
$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa
File: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=
Subject key identifier: 67:E5:2B:51:00:CE:07:F8:75:7F:49:C2:25:38:84:B4:E1:29:85:C4
Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
Certificate serial: 7ACB81CFC9FDEE8C884D044CD8DE33B4D74EE3F5
Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:20:16 +0000
ROA not before: Mon 11 May 2026 17:15:16 +0000
ROA not after: Mon 10 May 2027 17:20:16 +0000
asID: 134823
IP address blocks: 103.14.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl
rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:cb:81:cf:c9:fd:ee:8c:88:4d:04:4c:d8:de:33:b4:d7:4e:e3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
Validity
Not Before: May 11 17:15:16 2026 GMT
Not After : May 10 17:20:16 2027 GMT
Subject: CN=67E52B5100CE07F8757F49C2253884B4E12985C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:0d:e5:d6:bf:bb:04:d6:e7:fd:c0:27:57:
65:7b:0c:18:33:10:e5:67:88:97:af:34:63:b6:79:
a7:0a:94:87:1c:34:10:ef:0f:6a:ea:ad:06:cb:5f:
06:9b:ea:36:2e:5f:23:bd:a4:d4:4f:77:39:47:fc:
14:93:aa:43:e0:50:c6:c9:43:34:4b:70:7a:cc:59:
a5:f9:ce:1d:dc:f4:ec:f3:97:bc:8a:1f:63:fc:fa:
9e:2a:48:7e:ae:e9:14:c5:07:67:f5:3b:74:6a:c0:
f0:01:9b:13:98:91:c4:1c:69:14:96:fb:9c:48:a5:
cf:50:4a:06:83:5e:81:66:e6:65:4b:d3:e5:32:68:
cb:05:1d:b6:4c:7e:2b:35:83:19:56:b0:2e:fc:31:
ec:7d:b2:3c:7f:d1:90:3f:2a:45:67:07:64:96:55:
8e:4f:a8:19:cd:b0:bf:94:8d:69:98:9b:30:15:12:
bb:52:84:06:d0:c1:58:94:92:76:3a:3d:d4:79:96:
4c:cd:8d:22:f0:62:b5:76:d1:40:ed:02:c5:e3:c1:
30:b0:29:4c:f3:02:fa:9d:60:1a:af:9c:8e:90:94:
08:3b:a0:21:36:bb:5f:5b:eb:c3:e4:de:e1:7d:c6:
05:64:23:33:99:a0:ab:be:4e:4a:81:37:48:36:90:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:2B:51:00:CE:07:F8:75:7F:49:C2:25:38:84:B4:E1:29:85:C4
X509v3 Authority Key Identifier:
keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.14.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:92:43:e6:47:6a:30:86:5f:68:7c:eb:f3:fe:4e:ea:98:8d:
9b:8f:e7:56:df:a2:1c:e9:6c:52:b2:2b:f0:8c:1f:af:e4:75:
ae:59:04:25:9f:c4:61:5f:8a:6d:50:b7:6c:66:2b:44:bc:1d:
b7:b0:38:21:e7:e0:51:7e:46:75:4c:09:38:72:38:f6:b5:99:
0d:07:cb:9d:eb:4b:5f:a0:2b:e7:4d:8c:b3:88:2f:55:c2:e9:
c0:4d:61:05:38:e7:31:28:57:1d:4a:82:40:1a:0d:d3:98:c2:
cd:c0:a0:34:7a:30:bc:05:0f:d4:2d:47:26:7a:fa:e0:e8:84:
0d:3c:cd:d3:09:16:82:e3:c1:65:55:d9:20:74:49:d2:73:a7:
19:da:bb:98:20:62:29:ea:e9:9c:38:47:db:3b:de:5e:89:87:
79:41:27:64:b3:6a:a2:b6:eb:67:0a:8b:f5:2e:41:ba:4a:35:
92:e0:6e:11:46:59:d0:79:20:93:b6:f0:39:8b:e6:65:f8:95:
62:ad:8a:34:b5:7e:71:d0:ba:34:6b:4e:86:67:af:d4:5b:cd:
cc:ab:f2:f1:13:5f:21:7c:70:07:11:86:d3:e9:44:c5:e5:98:
1f:2a:ef:23:70:af:97:fb:f1:74:e6:61:53:b2:7f:60:b6:d0:
0f:d8:6e:49
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUesuBz8n97oyITQRM2N4ztNdO4/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2
NzA2RTNBQTAeFw0yNjA1MTExNzE1MTZaFw0yNzA1MTAxNzIwMTZaMDMxMTAvBgNV
BAMTKDY3RTUyQjUxMDBDRTA3Rjg3NTdGNDlDMjI1Mzg4NEI0RTEyOTg1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW/g3l1r+7BNbn/cAnV2V7DBgz
EOVniJevNGO2eacKlIccNBDvD2rqrQbLXwab6jYuXyO9pNRPdzlH/BSTqkPgUMbJ
QzRLcHrMWaX5zh3c9Ozzl7yKH2P8+p4qSH6u6RTFB2f1O3RqwPABmxOYkcQcaRSW
+5xIpc9QSgaDXoFm5mVL0+UyaMsFHbZMfis1gxlWsC78Mex9sjx/0ZA/KkVnB2SW
VY5PqBnNsL+UjWmYmzAVErtShAbQwViUknY6PdR5lkzNjSLwYrV20UDtAsXjwTCw
KUzzAvqdYBqvnI6QlAg7oCE2u19b68Pk3uF9xgVkIzOZoKu+TkqBN0g2kFLLAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUZ+UrUQDOB/h1f0nCJTiEtOEphcQwHwYDVR0j
BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv
MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx
RDk5NjcwNkUzQUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzMxMzAzMzJlMzEzNDJl
MzEzNzMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzM0MzgzMjMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZw6qMA0GCSqGSIb3DQEBCwUAA4IBAQBqkkPmR2owhl9ofOvz/k7qmI2b
j+dW36Ic6WxSsivwjB+v5HWuWQQln8RhX4ptULdsZitEvB23sDgh5+BRfkZ1TAk4
cjj2tZkNB8ud60tfoCvnTYyziC9VwunATWEFOOcxKFcdSoJAGg3TmMLNwKA0ejC8
BQ/ULUcmevrg6IQNPM3TCRaC48FlVdkgdEnSc6cZ2ruYIGIp6umcOEfbO95eiYd5
QSdks2qitutnCov1LkG6SjWS4G4RRlnQeSCTtvA5i+Zl+JVirYo0tX5x0Lo0a06G
Z6/UW83Mq/LxE18hfHAHEYbT6UTF5ZgfKu8jcK+X+/F05mFTsn9gttAP2G5J
-----END CERTIFICATE-----
Generated at Wed May 13 21:48:39 2026 by rpki-client