
$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa
File: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (raw, json)
Hash identifier: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=
Subject key identifier: 4E:FD:D1:E5:76:B3:06:57:A0:7B:5E:9A:92:B2:7F:D0:99:04:02:6F
Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial: 3C6CE93F9A8A7C56AE4FBF28AE0927EF2C909165
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa
Signing time: Mon 11 May 2026 17:40:42 +0000
ROA not before: Mon 11 May 2026 17:35:42 +0000
ROA not after: Mon 10 May 2027 17:40:42 +0000
asID: 131611
IP address blocks: 2401:1780:1316::/48 maxlen: 56
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6c:e9:3f:9a:8a:7c:56:ae:4f:bf:28:ae:09:27:ef:2c:90:91:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Validity
Not Before: May 11 17:35:42 2026 GMT
Not After : May 10 17:40:42 2027 GMT
Subject: CN=4EFDD1E576B30657A07B5E9A92B27FD09904026F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:3f:01:29:08:d5:09:c0:ae:e5:a5:5e:0f:
7f:73:5f:2c:e5:19:8e:9f:64:04:e5:f5:65:83:c3:
cd:67:8e:43:65:70:77:fe:ee:b9:d8:2b:c6:f1:3e:
02:e6:ee:e7:43:81:c2:ba:3d:63:8d:6f:a6:ea:32:
ed:36:9e:00:87:3c:8e:2c:85:55:b1:03:7f:48:6c:
e7:60:a8:d7:58:c1:d6:5e:cf:d3:84:3f:3f:f1:f6:
90:88:67:74:c8:6f:79:38:99:58:32:24:35:ab:34:
6b:d3:d8:90:07:ec:ec:9b:dc:8f:83:b0:b7:b8:29:
5b:8f:f1:c9:8c:76:ed:b4:3f:e8:17:c5:ac:ae:fb:
23:3b:84:7e:c4:29:ea:2e:3f:f6:ad:4b:36:b4:92:
10:c2:b8:e5:f1:48:f8:e4:7a:cd:b6:83:7f:60:a4:
d8:9d:42:b9:47:93:ef:6d:2b:78:9b:70:fa:fd:10:
13:43:0f:bb:c1:ce:92:8f:17:8d:08:d0:3d:11:b1:
4b:47:bd:33:7b:c5:3b:97:01:99:f7:a8:67:e4:16:
44:04:44:22:cb:40:d8:47:31:ae:c4:b0:86:f4:ac:
ad:6c:40:2d:dc:12:a5:2d:04:a3:6a:92:d1:53:96:
06:6d:5d:da:10:11:8e:34:48:bb:93:5b:90:1a:c8:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FD:D1:E5:76:B3:06:57:A0:7B:5E:9A:92:B2:7F:D0:99:04:02:6F
X509v3 Authority Key Identifier:
keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:1780:1316::/48
Signature Algorithm: sha256WithRSAEncryption
63:f2:09:d3:3e:94:9e:13:bf:9d:11:f1:14:24:b7:1b:02:ec:
23:9e:08:fd:6c:e4:7f:43:61:46:4a:72:6a:8c:5a:7f:bd:dc:
a5:92:12:be:a0:89:c1:d6:38:59:b2:42:d3:22:52:15:c2:a2:
53:be:f6:70:d3:4b:79:fb:4f:3a:ae:84:25:da:43:b4:09:c8:
26:21:ae:6a:af:6d:91:c4:18:2b:d9:2f:c5:cb:83:1a:2a:d3:
90:18:c5:71:5d:1c:97:ed:87:0f:fa:3e:10:c0:4d:70:78:06:
4e:3b:9a:06:88:19:e8:ca:5d:02:80:7b:e1:27:82:fd:7f:37:
d5:9a:a6:7f:30:34:dc:b4:1d:0a:d0:ac:81:9f:d5:c3:2f:e1:
41:c3:0c:40:fa:87:b4:e8:6a:2f:4d:7a:60:b7:66:6d:dd:29:
19:d1:d6:f6:f0:4e:cb:65:e9:89:de:15:5b:54:f6:06:d9:88:
94:10:b8:da:36:f3:91:16:33:4c:b6:6d:02:0b:ac:6d:fe:26:
9c:56:78:de:91:89:5d:7c:a6:76:f7:73:1b:7b:72:11:fe:b6:
27:5c:79:fb:7e:59:bd:39:d1:04:9d:08:0c:97:9b:4b:c1:7f:
4f:8d:0f:18:a5:5b:8c:2d:3e:64:1b:1e:ba:25:75:20:7e:02:
9a:e0:50:23
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUPGzpP5qKfFauT78orgkn7yyQkWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwN0M4QjhGQUIyQUY3ODVFNDQ5RjY5NTlBMzQzQzEx
RjNDMkY3RDAeFw0yNjA1MTExNzM1NDJaFw0yNzA1MTAxNzQwNDJaMDMxMTAvBgNV
BAMTKDRFRkREMUU1NzZCMzA2NTdBMDdCNUU5QTkyQjI3RkQwOTkwNDAyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38j8BKQjVCcCu5aVeD39zXyzl
GY6fZATl9WWDw81njkNlcHf+7rnYK8bxPgLm7udDgcK6PWONb6bqMu02ngCHPI4s
hVWxA39IbOdgqNdYwdZez9OEPz/x9pCIZ3TIb3k4mVgyJDWrNGvT2JAH7Oyb3I+D
sLe4KVuP8cmMdu20P+gXxayu+yM7hH7EKeouP/atSza0khDCuOXxSPjkes22g39g
pNidQrlHk+9tK3ibcPr9EBNDD7vBzpKPF40I0D0RsUtHvTN7xTuXAZn3qGfkFkQE
RCLLQNhHMa7EsIb0rK1sQC3cEqUtBKNqktFTlgZtXdoQEY40SLuTW5AayK+7AgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUTv3R5XazBlege16akrJ/0JkEAm8wHwYDVR0j
BBgwFoAUtAfIuPqyr3heRJ9pWaNDwR88L30wDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMC9CNDA3QzhCOEZBQjJBRjc4NUU0NDlGNjk1OUEzNDNDMTFGM0MyRjdELmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0I0MDdDOEI4RkFCMkFGNzg1RTQ0OUY2OTU5
QTM0M0MxMUYzQzJGN0QuY2VyMIGIBggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuG
bHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZPTkcvMC8zMjM0MzAz
MTNhMzEzNzM4MzAzYTMxMzMzMTM2M2EzYTJmMzQzODJkMzUzNjIwM2QzZTIwMzEz
MzMxMzYzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJAEXgBMWMA0GCSqGSIb3DQEBCwUAA4IBAQBj
8gnTPpSeE7+dEfEUJLcbAuwjngj9bOR/Q2FGSnJqjFp/vdylkhK+oInB1jhZskLT
IlIVwqJTvvZw00t5+086roQl2kO0CcgmIa5qr22RxBgr2S/Fy4MaKtOQGMVxXRyX
7YcP+j4QwE1weAZOO5oGiBnoyl0CgHvhJ4L9fzfVmqZ/MDTctB0K0KyBn9XDL+FB
wwxA+oe06GovTXpgt2Zt3SkZ0db28E7LZemJ3hVbVPYG2YiUELjaNvORFjNMtm0C
C6xt/iacVnjekYldfKZ293Mbe3IR/rYnXHn7flm9OdEEnQgMl5tLwX9PjQ8YpVuM
LT5kGx66JXUgfgKa4FAj
-----END CERTIFICATE-----
Generated at Wed May 13 21:10:01 2026 by rpki-client