
$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa
File: 36312e35362e31382e302f32342d3234203d3e203138343131.roa (raw, json)
Hash identifier: gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=
Subject key identifier: DE:A9:D0:BE:E6:80:90:51:E8:BF:95:9A:17:00:29:0C:47:83:F8:7C
Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial: 432D106BA6527D0CD979F9425B2855965B31639B
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa
Signing time: Mon 11 May 2026 17:10:15 +0000
ROA not before: Mon 11 May 2026 17:05:15 +0000
ROA not after: Mon 10 May 2027 17:10:15 +0000
asID: 18411
IP address blocks: 61.56.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2d:10:6b:a6:52:7d:0c:d9:79:f9:42:5b:28:55:96:5b:31:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
Validity
Not Before: May 11 17:05:15 2026 GMT
Not After : May 10 17:10:15 2027 GMT
Subject: CN=DEA9D0BEE6809051E8BF959A1700290C4783F87C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:52:d5:e7:2f:a4:42:fe:2b:3d:9a:74:90:
6e:60:4f:b4:03:bd:1f:09:4c:4a:31:70:36:c9:68:
d1:dd:df:87:cd:cb:15:c9:fc:24:fb:63:ca:59:88:
a0:0a:dc:aa:91:ac:d2:30:ad:4f:b3:c9:0a:9b:d6:
31:92:ad:94:ed:60:94:2c:26:33:e7:af:c3:68:84:
0f:4b:95:be:e4:93:73:a1:a4:d2:e6:80:42:85:6c:
e9:9f:75:3f:46:45:d6:b7:d6:31:41:a5:a8:dc:c0:
36:49:04:75:de:5e:a5:f3:f4:47:cc:a5:b7:c6:84:
72:e9:12:df:7c:1d:c7:55:37:24:ad:ff:dc:dd:0a:
71:43:8b:55:90:99:b6:b4:87:b9:82:cf:38:bf:7f:
60:a5:a7:91:9b:0a:2d:7a:23:fc:72:b6:b3:33:f9:
59:7c:cd:22:5c:75:10:44:89:5d:f2:37:0b:f9:e5:
83:bf:2d:8a:18:bf:26:7c:7b:48:7f:5e:08:f7:02:
05:1c:6e:03:a4:67:48:f4:9d:fc:cd:eb:b2:ed:08:
5d:3a:9c:0b:d2:95:2c:05:cd:0a:6e:f9:b1:e6:bd:
df:75:26:18:b6:5b:91:be:a8:7d:4e:24:bd:51:6f:
00:9e:8e:86:cd:53:92:9a:cf:ff:10:78:cb:b2:da:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:D0:BE:E6:80:90:51:E8:BF:95:9A:17:00:29:0C:47:83:F8:7C
X509v3 Authority Key Identifier:
keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:95:72:0c:e4:16:77:33:46:4c:1d:5f:07:b9:52:ff:ea:6e:
6b:c0:cd:50:19:f7:00:9c:eb:c2:0d:a3:b1:ce:36:e5:10:c2:
44:30:88:14:ed:55:ca:43:74:78:ac:c5:f1:dc:86:4e:3e:85:
5f:38:6a:5e:d0:6e:2d:a4:7a:02:ef:90:b2:3b:75:24:f7:b1:
79:34:63:10:50:2f:a0:ba:f6:ed:87:a0:68:59:e6:b7:94:23:
42:c4:42:c0:3c:47:d0:d1:dc:a3:03:f9:a0:0a:f6:51:73:cd:
cf:31:19:2b:18:5e:3a:9b:14:99:02:d5:cd:06:a8:2b:7b:f4:
7f:3c:1e:6a:f9:ef:fd:93:99:b1:88:b0:4b:77:55:46:53:92:
fc:4b:e5:c2:b1:f0:c8:54:bf:66:37:7d:f9:31:e4:82:5b:c8:
18:32:46:af:7e:da:94:8c:20:d8:bd:91:73:fc:a9:6b:1d:ff:
d2:65:68:d5:34:23:b9:e8:40:ac:a3:d6:02:18:e4:f8:a2:4c:
12:1a:b5:dc:ec:2e:f0:ae:e1:ab:24:1d:ae:df:9b:10:73:0c:
2b:f4:f0:cc:cf:0e:84:d9:07:73:1c:f2:d1:0b:29:31:8a:bd:
35:5e:e6:b6:13:8b:cb:f8:04:72:67:1c:83:71:38:cc:7d:cb:
11:de:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:24 2026 by rpki-client