
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa
File: 323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (raw, json)
Hash identifier: wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=
Subject key identifier: CF:64:30:EF:0C:AE:1E:BE:69:D6:39:61:2A:3D:3B:EB:FB:B8:FB:18
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 548FE9B38515612E802C6176FF202E12112B8C47
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa
Signing time: Mon 11 May 2026 17:15:46 +0000
ROA not before: Mon 11 May 2026 17:10:46 +0000
ROA not after: Mon 10 May 2027 17:15:46 +0000
asID: 206729
IP address blocks: 2401:95c0:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:8f:e9:b3:85:15:61:2e:80:2c:61:76:ff:20:2e:12:11:2b:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:10:46 2026 GMT
Not After : May 10 17:15:46 2027 GMT
Subject: CN=CF6430EF0CAE1EBE69D639612A3D3BEBFBB8FB18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:97:7a:d1:f1:d0:1f:f5:1b:86:2c:1c:16:
d2:35:68:7e:53:0c:14:5b:0e:a1:de:3b:02:5e:c5:
7f:5d:5f:5b:97:9c:e3:90:28:92:8c:7f:8c:a7:05:
54:cd:0d:4f:b9:27:e1:4c:7d:6c:f8:22:a9:d7:72:
98:48:1c:82:b6:6f:42:e8:64:20:21:4b:27:ac:c7:
52:6f:ab:ba:68:3d:b3:24:0f:ef:d8:bd:76:8a:54:
2f:87:76:2a:0b:61:9e:49:0b:10:8e:80:02:1c:dc:
9f:01:53:e3:99:18:49:04:94:ad:a1:b7:20:3d:ef:
1d:e5:1f:99:ba:24:a4:c0:16:97:e8:01:ef:f1:37:
b5:d6:85:1b:6c:04:8b:2b:18:d3:29:f2:d1:e5:de:
e7:02:2a:10:c1:ad:7d:b7:a1:0c:49:fc:ca:72:61:
33:00:4c:d8:f7:36:54:a9:d3:75:01:1b:f2:05:72:
9b:6c:5a:de:ad:e1:d4:03:b5:13:20:5a:86:ea:c0:
bf:10:08:60:55:8b:90:d6:52:31:1b:90:83:b0:5e:
d4:49:f5:6d:43:c2:44:66:36:a3:5c:dd:e4:fd:06:
2c:a3:5a:57:fa:94:aa:e2:41:4a:bc:f3:4b:1d:60:
5d:30:ad:a0:0a:c2:ff:e0:90:ea:75:0b:7b:80:91:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:64:30:EF:0C:AE:1E:BE:69:D6:39:61:2A:3D:3B:EB:FB:B8:FB:18
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:95c0:f001::/48
Signature Algorithm: sha256WithRSAEncryption
4e:a7:52:eb:b8:5a:5a:34:1c:f3:41:1c:54:86:b4:15:8a:f5:
e7:3c:6e:a6:b6:2b:cf:8e:b8:ca:ee:75:21:f1:d0:92:15:1b:
ff:ec:89:03:b2:c2:1b:57:3d:1f:26:25:4d:da:83:aa:f3:cf:
30:53:ac:d3:73:0e:98:11:65:ef:94:a2:2d:ce:3a:a1:c2:f6:
81:a1:64:64:8d:84:5d:ad:8a:74:3e:f2:2d:52:c9:88:48:11:
dd:99:bf:ca:0a:7f:4e:e5:bc:40:65:dc:ff:10:5f:e3:8d:ee:
14:e3:f8:aa:ba:67:b7:f5:3f:b1:05:95:41:1e:ad:83:d8:ce:
8a:9b:89:4b:00:bb:55:37:e8:ac:9e:61:64:1a:57:52:93:cf:
e8:99:ec:5f:97:e0:98:bc:89:51:dd:c6:9c:1c:ee:4f:b0:8c:
96:de:80:b7:4b:a3:72:b0:c0:7e:5e:8c:85:6d:5b:2d:73:9c:
7e:7c:bc:2e:51:bf:e0:69:70:b4:a8:0f:ed:8a:a1:16:3c:31:
80:0f:9b:9f:f3:8a:72:5c:3e:3e:bd:40:11:f0:00:98:8e:a5:
9c:78:05:54:7a:35:2b:29:8f:d5:c6:10:79:35:ac:dc:79:65:
02:f5:12:94:43:e7:f4:37:db:88:50:d8:8c:96:ee:f4:a7:68:
eb:2c:8a:92
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUVI/ps4UVYS6ALGF2/yAuEhErjEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE
RkQzMkQyQTAeFw0yNjA1MTExNzEwNDZaFw0yNzA1MTAxNzE1NDZaMDMxMTAvBgNV
BAMTKENGNjQzMEVGMENBRTFFQkU2OUQ2Mzk2MTJBM0QzQkVCRkJCOEZCMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzZd60fHQH/UbhiwcFtI1aH5T
DBRbDqHeOwJexX9dX1uXnOOQKJKMf4ynBVTNDU+5J+FMfWz4IqnXcphIHIK2b0Lo
ZCAhSyesx1Jvq7poPbMkD+/YvXaKVC+HdioLYZ5JCxCOgAIc3J8BU+OZGEkElK2h
tyA97x3lH5m6JKTAFpfoAe/xN7XWhRtsBIsrGNMp8tHl3ucCKhDBrX23oQxJ/Mpy
YTMATNj3NlSp03UBG/IFcptsWt6t4dQDtRMgWobqwL8QCGBVi5DWUjEbkIOwXtRJ
9W1DwkRmNqNc3eT9BiyjWlf6lKriQUq880sdYF0wraAKwv/gkOp1C3uAkeWLAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUz2Qw7wyuHr5p1jlhKj076/u4+xgwHwYDVR0j
BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO
LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD
NUUxMERGRDMyRDJBLmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUFBzALhmpy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPU1RJTi8wLzMyMzQzMDMxM2Ez
OTM1NjMzMDNhNjYzMDMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzYz
NzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAkAZXA8AEwDQYJKoZIhvcNAQELBQADggEBAE6nUuu4
Wlo0HPNBHFSGtBWK9ec8bqa2K8+OuMrudSHx0JIVG//siQOywhtXPR8mJU3ag6rz
zzBTrNNzDpgRZe+Uoi3OOqHC9oGhZGSNhF2tinQ+8i1SyYhIEd2Zv8oKf07lvEBl
3P8QX+ON7hTj+Kq6Z7f1P7EFlUEerYPYzoqbiUsAu1U36KyeYWQaV1KTz+iZ7F+X
4Ji8iVHdxpwc7k+wjJbegLdLo3KwwH5ejIVtWy1znH58vC5Rv+BpcLSoD+2KoRY8
MYAPm5/zinJcPj69QBHwAJiOpZx4BVR6NSspj9XGEHk1rNx5ZQL1EpRD5/Q324hQ
2IyW7vSnaOssipI=
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:50 2026 by rpki-client