
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
File: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: rkewqH+q2MmefgvP9xLiHPbeb7043RwX6NEiRy6AeiQ=
Subject key identifier: 69:A9:D1:31:1D:F0:57:20:13:81:07:7F:F5:02:DE:D9:97:A2:47:E7
Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Certificate serial: 4AA7227D74A52C223A3F8929AAF68A78C071A954
Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
Signing time: Thu 27 Aug 2026 17:24:03 +0000
ROA not before: Thu 27 Aug 2026 17:19:03 +0000
ROA not after: Thu 26 Aug 2027 17:24:03 +0000
asID: 197537
IP address blocks: 162.4.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 18:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a7:22:7d:74:a5:2c:22:3a:3f:89:29:aa:f6:8a:78:c0:71:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Validity
Not Before: Aug 27 17:19:03 2026 GMT
Not After : Aug 26 17:24:03 2027 GMT
Subject: CN=69A9D1311DF057201381077FF502DED997A247E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:db:06:93:59:2f:61:e4:33:d5:9f:c0:48:
28:a0:a7:26:94:6b:70:11:e0:10:e9:6c:f3:55:26:
0a:84:91:3d:69:1c:bc:70:f6:5c:ad:1f:c5:b2:7c:
55:e2:6a:0a:3f:f6:7f:4c:81:53:83:e6:14:13:c6:
f6:43:d9:c6:f9:53:85:89:8c:29:f2:a6:6a:f0:a1:
0b:f8:f2:1d:83:16:7d:9b:26:76:9b:6c:40:bf:f2:
96:41:22:81:52:58:64:d6:2c:6c:40:38:0e:9c:e3:
ae:f7:40:78:94:f5:3a:16:2e:a5:d7:b4:2c:a6:19:
1f:2f:cc:bf:57:a0:8a:f5:56:09:d6:6b:0b:42:2a:
0a:24:f2:d4:1b:c2:63:e3:76:46:eb:c4:0d:ef:67:
83:8d:fe:05:06:95:c6:eb:05:28:a3:c4:5a:b0:5b:
bc:0c:72:b8:e7:0a:2b:71:a0:13:61:be:d4:48:d2:
e6:b9:53:b5:62:a3:14:a4:a9:8a:7c:fc:59:30:19:
d5:ad:8d:57:96:1d:f3:62:a9:8f:e3:4b:0b:ff:e0:
4c:c7:3e:94:ec:85:f4:71:75:ca:d6:97:48:a4:18:
43:d0:e6:0f:50:57:17:6d:f6:4c:31:7f:70:d4:ae:
37:1c:ee:6d:e8:d2:63:09:b1:39:cb:67:1d:a0:cd:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:D1:31:1D:F0:57:20:13:81:07:7F:F5:02:DE:D9:97:A2:47:E7
X509v3 Authority Key Identifier:
keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.4.236.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0b:33:9d:c2:7e:fa:42:0f:1e:49:a7:b6:ea:da:1b:a8:8c:
f3:9f:52:b9:06:cd:28:96:67:8d:b7:c6:b4:49:0c:0b:40:7d:
e2:32:36:8d:bd:ff:84:0c:93:1f:82:04:9e:e7:3f:a7:77:21:
91:27:ae:ef:da:40:bc:e5:de:ae:2e:4d:98:bf:9d:b7:fa:5b:
0c:cf:de:6c:52:84:31:df:b1:6b:b7:d6:e0:8f:f2:7c:4e:8c:
fe:4e:bb:4d:32:72:b2:46:92:f7:92:68:52:57:e3:7b:06:6b:
f9:2c:e7:5e:12:3f:70:64:d6:b5:c9:49:fc:4b:46:29:b9:dd:
b7:9e:5d:ec:b7:93:c5:b8:25:eb:ea:bb:e8:39:41:7b:a0:c7:
0f:69:49:3b:b8:2a:99:9c:b7:f7:1e:92:fd:f2:d1:a0:d4:53:
2d:04:fa:a4:9b:2d:bc:d3:b9:09:c5:76:ef:b2:87:1d:55:a2:
f1:40:6c:82:82:58:0d:e9:db:b3:4c:c0:e2:cc:f0:83:b2:5b:
a5:69:47:81:f5:24:8f:fa:be:40:b7:d7:c9:76:20:9f:af:ce:
24:ff:54:00:ba:68:60:72:f9:df:c7:1e:97:e6:61:56:0d:4b:
77:af:83:3e:9f:4b:d8:5a:ce:8f:af:a4:db:92:6c:6c:6b:73:
71:df:de:eb
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUSqcifXSlLCI6P4kpqvaKeMBxqVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx
MjUwNjIyODAeFw0yNjA4MjcxNzE5MDNaFw0yNzA4MjYxNzI0MDNaMDMxMTAvBgNV
BAMTKDY5QTlEMTMxMURGMDU3MjAxMzgxMDc3RkY1MDJERUQ5OTdBMjQ3RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZNsGk1kvYeQz1Z/ASCigpyaU
a3AR4BDpbPNVJgqEkT1pHLxw9lytH8WyfFXiago/9n9MgVOD5hQTxvZD2cb5U4WJ
jCnypmrwoQv48h2DFn2bJnabbEC/8pZBIoFSWGTWLGxAOA6c4673QHiU9ToWLqXX
tCymGR8vzL9XoIr1VgnWawtCKgok8tQbwmPjdkbrxA3vZ4ON/gUGlcbrBSijxFqw
W7wMcrjnCitxoBNhvtRI0ua5U7VioxSkqYp8/FkwGdWtjVeWHfNiqY/jSwv/4EzH
PpTshfRxdcrWl0ikGEPQ5g9QVxdt9kwxf3DUrjcc7m3o0mMJsTnLZx2gzYZ5AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUaanRMR3wVyATgQd/9QLe2ZeiR+cwHwYDVR0j
BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL
LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz
NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl
MzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM3MzUzMzM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAogTsMA0GCSqGSIb3DQEBCwUAA4IBAQB0CzOdwn76Qg8eSae26tobqIzz
n1K5Bs0olmeNt8a0SQwLQH3iMjaNvf+EDJMfggSe5z+ndyGRJ67v2kC85d6uLk2Y
v523+lsMz95sUoQx37Frt9bgj/J8Toz+TrtNMnKyRpL3kmhSV+N7Bmv5LOdeEj9w
ZNa1yUn8S0Ypud23nl3st5PFuCXr6rvoOUF7oMcPaUk7uCqZnLf3HpL98tGg1FMt
BPqkmy2807kJxXbvsocdVaLxQGyCglgN6duzTMDizPCDslulaUeB9SSP+r5At9fJ
diCfr84k/1QAumhgcvnfxx6X5mFWDUt3r4M+n0vYWs6Pr6Tbkmxsa3Nx397r
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:47:44 2026 by rpki-client