
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136352e302f32342d3234203d3e2039323434.roa
File: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=
Subject key identifier: B6:20:78:66:37:C2:81:04:3F:81:05:FA:1A:5F:A0:E5:09:E2:25:9B
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 7D64F1BC98F65EC4915A44A3D6B6B63E9AC75B8E
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136352e302f32342d3234203d3e2039323434.roa
Signing time: Mon 11 May 2026 16:54:38 +0000
ROA not before: Mon 11 May 2026 16:49:38 +0000
ROA not after: Mon 10 May 2027 16:54:38 +0000
asID: 9244
IP address blocks: 61.247.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:64:f1:bc:98:f6:5e:c4:91:5a:44:a3:d6:b6:b6:3e:9a:c7:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: May 11 16:49:38 2026 GMT
Not After : May 10 16:54:38 2027 GMT
Subject: CN=B620786637C281043F8105FA1A5FA0E509E2259B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f7:0d:c9:9f:c4:90:c1:0b:c7:d6:dc:5b:ab:
08:f9:b0:de:65:e9:ed:90:67:a3:a3:ff:fb:af:17:
0f:a4:23:a1:bb:f3:31:f8:58:e6:8d:1f:d6:38:78:
db:1e:36:14:7c:e2:61:85:c8:94:23:d9:0e:cd:c5:
62:75:c8:24:fc:40:49:35:3d:52:41:53:4d:49:13:
b6:24:0c:b4:a5:a7:5e:a5:3d:64:ec:7c:92:2f:65:
96:bf:fd:5e:e6:9b:a1:8e:f3:51:85:80:07:7a:ca:
36:bd:84:35:c1:f6:85:d0:e3:bb:fd:39:0a:df:52:
6c:99:2f:a9:c7:82:c1:3c:c7:64:86:c5:d2:a4:e0:
c5:79:ee:56:91:a8:7d:51:b2:e1:5e:f5:0a:d0:d2:
f8:75:8f:d4:01:b2:68:e5:b7:f4:cf:b2:ef:50:2b:
66:d5:73:e8:e1:e1:82:9c:f0:69:c3:50:4b:aa:d8:
e3:06:65:e0:c8:af:8c:9b:d6:49:67:c2:e5:58:15:
80:ab:41:5d:00:6f:5c:e0:7b:3c:b0:ca:de:4b:1c:
56:5e:fd:fb:44:56:56:af:fa:c7:c7:08:9b:c2:b9:
b7:2b:b8:4e:ad:17:e7:a3:e5:d1:77:b7:b4:08:53:
a1:40:f8:ba:09:b1:e8:a9:36:a0:c5:e5:56:ac:60:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:78:66:37:C2:81:04:3F:81:05:FA:1A:5F:A0:E5:09:E2:25:9B
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136352e302f32342d3234203d3e2039323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.247.165.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e1:19:d6:ff:11:36:70:c1:17:77:38:4e:a7:72:39:22:27:
70:d2:cb:d3:b1:46:4a:7a:d5:63:1b:95:76:24:1d:75:58:bf:
e1:a7:e4:ea:a7:e7:7d:d0:d0:1f:87:fe:c9:3d:47:51:b8:cc:
f8:9d:9c:9c:b1:8d:64:2c:81:0c:05:c9:e1:b1:ef:6a:08:03:
78:4c:ee:c8:4b:97:9d:b8:c6:ff:3f:4e:5c:3a:6f:a1:33:26:
6e:e6:66:37:86:a6:bd:ed:a3:9b:7d:0a:02:11:68:a4:46:68:
f9:50:3c:52:77:bd:89:43:0f:7a:f9:9a:8a:80:d2:c3:6e:a5:
75:33:11:d6:c5:a6:a2:35:8d:0f:05:51:4c:77:9c:e0:07:d0:
b9:c8:14:21:07:4f:0b:b0:ee:00:55:4b:d0:68:5f:33:a0:7a:
54:0f:af:83:17:75:dc:90:d3:a0:3c:ec:e7:7d:31:9e:1a:c4:
e4:b4:19:64:d3:2f:de:1f:80:25:95:bc:0d:06:6e:93:76:b2:
1f:c8:ac:ee:24:29:8d:2c:2a:7a:9d:27:cc:ca:53:96:7e:b7:
91:1c:8d:56:01:eb:db:0e:49:d8:3b:34:6b:dd:7d:95:52:91:
d4:d0:f8:89:4f:76:35:cc:7c:20:49:01:1a:0a:f7:fd:c1:07:
65:9b:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:51:37 2026 by rpki-client