
$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa
File: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier: t0sxX/J7DHyA7+RMNuIhT3/1j3L5qbFI7k7wb/onnz8=
Subject key identifier: 1E:3A:08:AB:C4:7A:F8:B8:F2:ED:20:52:E4:90:89:0F:04:93:3E:55
Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Certificate serial: 594B41B45861F78BC56781CEFA5A22910FBD40C3
Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa
Signing time: Thu 27 Aug 2026 17:24:04 +0000
ROA not before: Thu 27 Aug 2026 17:19:04 +0000
ROA not after: Thu 26 Aug 2027 17:24:04 +0000
asID: 216138
IP address blocks: 162.4.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Sep 2026 09:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4b:41:b4:58:61:f7:8b:c5:67:81:ce:fa:5a:22:91:0f:bd:40:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Validity
Not Before: Aug 27 17:19:04 2026 GMT
Not After : Aug 26 17:24:04 2027 GMT
Subject: CN=1E3A08ABC47AF8B8F2ED2052E490890F04933E55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:93:13:9e:cc:6d:60:28:52:94:38:5f:9f:
2f:db:c8:a8:fc:a6:e4:f3:9a:89:ed:e3:8b:d0:61:
d3:7a:76:db:02:05:f7:38:cb:c0:74:b4:4e:51:bb:
89:a9:31:96:a2:51:f1:3b:5a:83:d8:d7:ad:e9:03:
c1:a6:36:bb:23:d6:28:4c:43:b0:e3:20:3a:83:63:
02:30:55:24:af:30:81:53:33:63:5a:44:94:a9:22:
86:c8:2c:df:c6:64:a8:5f:6b:0a:73:54:2d:d0:14:
51:96:f9:3c:21:7e:34:d6:54:e4:6f:70:52:73:99:
31:36:02:d9:39:9d:8d:1c:ff:b2:b9:c7:14:e2:8a:
00:84:cc:ef:64:0b:79:90:c4:ef:cb:72:ea:e8:2b:
e2:d6:23:c0:2e:3f:e8:4c:5e:04:b8:e4:f9:fc:64:
ca:05:a3:5f:89:a3:ec:82:32:4f:9e:9d:7e:36:cd:
96:5d:12:08:f2:65:18:a8:91:c2:94:77:56:52:60:
96:d5:ee:c2:4a:64:ee:71:cd:66:4b:70:1c:3c:89:
ee:6b:4f:f6:ec:22:45:e9:ea:9a:b8:0f:32:05:89:
d4:dd:af:20:90:7c:e2:52:cc:96:18:65:83:de:7f:
41:7c:b5:00:a6:24:ee:fb:8d:9d:cf:7b:53:70:37:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:08:AB:C4:7A:F8:B8:F2:ED:20:52:E4:90:89:0F:04:93:3E:55
X509v3 Authority Key Identifier:
keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.4.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5c:07:c1:15:01:5c:21:7a:2c:d3:c5:20:f4:6f:35:2d:7b:
a9:ac:bc:46:24:99:fe:a2:7d:04:02:5d:96:47:62:5e:83:6c:
11:ad:84:6e:82:26:d2:31:85:be:1c:d7:fe:f9:2c:2e:74:46:
3f:31:32:0f:d8:9b:ec:9d:34:7d:3b:c9:8a:1e:64:73:2c:8f:
ac:f2:28:e4:d0:95:db:5f:11:5d:8c:23:11:cc:5e:9a:aa:38:
cc:88:be:cf:45:35:e7:7d:a6:8a:46:97:94:a0:1f:82:ad:8d:
95:9e:64:5b:81:0a:76:ff:8f:82:20:cb:5c:1e:dc:e4:be:79:
92:20:fe:fb:1a:e1:aa:01:d6:0f:c9:58:c9:a4:ed:c4:64:1a:
a3:8c:51:57:5d:98:b5:2e:ff:72:d5:8a:b1:18:c3:6a:c9:bf:
ef:f0:de:bc:da:30:fc:1a:e6:97:c8:be:15:87:68:88:26:f9:
c1:f6:9c:d2:f0:53:f1:87:c0:96:10:cd:41:d6:d3:e1:9d:93:
0e:63:ec:fb:e7:54:7d:79:14:29:b5:69:75:56:05:d9:ca:fa:
1b:73:49:c2:39:23:05:df:05:ee:35:e2:1d:2e:c5:9b:90:72:
13:f5:50:18:d3:01:9b:c7:4e:23:12:47:e3:43:27:31:17:fb:
30:c2:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:34:48 2026 by rpki-client