:00:d9:a8:78:8a:64:af:a7:18:56:ed:16:
dc:de:2d:4e:a8:6a:33:8b:50:0a:8b:84:00:eb:81:
05:06:55:2a:94:06:1b:78:07:77:f4:b1:31:53:db:
60:e1:4d:c1:0d:29:3c:fd:4a:ee:96:07:c9:6d:1e:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:45:E5:34:74:2E:C2:79:B9:49:AA:1D:D8:4E:4C:20:48:6C:E6
X509v3 Authority Key Identifier:
keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
39:fe:e9:3f:75:66:e7:ba:f1:1f:bc:e9:35:e9:8b:91:62:a3:
8c:86:e0:4d:2d:0f:e1:c5:30:da:d2:c8:38:66:f9:b0:06:b0:
6a:65:29:82:cb:ae:d1:26:5c:a8:f3:ed:b9:d6:ee:71:c6:99:
07:03:a3:57:97:f8:82:55:88:86:85:bb:cc:7f:91:08:fc:77:
1a:aa:45:a1:a6:a4:40:49:21:c5:20:65:8b:2d:77:9c:50:65:
47:35:85:e7:b0:4b:64:39:d9:9a:5c:29:6f:83:9c:1d:0f:15:
b4:a3:3f:7b:08:2c:c4:d7:6a:60:9f:fe:cc:1d:48:72:a4:24:
6f:3d:9c:56:d6:57:03:4f:39:ba:68:e4:70:92:4e:95:23:e4:
1e:b8:8a:ff:6b:bd:36:3e:a2:cc:cb:42:32:f4:5c:0b:1e:09:
51:7c:b4:ce:4a:bf:64:0e:e1:b2:86:7c:4e:dc:fe:b1:0d:d8:
7e:48:d6:8a:34:f5:95:18:5a:f8:0e:5a:1c:5e:0e:20:27:16:
33:ec:17:fb:50:0b:ca:4e:8e:48:d4:30:35:4f:6d:d7:ed:eb:
bc:39:b8:d4:36:02:71:08:22:6a:a3:fc:13:dd:10:3b:12:d7:
91:f6:97:76:26:9f:db:ca:8a:94:d5:d6:d6:17:0c:f8:0c:cc:
f8:0a:f4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:59 2026 by rpki-client