
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa
File: 3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa (raw, json)
Hash identifier: CqveRmGYQfxhmNEyMRmCyx7NNn2LU6o50JUzxQzmudE=
Subject key identifier: FC:21:6E:CF:1D:70:6A:5E:59:B6:42:AF:E2:CA:00:B1:70:52:2A:07
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 014DF96C3D80FD69264D8DA331345AB5B53AB0B6
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa
Signing time: Mon 11 May 2026 17:06:49 +0000
ROA not before: Mon 11 May 2026 17:01:49 +0000
ROA not after: Mon 10 May 2027 17:06:49 +0000
asID: 131657
IP address blocks: 103.153.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4d:f9:6c:3d:80:fd:69:26:4d:8d:a3:31:34:5a:b5:b5:3a:b0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:01:49 2026 GMT
Not After : May 10 17:06:49 2027 GMT
Subject: CN=FC216ECF1D706A5E59B642AFE2CA00B170522A07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:77:da:c4:ea:a5:3b:55:dd:c3:bd:05:5d:
bf:b0:e8:2f:9a:81:b5:c4:ae:38:cd:de:6c:a7:10:
60:97:43:87:22:73:b0:1b:9c:51:4b:ad:5d:06:f6:
c5:00:cc:b4:70:8a:57:4d:33:a0:97:12:b5:9f:d7:
f9:51:6b:f5:bb:e1:77:e5:23:83:1d:78:5c:93:29:
ac:db:6a:7c:5c:c6:d5:3c:5d:02:ec:d6:15:17:ce:
ab:c2:71:99:6e:49:1d:80:0f:c3:b8:32:b4:ea:ba:
97:b6:1c:38:25:be:c9:e8:f5:75:9e:0c:0d:54:68:
47:bb:6f:c2:37:69:ea:26:b5:f8:47:0b:97:06:e1:
cd:3a:45:a8:43:bc:b6:fe:9a:3e:11:ec:7a:f7:0b:
2e:ca:4d:9f:b4:15:65:14:3a:3f:59:42:ea:05:1d:
65:d2:3e:c0:ef:a2:96:c2:4b:07:5e:ab:9f:fa:f3:
d3:1b:05:12:78:af:5c:20:b6:6d:17:b7:5a:ea:8f:
5a:f7:50:34:2d:46:2f:24:72:13:62:36:6a:cd:b9:
e9:ae:d1:0b:55:99:d6:41:48:08:bf:5a:e2:c9:ef:
6e:4b:f6:86:be:de:42:d8:1f:5f:20:c7:b7:11:38:
52:8d:46:79:89:c0:26:5c:ef:6d:8f:0f:01:86:82:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:6E:CF:1D:70:6A:5E:59:B6:42:AF:E2:CA:00:B1:70:52:2A:07
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3135332e3137362e302f32342d3234203d3e20313331363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/24
Signature Algorithm: sha256WithRSAEncryption
67:76:85:01:27:67:95:fc:a1:0c:c4:9e:1e:d3:48:19:75:a4:
9d:cb:55:ae:c0:fc:b7:7a:f0:14:82:e0:bd:07:5c:43:72:3d:
c5:6d:ac:23:4f:c5:5a:ea:c9:b0:b9:6a:53:88:c1:41:87:e7:
4f:8d:2c:f6:ca:06:97:ff:cb:4a:56:4a:f8:70:42:f7:18:44:
11:a0:30:a9:be:f3:16:41:0e:ca:61:2b:8c:ea:36:80:3f:b7:
b3:96:0f:7d:4b:a5:fe:a6:40:c1:4d:92:74:4b:45:a6:5c:75:
f1:11:d4:00:ac:10:c1:ec:53:18:bb:ae:23:97:68:6e:76:23:
91:a6:bf:70:49:6d:40:e0:bc:cc:b9:85:e0:0d:4d:da:a4:bf:
14:0b:33:f3:14:80:fa:59:af:86:bc:38:56:66:b7:50:94:93:
e9:f7:7b:53:6c:08:f7:04:a7:42:ba:36:e7:30:cc:93:01:6e:
19:ab:a7:9b:81:85:03:ee:76:f3:3e:0f:1e:04:93:0d:cc:cd:
14:8c:66:0b:58:9e:8b:90:ae:54:c3:19:86:0a:1b:64:08:37:
36:23:1b:4b:17:98:5d:1e:91:74:cd:7f:fc:18:f5:6c:df:c0:
e0:84:e6:55:c3:46:47:32:4a:39:ad:68:3b:61:bf:45:dd:85:
93:29:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:35 2026 by rpki-client