
$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/323430353a613063303a3a2f33322d3438203d3e20313331363731.roa
File: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (raw, json)
Hash identifier: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=
Subject key identifier: 31:C6:6A:4F:55:0E:68:03:58:FD:D2:C2:34:6A:52:06:30:53:6C:A9
Certificate issuer: /CN=28E8C034945DF0971A657E251911BBA0B2819562
Certificate serial: 24F971A5BD538A1D0E0E5ADB461847544C0470AB
Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/FANTASY/0/323430353a613063303a3a2f33322d3438203d3e20313331363731.roa
Signing time: Mon 11 May 2026 17:09:24 +0000
ROA not before: Mon 11 May 2026 17:04:24 +0000
ROA not after: Mon 10 May 2027 17:09:24 +0000
asID: 131671
IP address blocks: 2405:a0c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl
rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f9:71:a5:bd:53:8a:1d:0e:0e:5a:db:46:18:47:54:4c:04:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562
Validity
Not Before: May 11 17:04:24 2026 GMT
Not After : May 10 17:09:24 2027 GMT
Subject: CN=31C66A4F550E680358FDD2C2346A520630536CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:b0:78:97:0c:a3:49:dc:3d:32:3c:7c:0f:
26:50:f4:f9:7d:71:80:85:22:8e:0a:77:36:aa:3d:
89:9c:dc:fd:ed:b4:27:7a:9c:9b:ef:67:81:c9:0e:
36:95:79:84:f6:5b:be:55:b6:d0:8c:20:0e:9c:92:
fd:6f:0f:d7:f1:ca:7a:e4:50:5a:43:d8:5a:a9:e9:
9a:54:c5:f8:06:62:9e:be:d8:8f:12:43:ae:0a:0e:
80:66:39:a3:0a:fc:5a:53:b3:43:8f:99:81:59:3a:
b7:26:3b:35:ef:63:70:13:7d:1a:17:37:3c:5f:30:
a6:f0:1f:49:f0:4e:7d:36:39:b4:da:43:6d:9b:7b:
3b:9f:ea:a3:ac:72:7b:79:fa:11:33:be:fe:45:93:
b8:f1:e3:20:ea:dc:04:f5:47:f7:b1:8b:63:a7:8c:
c8:22:a8:e6:b0:80:68:e7:ca:e0:e9:03:ef:cf:66:
7a:6f:b0:93:96:22:4b:55:d2:91:b9:40:e3:bf:16:
fb:47:a8:29:d9:9f:8a:8a:0f:74:22:69:7e:78:49:
3c:ce:86:58:fa:a2:5c:d8:9b:1b:de:51:42:1e:fc:
1c:c0:e6:22:75:6e:0e:00:17:b7:e1:57:9c:88:20:
e9:9d:6e:1e:0b:1c:36:c0:d4:33:e9:3d:d7:fa:0d:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:6A:4F:55:0E:68:03:58:FD:D2:C2:34:6A:52:06:30:53:6C:A9
X509v3 Authority Key Identifier:
keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/323430353a613063303a3a2f33322d3438203d3e20313331363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
d1:29:a5:4a:d1:f6:86:97:fb:a4:85:b6:b2:99:5a:b3:9c:67:
55:f1:d7:fe:c5:8a:03:6f:5d:9d:b2:eb:92:86:aa:a5:04:81:
83:0e:8f:43:d2:7a:09:d2:32:39:31:c6:db:19:31:fa:d8:a4:
df:74:6d:8b:ca:44:7e:9d:ae:32:a1:cb:25:b1:69:6b:59:4e:
db:57:91:60:dd:e6:63:7e:0b:ba:97:31:f3:dc:65:de:34:68:
e9:4d:5e:29:70:8d:59:73:f9:07:45:bb:21:9d:d4:64:19:00:
30:d0:d4:78:0a:f1:3f:43:c1:7f:c0:59:44:aa:60:5a:37:a1:
33:42:71:8a:64:28:28:d8:4c:63:6e:a2:fc:81:fc:a7:13:20:
48:6e:95:0d:a5:11:93:6f:15:37:81:7e:2e:61:2f:20:21:36:
5b:72:7f:99:2c:9e:02:1d:30:9d:2c:2b:8f:35:45:24:c9:b9:
a4:a0:9d:6c:96:95:20:27:6e:dd:e8:cf:fa:77:67:4e:6a:14:
07:d9:f5:48:85:c9:71:e0:c2:0b:2d:f3:6e:ef:4b:55:55:05:
c9:8e:eb:af:70:29:a9:bf:e6:56:57:f5:2b:6b:13:24:a5:f8:
84:5f:ab:af:60:14:49:08:9c:63:4a:a1:b2:55:54:98:ef:e9:
47:51:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:40 2026 by rpki-client