
$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa
File: 34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: 82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=
Subject key identifier: F9:8A:F1:D6:48:98:29:0B:65:A0:4C:B6:F8:1E:3F:47:B3:7D:63:C2
Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial: 74CADB68CBB058E049354606968A6F9BAF875920
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:37:42 +0000
ROA not before: Mon 11 May 2026 17:32:42 +0000
ROA not after: Mon 10 May 2027 17:37:42 +0000
asID: 9678
IP address blocks: 45.123.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:db:68:cb:b0:58:e0:49:35:46:06:96:8a:6f:9b:af:87:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Validity
Not Before: May 11 17:32:42 2026 GMT
Not After : May 10 17:37:42 2027 GMT
Subject: CN=F98AF1D64898290B65A04CB6F81E3F47B37D63C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:f7:17:bf:aa:e6:0f:a2:6a:93:88:ae:49:
ae:75:77:be:11:b4:49:2a:40:c1:26:fc:fa:ab:5e:
ea:c6:fa:1e:6f:17:22:56:ae:d8:a6:1c:a6:70:42:
c3:61:3e:3d:da:f0:6c:02:47:d6:ed:63:53:7d:1c:
31:f9:d2:8f:7a:69:2a:01:43:a7:fe:30:2f:4e:e1:
6e:f4:35:cd:9d:e7:e2:d4:20:08:ed:48:a9:2c:c8:
91:89:90:c7:64:1e:c9:15:34:e7:a0:8f:d1:c3:31:
8b:c6:da:bd:51:cb:3a:51:a7:fa:c4:93:f2:84:78:
1a:7e:d0:8f:34:7a:8f:cc:33:20:4e:d8:14:7f:af:
35:c6:24:07:b3:79:d5:09:01:de:6d:9b:8b:8e:13:
ed:76:2e:fb:78:41:2c:9a:b8:52:33:66:2e:46:f9:
4d:bb:e6:1f:62:f2:87:ee:7c:4d:30:a0:c8:30:1b:
df:3b:a0:4b:63:30:7e:21:4c:67:7a:2e:5c:de:b5:
6a:67:73:bf:b6:77:7c:0c:90:dc:d9:56:55:84:eb:
8a:99:56:6a:c6:f1:f7:97:ae:05:d4:9f:0b:f5:6a:
19:69:51:88:1d:6c:3c:53:df:e8:c0:47:23:6e:04:
d9:6c:6e:14:e3:a6:32:e2:7a:26:7e:6c:0c:5d:fc:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:F1:D6:48:98:29:0B:65:A0:4C:B6:F8:1E:3F:47:B3:7D:63:C2
X509v3 Authority Key Identifier:
keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.117.0/24
Signature Algorithm: sha256WithRSAEncryption
02:21:67:d7:74:53:57:da:10:5f:86:04:5c:4a:de:5c:88:dd:
10:9a:9f:0c:2a:cd:76:41:86:df:8c:15:23:41:7e:ea:77:10:
b3:27:2a:8b:8c:22:15:64:72:cd:3e:ea:6d:ae:42:b4:93:75:
39:74:bc:41:f1:4f:69:57:48:84:bb:43:72:ca:63:9d:32:6d:
7a:62:53:0b:0d:5c:b7:eb:2a:ea:11:9a:5d:91:14:ff:f1:18:
01:7a:ea:85:c1:78:5a:30:81:04:c5:8d:36:69:07:14:48:12:
5f:6f:4b:00:76:0c:ea:0c:64:af:8c:df:17:88:9e:05:b6:0d:
f2:7f:33:88:e1:e2:7b:ad:f3:5d:7c:83:d7:30:36:16:e1:06:
ab:d2:87:01:5f:82:be:7a:16:ac:1d:37:e6:78:d0:ce:c1:a4:
01:a4:24:1b:ef:f6:e4:f9:c6:64:53:db:7e:54:7a:31:93:b0:
9e:b0:be:4f:d3:bd:41:c5:46:39:5a:8c:a1:07:fe:46:0e:67:
e0:7a:8a:51:eb:a9:fe:cd:da:85:98:9d:95:05:db:29:38:b7:
bd:67:08:c6:bd:a1:c5:85:35:df:4a:f9:c9:67:8e:97:4a:33:
b0:ad:84:e9:6c:89:30:77:b2:61:a9:39:db:8d:ce:69:b0:c9:
82:b0:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:52 2026 by rpki-client