
$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
File: 3136322e342e3233362e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: +tTGktskMMOWc8Ety/WMBt1UkK/mDxd3gLrUS6bHiGw=
Subject key identifier: 43:4B:B1:4A:22:DC:D0:4D:CC:3B:A2:93:6D:50:54:75:CD:FE:C7:33
Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Certificate serial: 4C180B4468D4051106EE4CF8DC60D27D00528C30
Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
Signing time: Tue 16 Jun 2026 07:23:51 +0000
ROA not before: Tue 16 Jun 2026 07:18:51 +0000
ROA not after: Tue 15 Jun 2027 07:23:51 +0000
asID: 197537
IP address blocks: 162.4.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 11:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:18:0b:44:68:d4:05:11:06:ee:4c:f8:dc:60:d2:7d:00:52:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Validity
Not Before: Jun 16 07:18:51 2026 GMT
Not After : Jun 15 07:23:51 2027 GMT
Subject: CN=434BB14A22DCD04DCC3BA2936D505475CDFEC733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:3e:ac:a4:a0:f1:cc:42:d1:80:b2:f9:60:
8e:c9:1f:9d:67:f9:22:eb:14:6f:98:22:79:cf:3c:
36:96:4e:4b:2e:dc:79:da:d8:dc:ff:44:b4:36:77:
c5:03:e4:80:bf:15:b3:dd:f1:db:0c:e4:47:ed:59:
59:72:c4:f6:52:bb:24:1a:6a:ce:01:7e:58:28:ed:
00:3f:75:8a:82:10:47:30:fd:69:a9:26:93:85:55:
34:ce:99:dc:a4:0b:b6:7d:06:d7:24:36:36:7f:41:
1a:40:38:6e:8c:79:99:10:10:f8:a9:2e:95:06:a0:
4a:fb:49:30:76:62:2d:80:47:d3:50:54:ce:e2:0b:
37:c8:74:ae:f8:74:40:eb:27:06:9f:ae:85:35:2b:
97:0c:2a:00:c8:da:8c:22:38:13:5b:7a:b6:02:be:
d5:c2:d2:28:22:1d:9d:cf:7c:ec:23:13:85:2a:c3:
64:10:00:94:9e:f8:1b:8f:30:db:41:2e:2f:5f:9d:
fe:ad:86:1f:78:1e:03:36:f5:58:70:43:4d:5e:f6:
bf:dd:fa:85:81:62:77:c1:81:a0:90:f7:12:5e:e3:
20:29:65:08:30:0d:f1:a6:a6:00:2b:18:02:36:f7:
79:43:fa:ea:18:34:dd:c6:62:a5:64:02:c4:77:62:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:B1:4A:22:DC:D0:4D:CC:3B:A2:93:6D:50:54:75:CD:FE:C7:33
X509v3 Authority Key Identifier:
keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.4.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d7:3f:12:1f:40:b2:75:c1:29:71:39:67:03:f4:6c:6a:f6:
95:74:00:8c:ed:de:ec:2c:43:6f:58:7f:08:69:1d:58:26:33:
ff:43:39:9e:2f:5b:db:04:e9:14:2b:7b:3b:60:29:3b:7f:01:
5d:c8:9a:38:93:a7:ee:44:90:87:b9:2f:a5:7a:a8:50:e2:a9:
2e:f0:b4:2f:38:c2:35:b7:c6:00:c3:62:f7:c0:f5:fe:a8:b4:
36:a1:29:41:86:3d:7e:0a:85:88:5c:4f:88:f9:57:6c:2f:6b:
29:b5:57:16:9e:d0:f1:f1:99:c6:dd:f2:ea:0b:6f:93:68:a2:
cd:a3:03:dd:4c:59:04:7b:93:b4:c3:df:ae:a0:34:d9:7f:f0:
75:3d:fe:3e:9a:ba:92:c1:39:16:3b:c3:67:1a:cd:37:96:94:
05:bd:f8:21:68:9f:b0:f1:a8:8d:df:ec:1c:48:ba:b8:9d:b7:
49:96:be:cf:0d:f3:e8:aa:fc:ff:f1:e9:f2:51:8e:de:19:57:
0c:bb:24:18:24:93:78:0e:f4:51:1a:66:3d:e9:10:2e:ac:ec:
55:fd:a7:55:9a:02:1d:47:53:53:8c:3c:a1:40:02:aa:b8:3d:
1e:d7:58:2e:11:14:7a:24:13:68:cc:e7:2a:60:42:be:5c:83:
fb:ad:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:58:42 2026 by rpki-client