
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa
File: 3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier: MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=
Subject key identifier: 1C:BB:30:28:A3:20:1B:75:99:7F:A0:12:C6:B9:C8:97:4C:12:15:2B
Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial: 52FFBA1E5966B01B153BA69657C804ED0F5E8F51
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa
Signing time: Thu 28 May 2026 09:43:51 +0000
ROA not before: Thu 28 May 2026 09:38:51 +0000
ROA not after: Thu 27 May 2027 09:43:51 +0000
asID: 7536
IP address blocks: 165.101.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 01:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ff:ba:1e:59:66:b0:1b:15:3b:a6:96:57:c8:04:ed:0f:5e:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Validity
Not Before: May 28 09:38:51 2026 GMT
Not After : May 27 09:43:51 2027 GMT
Subject: CN=1CBB3028A3201B75997FA012C6B9C8974C12152B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:7c:24:f7:56:03:88:67:89:10:06:70:63:
1d:40:32:11:16:db:62:90:5e:0b:0a:f7:fb:70:6b:
08:20:20:cc:05:ee:20:fe:45:9e:00:1a:a1:f4:8d:
a2:34:94:d4:31:3f:44:63:ad:d9:c1:d5:d7:fb:af:
6c:fa:17:9e:e7:ed:67:a6:ff:43:5a:a6:82:45:1e:
e5:a1:94:1b:fa:d6:66:2f:2f:a6:69:33:7d:37:d2:
8a:b1:ef:84:c5:66:a6:a2:0c:a1:d7:63:53:36:6c:
d8:d3:71:92:20:dd:05:bc:f8:28:3f:fe:c0:25:75:
70:44:4b:b4:da:57:e9:30:11:29:ed:1e:80:13:ba:
46:a5:7f:44:99:ab:f8:b2:c4:5c:f9:13:7a:b2:0b:
23:00:f7:5c:47:f3:fb:ca:3f:1e:63:25:79:59:3f:
e1:f8:0c:e6:e3:6d:20:22:08:0c:63:5b:63:ab:4a:
b4:2a:d2:6e:ab:33:e2:2c:bc:51:b4:af:5c:4b:19:
10:5c:e6:59:cd:db:f1:62:c4:b5:b1:32:63:8a:b6:
65:db:50:a5:d8:f3:37:b6:88:85:b5:f0:b8:9d:f8:
c9:e4:c0:ea:1d:b5:22:15:1d:c3:8e:e1:f5:57:91:
5f:3e:6d:d8:ac:48:99:a6:49:22:07:ca:31:00:ce:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:30:28:A3:20:1B:75:99:7F:A0:12:C6:B9:C8:97:4C:12:15:2B
X509v3 Authority Key Identifier:
keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.28.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:43:c8:a2:5c:32:44:b3:36:a7:34:fc:90:4f:19:41:a9:b9:
97:eb:50:d8:df:e9:a8:7b:60:27:74:8f:46:90:33:86:df:ed:
d3:dd:e0:9d:9c:64:67:75:27:1e:c4:42:2c:c9:99:88:08:55:
c6:cc:d0:93:cc:e4:d5:f3:c5:a8:7e:55:03:a6:df:2b:84:c3:
61:f2:32:ea:63:2f:59:67:4c:5e:82:9f:43:f6:61:dc:1e:1f:
75:4c:7b:b4:69:5e:48:2d:ad:aa:a8:9b:de:b3:74:1f:ff:01:
35:92:f6:cc:c5:78:a1:27:48:0a:76:2d:9f:b0:d5:97:40:e6:
b7:b9:fc:4f:72:8c:12:70:f7:59:67:ac:a6:1d:c1:e1:5d:8c:
13:e5:56:3c:78:99:e4:03:b1:d4:e8:04:9b:12:91:81:26:8d:
11:0d:26:9e:fe:f4:8e:83:9f:37:08:16:bb:bf:2a:fb:41:20:
fb:2e:3e:43:2a:fe:95:0a:28:1b:e9:53:d7:5e:2e:e6:49:c2:
b5:50:15:6a:43:1b:e4:66:2e:75:31:04:e0:59:59:c5:74:72:
75:3a:12:56:42:8b:18:ef:91:f2:9c:06:ae:8a:80:ca:4b:2b:
62:55:03:28:46:bd:de:5a:a5:06:5c:00:d9:2b:cb:46:09:14:
51:84:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:02 2026 by rpki-client