
$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313331363537.roa
File: 323430363a343863303a3a2f33322d3438203d3e20313331363537.roa (raw, json)
Hash identifier: rSr271IwSV1SA2n8X+EahcwXL6ovwVh/O3p6HB/CdP4=
Subject key identifier: F4:B1:F4:29:D5:3B:50:A7:16:1F:89:FF:C7:99:76:33:1F:B5:8B:62
Certificate issuer: /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial: 13905231A6712B046B1C00E81AEF5F704B1575FB
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313331363537.roa
Signing time: Mon 11 May 2026 17:56:55 +0000
ROA not before: Mon 11 May 2026 17:51:55 +0000
ROA not after: Mon 10 May 2027 17:56:55 +0000
asID: 131657
IP address blocks: 2406:48c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:09:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:90:52:31:a6:71:2b:04:6b:1c:00:e8:1a:ef:5f:70:4b:15:75:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Validity
Not Before: May 11 17:51:55 2026 GMT
Not After : May 10 17:56:55 2027 GMT
Subject: CN=F4B1F429D53B50A7161F89FFC79976331FB58B62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:a6:c1:fa:be:76:4a:8d:18:12:36:0d:41:
f6:a2:67:a6:3a:88:e1:0d:8f:39:82:ad:5b:d1:5b:
42:f0:36:bf:f3:48:45:c4:95:59:56:0f:71:10:3c:
7a:54:bd:72:0f:8f:88:cd:0c:61:75:b6:40:8c:e5:
f3:61:99:4a:8e:f4:ae:be:b6:a6:e5:d9:26:93:d1:
d2:e5:30:ae:62:4a:1f:5c:c4:b9:85:a6:e6:e1:88:
8c:90:21:cc:86:c9:d9:b1:04:8e:73:d7:b7:ce:61:
3e:68:ef:73:76:5b:51:95:23:cb:c1:a0:1f:82:30:
f5:19:b3:2d:22:ab:98:8c:a4:3b:dd:69:20:08:a3:
94:b4:b0:cd:3c:c0:93:f9:01:32:bf:02:2d:a8:04:
7a:a4:1f:31:6a:3a:9c:66:3e:74:09:ad:73:56:a9:
8f:e3:e9:9a:13:26:23:02:03:cc:b7:a1:e2:a0:fc:
af:6f:9e:b0:5c:c0:0f:2a:8e:79:5d:00:a4:ce:88:
2a:37:95:37:3c:ba:78:98:47:b2:e1:db:e3:08:0d:
53:66:fa:fa:2f:4f:18:6d:32:f9:d3:71:4e:8f:0e:
c7:25:ad:40:84:37:c5:bd:8a:9d:b7:cc:88:d4:27:
ca:1e:3d:57:53:26:1f:05:82:3c:eb:13:25:4b:db:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:F4:29:D5:3B:50:A7:16:1F:89:FF:C7:99:76:33:1F:B5:8B:62
X509v3 Authority Key Identifier:
keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313331363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
cd:59:27:87:54:3a:4d:ac:67:b1:18:64:2a:84:26:c9:60:c4:
80:67:08:33:85:d0:08:d8:2a:cb:44:46:d1:cf:72:b9:ca:56:
90:da:74:e3:b2:a2:3d:7d:0e:bf:bf:3e:81:8e:b9:6d:56:68:
1a:b7:e4:13:6d:78:30:62:d5:7a:f0:2a:a1:38:a3:95:d7:1a:
37:f7:74:72:92:ff:0c:63:e7:04:53:78:92:20:3a:77:e5:83:
a9:7a:b5:aa:0a:97:45:77:bd:8c:84:1c:c7:2c:dd:b0:35:fe:
6b:4f:3b:9c:d6:78:56:17:29:2b:59:c7:65:99:89:4b:17:65:
ba:2d:d0:b4:cd:bf:b5:e8:25:87:20:1f:fa:fb:f7:57:50:39:
13:03:ba:52:fb:5c:4f:4f:07:28:aa:0f:53:1a:9e:9f:5d:8b:
bd:1a:17:a5:2b:85:52:25:7e:9f:46:23:f6:e6:3d:a3:47:33:
60:33:21:9e:7c:a2:f6:b7:8a:7d:8a:a2:04:eb:39:ca:e8:52:
d8:ed:ba:eb:ab:bc:de:2f:60:39:4f:a1:a9:fd:7e:58:d7:1e:
14:1f:62:d7:00:4c:82:f7:2d:8a:e3:66:fa:6c:fb:7e:dc:d0:
73:60:1c:32:a5:ce:c9:67:97:1c:92:4f:07:76:ef:aa:34:18:
e3:14:52:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:10 2026 by rpki-client