
$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32362e302f32342d3234203d3e203138343131.roa
File: 36312e35362e32362e302f32342d3234203d3e203138343131.roa (raw, json)
Hash identifier: nzkDFeWq9DKB8SnYVh/zKHjUR7e4Y9fE95qdnDZlMiI=
Subject key identifier: A4:CF:80:9C:85:D9:3E:2E:F6:52:1E:B7:45:9B:05:A3:DE:99:BE:59
Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial: 3E3765D97B0E02452CC183440011C12A177D53A7
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32362e302f32342d3234203d3e203138343131.roa
Signing time: Mon 11 May 2026 17:10:15 +0000
ROA not before: Mon 11 May 2026 17:05:15 +0000
ROA not after: Mon 10 May 2027 17:10:15 +0000
asID: 18411
IP address blocks: 61.56.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:37:65:d9:7b:0e:02:45:2c:c1:83:44:00:11:c1:2a:17:7d:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
Validity
Not Before: May 11 17:05:15 2026 GMT
Not After : May 10 17:10:15 2027 GMT
Subject: CN=A4CF809C85D93E2EF6521EB7459B05A3DE99BE59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:f0:56:96:6d:57:c5:3e:7f:f7:65:bb:38:
2a:a1:a4:f2:63:ba:c5:30:66:cd:4d:31:eb:0e:75:
d7:c8:43:d8:66:b3:f1:82:29:a8:a7:06:f1:d7:2c:
d4:ec:15:8f:85:a9:c4:f9:a4:93:bd:92:42:44:f8:
b9:5b:e8:c8:80:b2:f9:16:e4:47:f8:5c:92:bd:1d:
50:67:49:a3:1d:4d:b7:49:6a:c5:12:99:cc:fb:83:
5c:3d:27:a8:5b:63:a0:39:d4:59:2b:d0:3c:41:6a:
03:9e:87:7e:4b:af:86:79:bc:57:3f:2b:be:01:cb:
cc:46:d1:8e:1e:89:95:f3:8c:0a:df:ea:fc:e6:e3:
cc:34:3f:03:58:28:c8:23:41:cc:b8:b6:df:4d:63:
be:df:77:9b:65:d4:16:01:18:6d:e7:55:c5:f5:90:
c9:14:4e:66:ce:fe:84:ba:3a:d7:41:68:d0:ce:c5:
70:c3:bb:a8:37:98:a2:a8:6c:8c:a7:24:a7:79:7b:
c5:fc:14:86:a6:2c:b7:ba:d6:3d:06:49:31:d7:88:
8f:94:fe:6c:34:92:fa:76:7c:6d:0f:2b:96:d6:09:
c5:93:9c:a0:fa:b0:5b:3c:b1:fa:b3:2d:15:de:23:
17:d1:29:af:de:21:9c:69:45:b3:38:e2:25:65:2c:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:80:9C:85:D9:3E:2E:F6:52:1E:B7:45:9B:05:A3:DE:99:BE:59
X509v3 Authority Key Identifier:
keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32362e302f32342d3234203d3e203138343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:90:af:60:d1:29:f5:7e:a0:b0:00:93:8f:cd:07:da:1f:56:
af:ac:e4:49:43:45:ba:ce:20:db:e8:f3:88:42:4b:34:82:72:
fc:07:18:c1:65:38:f1:03:6c:be:24:0f:bc:03:d5:ec:62:d5:
3d:a3:60:55:ff:8b:9f:22:31:3c:3f:df:3e:82:a5:0d:5c:a1:
51:70:35:df:98:80:1e:da:19:be:dc:7b:1d:72:dc:ad:2b:cf:
17:d1:83:f9:63:48:68:84:08:59:40:22:6e:b6:f7:cb:1a:84:
f5:80:18:3d:96:6b:a1:36:a6:5f:84:05:98:9f:cd:9c:97:cd:
c7:3e:ea:0e:d8:23:20:a3:20:e9:ca:87:96:60:3f:93:1f:09:
16:68:e0:3e:c2:76:b7:39:42:b9:4d:20:c5:9e:28:a6:bb:58:
1f:40:9b:1a:f6:96:3e:0c:a5:60:42:32:96:9b:b9:87:9d:26:
bd:ee:5a:2f:1d:f8:9a:78:42:83:53:68:bb:c0:18:4e:4e:e5:
b2:bb:3c:74:d9:2d:e8:7b:74:a4:75:fb:ed:8e:d3:7e:56:4b:
cf:a6:35:53:c8:77:71:87:0c:23:dc:ed:cd:f4:08:a4:b8:ec:
f7:f0:d0:a3:b2:74:58:86:86:be:43:a2:1b:06:19:b2:43:22:
db:9c:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:23 2026 by rpki-client