
$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa
File: 323430343a386363303a3a2f33322d3332203d3e20313331363431.roa (raw, json)
Hash identifier: TTxEQWNw4Ylcg7PTpqG/OPT7xRY1c5reCSbYb5rmm9c=
Subject key identifier: 12:29:5B:80:48:F0:12:84:05:77:38:30:D4:E8:2F:58:4D:A6:05:1A
Certificate issuer: /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial: 63FDF02C551C9428D5F33C16FECF02037DAD4C9C
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa
Signing time: Mon 11 May 2026 16:45:52 +0000
ROA not before: Mon 11 May 2026 16:40:52 +0000
ROA not after: Mon 10 May 2027 16:45:52 +0000
asID: 131641
IP address blocks: 2404:8cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fd:f0:2c:55:1c:94:28:d5:f3:3c:16:fe:cf:02:03:7d:ad:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Validity
Not Before: May 11 16:40:52 2026 GMT
Not After : May 10 16:45:52 2027 GMT
Subject: CN=12295B8048F0128405773830D4E82F584DA6051A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:25:c0:0f:8d:cd:e6:58:8c:39:e0:3b:73:
59:75:a1:27:ac:22:db:d3:54:c2:cb:92:14:56:cd:
3f:6e:b1:70:f6:c1:70:49:9a:07:b3:b7:86:cc:47:
7c:42:a5:1b:94:96:63:84:37:b0:fa:64:fd:3d:83:
21:bd:b4:7e:3d:85:8c:a5:38:85:e8:c0:72:1e:23:
80:ac:c4:ca:27:bf:d1:38:4b:a6:e3:c5:2d:91:32:
f2:6b:d7:f3:4d:64:64:bc:08:a6:78:05:bd:61:1d:
20:cc:36:25:52:df:5d:ed:72:bc:3d:f7:95:64:04:
8f:10:6b:7c:8b:84:12:b5:d6:82:e4:2e:c7:d0:b1:
50:c5:37:8d:0b:1c:44:fc:be:dc:81:26:95:ea:37:
b0:86:78:9a:9f:e3:29:d8:92:88:ed:18:a3:cf:c7:
be:8b:cc:b1:bb:73:0c:ad:30:da:89:75:15:d6:a2:
81:b3:51:2b:8e:ad:20:9a:00:0d:4b:c1:ab:e5:f3:
e8:09:9f:f9:3d:ea:0e:b2:e5:2a:24:d7:dc:7e:08:
72:81:eb:e4:21:1c:46:ed:d2:fb:3e:ee:63:86:f9:
34:24:51:1a:a0:42:06:5e:61:94:19:06:21:f0:3c:
39:53:24:5e:b0:76:f0:33:cc:51:f5:cc:65:e7:bd:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:5B:80:48:F0:12:84:05:77:38:30:D4:E8:2F:58:4D:A6:05:1A
X509v3 Authority Key Identifier:
keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:ee:c9:30:34:bc:bc:04:f7:3c:c0:20:d7:82:32:ed:ff:6c:
bc:12:72:ae:72:59:0f:f1:96:d3:9c:77:04:4a:cd:bd:4d:8e:
84:1d:20:a4:38:0e:57:2b:f4:54:dc:16:a8:52:6e:f8:95:d3:
ff:0f:02:8b:8d:8f:0a:30:e5:e0:5b:75:28:b2:21:82:9e:86:
ae:b7:39:29:87:0f:6f:c3:ed:61:52:43:c4:13:e2:cc:81:15:
b2:da:61:30:d7:83:1b:56:b5:e6:dc:71:5a:73:4b:f7:89:6f:
8d:b6:84:a6:a4:85:32:04:21:75:a3:c3:e4:ba:f6:1e:c1:a4:
1b:5c:06:50:5f:7d:00:34:48:ba:7b:b0:89:20:51:3e:a7:a8:
c6:73:a8:b8:68:49:4c:7f:a4:b6:0a:3e:80:d7:9f:a4:a4:94:
a2:52:91:2d:63:66:39:c8:72:32:5e:f6:5e:44:0b:8e:6d:b1:
94:19:41:f4:e6:cd:b2:42:54:f2:4d:92:54:2e:d7:f4:f4:3b:
53:8a:60:c7:03:54:4b:fc:cd:17:31:b9:8c:51:ca:29:5a:06:
1b:cf:66:fb:a2:95:7d:cf:ee:ea:c3:7a:67:7b:3b:0c:6f:c1:
b9:a7:fa:85:ab:25:b6:06:f8:5d:5d:88:33:03:6e:27:7d:c9:
b4:4a:c7:7b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUY/3wLFUclCjV8zwW/s8CA32tTJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdDQ0U0OUY0QTlDMTQ4NTJCM0EzMDQzNTlEM0NCMUU0
RTMzMkMzRTAeFw0yNjA1MTExNjQwNTJaFw0yNzA1MTAxNjQ1NTJaMDMxMTAvBgNV
BAMTKDEyMjk1QjgwNDhGMDEyODQwNTc3MzgzMEQ0RTgyRjU4NERBNjA1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8iXAD43N5liMOeA7c1l1oSes
ItvTVMLLkhRWzT9usXD2wXBJmgezt4bMR3xCpRuUlmOEN7D6ZP09gyG9tH49hYyl
OIXowHIeI4CsxMonv9E4S6bjxS2RMvJr1/NNZGS8CKZ4Bb1hHSDMNiVS313tcrw9
95VkBI8Qa3yLhBK11oLkLsfQsVDFN40LHET8vtyBJpXqN7CGeJqf4ynYkojtGKPP
x76LzLG7cwytMNqJdRXWooGzUSuOrSCaAA1Lwavl8+gJn/k96g6y5Sok19x+CHKB
6+QhHEbt0vs+7mOG+TQkURqgQgZeYZQZBiHwPDlTJF6wdvAzzFH1zGXnvb5zAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUEilbgEjwEoQFdzgw1OgvWE2mBRowHwYDVR0j
BBgwFoAUJ8zkn0qcFIUrOjBDWdPLHk4zLD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdULzAv
MjdDQ0U0OUY0QTlDMTQ4NTJCM0EzMDQzNTlEM0NCMUU0RTMzMkMzRS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8yN0NDRTQ5RjRBOUMxNDg1MkIzQTMwNDM1OUQzQ0Ix
RTRFMzMyQzNFLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdULzAvMzIzNDMwMzQzYTM4NjM2MzMw
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzMzMxMzYzNDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA
JASMwDANBgkqhkiG9w0BAQsFAAOCAQEAtO7JMDS8vAT3PMAg14Iy7f9svBJyrnJZ
D/GW05x3BErNvU2OhB0gpDgOVyv0VNwWqFJu+JXT/w8Ci42PCjDl4Ft1KLIhgp6G
rrc5KYcPb8PtYVJDxBPizIEVstphMNeDG1a15txxWnNL94lvjbaEpqSFMgQhdaPD
5Lr2HsGkG1wGUF99ADRIunuwiSBRPqeoxnOouGhJTH+ktgo+gNefpKSUolKRLWNm
OchyMl72XkQLjm2xlBlB9ObNskJU8k2SVC7X9PQ7U4pgxwNUS/zNFzG5jFHKKVoG
G89m+6KVfc/u6sN6Z3s7DG/Buaf6hasltgb4XV2IMwNuJ33JtErHew==
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:52 2026 by rpki-client