
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203234313638.roa
File: 3130332e3133362e36302e302f32332d3234203d3e203234313638.roa (raw, json)
Hash identifier: i9xoeZqsITjFacUzsjFLUNP6o3EUEn66cfFPr0mFRl8=
Subject key identifier: 54:3F:27:95:F9:99:8E:B4:B4:BA:D1:DB:4C:15:08:F8:4E:1A:7D:B6
Certificate issuer: /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial: 4942557F3F532313CB9295F6E56716C30D614C80
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203234313638.roa
Signing time: Mon 11 May 2026 17:11:44 +0000
ROA not before: Mon 11 May 2026 17:06:44 +0000
ROA not after: Mon 10 May 2027 17:11:44 +0000
asID: 24168
IP address blocks: 103.136.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:42:55:7f:3f:53:23:13:cb:92:95:f6:e5:67:16:c3:0d:61:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Validity
Not Before: May 11 17:06:44 2026 GMT
Not After : May 10 17:11:44 2027 GMT
Subject: CN=543F2795F9998EB4B4BAD1DB4C1508F84E1A7DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:c8:43:ea:ff:8b:b1:d8:90:89:cb:55:d3:
8c:da:ff:c6:96:87:c6:e6:de:62:7e:d5:fd:47:55:
7c:7a:7d:19:76:dc:57:40:01:c7:eb:1e:0b:f7:4c:
62:1f:09:b6:2d:d3:61:6f:1c:d6:05:b5:08:6a:14:
31:72:2f:87:6f:66:2d:68:bf:84:3e:ec:5f:a2:ac:
75:da:48:ec:81:82:59:9a:14:66:92:31:5c:1c:3a:
f5:f0:bb:ad:c5:a1:cc:7f:fa:df:b5:6b:91:90:dc:
46:dc:3d:b6:83:31:fa:83:02:41:68:86:82:19:6b:
20:03:24:b8:80:a8:19:df:f2:6f:fc:9a:25:db:8a:
53:e6:a5:a0:3b:07:83:96:b7:73:dd:66:a6:68:0d:
4a:8a:54:a7:f7:1e:56:51:8f:f1:2d:4c:9e:39:2d:
86:e4:39:5a:3a:e3:f1:af:75:b0:95:06:00:2b:c7:
f5:31:17:4a:24:84:2c:ae:a1:23:5d:22:52:03:13:
e1:d5:0e:65:0b:5c:50:b5:3a:cf:9e:39:9c:ca:99:
0c:b5:5b:c3:10:48:ba:e1:00:36:9d:40:0f:f2:7a:
ba:74:a9:6f:7f:de:f3:d1:76:db:35:bd:c4:8b:39:
d9:83:45:69:52:db:06:3d:88:e8:2a:a6:dc:74:16:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:27:95:F9:99:8E:B4:B4:BA:D1:DB:4C:15:08:F8:4E:1A:7D:B6
X509v3 Authority Key Identifier:
keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203234313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:6a:57:b7:ad:c6:1c:69:ff:e0:81:cd:12:f7:3f:34:3c:38:
4a:84:3a:64:03:d1:6a:b5:e4:9c:eb:7b:01:c1:60:e6:3b:51:
c8:46:56:d9:ab:f4:d8:4e:df:3c:4c:d0:d5:a3:07:41:ca:60:
8d:c0:89:b0:8e:2f:2b:20:43:d0:86:26:6c:54:dc:04:dd:87:
99:36:6e:20:cf:d9:27:52:b9:c1:aa:20:c1:ae:a6:4f:1b:f9:
68:1e:0d:93:46:2e:50:c4:e9:e3:ae:42:16:96:19:1d:5b:94:
1f:c9:69:60:6e:7b:34:f9:ed:69:fb:a4:2e:35:f7:18:92:22:
65:ee:b0:7b:49:d1:9f:fb:63:6e:3c:2d:a7:6a:9e:d4:57:ed:
f5:00:32:29:65:ca:1c:22:ae:db:8f:ac:96:10:db:be:b0:e9:
26:d7:c4:c0:06:e7:60:29:0e:63:d0:65:83:b5:cd:f1:8e:32:
df:87:f2:07:94:5e:40:ed:00:c5:da:a5:84:31:d8:0c:ac:bb:
d9:81:d1:b7:15:8a:66:d2:d2:a1:9f:b5:ce:f8:4b:ac:c3:67:
6f:69:3e:36:4a:ff:fe:be:ad:21:3d:f0:2c:5a:a2:25:53:e0:
6e:d4:3b:01:f0:18:b7:d4:0c:13:cf:b2:8a:6a:7c:89:f3:6d:
18:a8:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:32 2026 by rpki-client