
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3332203d3e203138343234.roa
File: 3130332e3133362e36302e302f32332d3332203d3e203138343234.roa (raw, json)
Hash identifier: ErXO9J1JgRwsdgmmJ3JWL5TWTk2wTxPz+j37MLYy08A=
Subject key identifier: FD:42:09:02:0E:3D:B4:B6:48:80:E3:F5:FC:CF:61:B3:BE:6A:1D:41
Certificate issuer: /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial: 6FF96522B6A8527ED7328F8CC50C7D7E98051D5F
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3332203d3e203138343234.roa
Signing time: Thu 14 May 2026 10:34:08 +0000
ROA not before: Thu 14 May 2026 10:29:08 +0000
ROA not after: Thu 13 May 2027 10:34:08 +0000
asID: 18424
IP address blocks: 103.136.60.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 25 May 2026 17:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f9:65:22:b6:a8:52:7e:d7:32:8f:8c:c5:0c:7d:7e:98:05:1d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Validity
Not Before: May 14 10:29:08 2026 GMT
Not After : May 13 10:34:08 2027 GMT
Subject: CN=FD4209020E3DB4B64880E3F5FCCF61B3BE6A1D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:e5:bf:76:70:f7:a1:d3:5c:2f:e6:87:3c:
ec:6b:dc:9a:ae:08:b9:e0:59:b4:77:31:a4:20:29:
6b:de:ca:0b:d0:19:f4:49:33:22:56:1a:3d:7b:4f:
2a:12:a6:6c:15:f4:6c:be:49:41:61:ad:83:b2:a0:
49:4f:1e:44:8f:15:23:e6:1e:b8:3d:6a:48:2f:3d:
36:bf:4f:a0:05:5f:19:6e:37:f9:4d:e5:dd:b6:d4:
6e:eb:05:14:d1:f8:3c:56:40:d9:c4:d0:18:2f:df:
95:06:64:cc:0f:fd:5d:b8:c9:52:66:07:2b:f0:26:
e5:60:41:4d:05:0d:d1:0a:d1:25:a1:78:fe:3e:a5:
72:4e:91:0b:fc:dc:2c:de:85:39:97:e4:43:f9:eb:
69:1c:2d:82:d3:6b:92:b9:41:76:90:b0:d6:ce:42:
58:a8:38:83:e1:f3:2f:14:ac:e5:38:8e:d8:3e:1c:
f4:0e:d1:9c:ad:5c:0b:4b:cd:71:1e:f9:f6:6a:f3:
a4:2e:7c:e6:02:71:28:35:25:db:56:97:ce:73:0e:
e5:8b:61:8e:dc:e1:49:cf:65:3b:14:a8:51:a4:07:
71:35:51:81:2c:68:74:3a:ed:9f:52:6c:cb:8a:d8:
f3:15:cb:18:e8:c0:a1:c5:55:5a:49:f8:29:a2:c6:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:42:09:02:0E:3D:B4:B6:48:80:E3:F5:FC:CF:61:B3:BE:6A:1D:41
X509v3 Authority Key Identifier:
keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3332203d3e203138343234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.60.0/23
Signature Algorithm: sha256WithRSAEncryption
17:87:01:87:a0:4e:b5:2c:88:1d:21:89:3e:38:0b:c7:e2:e3:
9f:13:fd:95:b5:63:8c:63:81:2d:a4:31:db:d5:b1:8f:97:db:
08:4e:61:a6:20:19:8d:bb:ec:4f:76:b4:73:3d:1a:b2:e8:b3:
81:68:f4:8f:ca:c2:80:d9:d6:63:76:a1:7d:ff:bd:93:98:ba:
44:95:9e:46:97:9a:8f:8a:6f:0a:f2:f2:65:b2:7b:b1:3a:03:
40:bf:8e:9c:be:15:cd:16:96:7c:fa:a3:05:5b:07:43:4c:3f:
e3:10:60:ae:90:01:71:70:40:3e:ff:46:11:78:5f:07:ad:b6:
9e:53:0c:c1:04:62:61:87:85:f9:45:cf:c8:24:de:83:a5:43:
3f:7a:e4:3a:43:b0:00:a7:5b:87:16:d7:3a:c1:36:79:d6:b4:
96:40:d7:4c:0c:fd:cc:4d:3c:3a:96:82:31:08:94:09:9f:ec:
6e:3a:eb:5f:15:75:65:ef:f8:45:ea:ed:7d:d0:89:3f:50:9d:
39:10:3b:bd:68:fc:c5:8d:d0:f8:0e:b0:56:7a:51:eb:d0:a3:
81:5c:a0:8f:b1:bd:c8:06:08:71:81:6a:1a:f9:7b:8a:67:9f:
aa:56:d7:c8:8a:43:ac:62:1c:9c:19:56:7a:8f:b7:5b:b6:5f:
af:3a:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:31:38 2026 by rpki-client