
$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36372e302f32342d3234203d3e2039323434.roa
File: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=
Subject key identifier: C6:31:96:E5:F6:8A:52:B4:63:41:78:15:03:E4:57:7C:AF:A9:11:14
Certificate issuer: /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial: 435DD9374842EE99EE904088C7C1F36B23ECEA95
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36372e302f32342d3234203d3e2039323434.roa
Signing time: Mon 11 May 2026 16:54:35 +0000
ROA not before: Mon 11 May 2026 16:49:35 +0000
ROA not after: Mon 10 May 2027 16:54:35 +0000
asID: 9244
IP address blocks: 61.56.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:5d:d9:37:48:42:ee:99:ee:90:40:88:c7:c1:f3:6b:23:ec:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
Validity
Not Before: May 11 16:49:35 2026 GMT
Not After : May 10 16:54:35 2027 GMT
Subject: CN=C63196E5F68A52B46341781503E4577CAFA91114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:75:36:45:93:e9:42:b7:29:67:31:46:a5:
64:44:24:75:a5:ef:6c:a3:89:d1:5c:c0:72:96:8c:
c6:0a:c1:56:38:65:c1:85:e9:88:43:61:dc:3c:fd:
44:6b:b5:af:2a:f5:c8:a9:62:9b:77:34:0a:0c:e1:
32:b1:2c:fa:f0:55:dd:a6:fe:f8:c5:4c:67:2f:f6:
3a:ce:6c:c3:74:90:9c:a5:7e:c5:31:60:4e:58:80:
c1:7c:18:0a:20:86:48:e7:1d:2b:18:19:d8:e0:7b:
ce:95:9e:ff:93:7c:b0:bd:e2:d0:45:37:7f:c2:88:
65:82:d2:a8:38:c1:14:35:89:bc:21:55:81:f9:66:
5a:3b:15:70:d9:4b:4d:34:e5:23:30:a8:cd:78:52:
82:5c:6d:17:26:48:8b:3f:d4:ae:43:c5:ad:fa:4f:
f1:25:48:e2:1c:2b:7a:20:97:31:28:a0:f7:a9:a4:
5c:40:e8:de:38:14:5b:b7:df:2d:6d:fe:c3:79:7f:
c8:0d:4f:ea:4d:39:b7:d1:26:61:9a:02:55:24:12:
f6:60:0f:03:a7:7f:c9:94:62:c6:41:69:06:8f:0c:
3b:1d:19:b8:25:e5:78:ba:96:be:68:ed:e0:3a:17:
b8:bc:84:59:b8:5c:26:f6:e7:e3:70:06:40:c7:1c:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:31:96:E5:F6:8A:52:B4:63:41:78:15:03:E4:57:7C:AF:A9:11:14
X509v3 Authority Key Identifier:
keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36372e302f32342d3234203d3e2039323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.67.0/24
Signature Algorithm: sha256WithRSAEncryption
80:77:f9:83:df:7a:14:a1:a9:eb:13:4f:bb:f1:06:c6:88:f0:
0e:79:61:f0:87:d8:0a:f9:30:34:13:16:8c:14:6a:88:40:e1:
ab:d0:39:2f:29:e5:c9:d2:64:0d:42:f0:51:4d:2d:fa:36:d9:
b4:c1:c1:59:84:47:78:50:f8:4e:2d:78:87:2b:ad:00:90:33:
04:bd:f8:1c:9c:a6:2a:e2:19:9f:04:8c:8a:f9:7b:ea:fe:04:
3d:73:47:48:32:23:18:04:26:9d:2b:f8:ed:b0:c3:77:ac:db:
ee:9e:51:32:f8:2e:3c:3e:35:e1:49:3e:3e:f0:34:6e:25:e8:
c8:94:65:82:6b:c8:4c:55:e5:a7:c1:e1:bf:01:24:3c:b7:df:
13:20:9d:ba:68:dd:ec:40:fc:04:4d:ec:57:1b:d0:ee:c4:ea:
72:21:55:2b:c7:f5:e7:ad:11:ac:fd:46:28:72:8e:68:8e:df:
93:22:44:a0:b9:a4:30:b2:c7:6a:a4:ec:f1:3f:61:58:6c:1d:
dc:ca:f8:d3:18:7a:26:7a:91:51:01:b0:fd:d0:22:66:d9:e6:
d1:e6:63:89:bb:ea:00:bc:c6:ba:a3:eb:f3:92:08:81:05:8e:
6c:e9:91:b5:e0:1c:17:a5:83:06:a7:87:ed:89:cb:2b:2b:aa:
d1:e2:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:50 2026 by rpki-client