
$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa
File: 3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier: 3Fs3YXCHVhPim686QjSLVypvleRfB5cNa4r0sVni22s=
Subject key identifier: 8C:10:7A:F1:41:50:B8:E5:19:92:E3:81:FB:F6:D3:A3:78:F5:E2:AF
Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial: 1F6144638B06F3424AA08C9A2C6365217095BA40
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa
Signing time: Mon 11 May 2026 17:55:58 +0000
ROA not before: Mon 11 May 2026 17:50:58 +0000
ROA not after: Mon 10 May 2027 17:55:58 +0000
asID: 148996
IP address blocks: 103.227.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:61:44:63:8b:06:f3:42:4a:a0:8c:9a:2c:63:65:21:70:95:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Validity
Not Before: May 11 17:50:58 2026 GMT
Not After : May 10 17:55:58 2027 GMT
Subject: CN=8C107AF14150B8E51992E381FBF6D3A378F5E2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:35:1e:ce:7d:ba:d4:66:42:de:d2:62:fa:
0d:e3:49:8e:75:5c:77:07:58:02:69:4d:45:da:6d:
b4:ef:a0:a6:ca:79:02:91:0f:29:66:db:3e:28:70:
7d:b9:36:ca:8d:bc:89:57:07:ce:1a:fe:aa:4b:8d:
20:9d:4b:7c:0d:5b:31:d3:65:a6:77:f3:fd:c1:06:
85:d8:63:6f:6a:da:88:90:f5:9f:c3:6d:9b:cb:99:
69:db:90:92:53:d6:13:8f:24:65:8e:cd:e5:60:a0:
5e:32:e3:4b:f4:35:89:c7:87:cf:ac:1a:ef:0d:40:
0b:0d:9f:f7:8d:fd:a7:7f:2b:3d:f1:42:d3:13:1c:
7b:48:99:8e:bf:2f:63:60:62:b0:86:a3:ae:2d:20:
64:c7:99:5e:ae:f7:82:ac:e9:ea:07:f6:a9:53:ae:
97:2a:30:fb:e8:24:8c:37:0d:39:c3:34:ac:f0:bb:
1d:35:1c:c0:09:19:66:5a:53:ab:86:e3:d1:a2:90:
6b:5b:9f:1f:cb:e9:52:23:b0:e9:24:88:f8:f6:35:
93:70:12:4f:25:00:f5:ba:dd:28:04:89:dd:67:af:
1e:20:92:d1:9e:c4:5d:cd:52:15:34:71:bc:07:16:
d1:ac:94:52:71:77:2b:4c:e5:66:31:d3:8a:f0:fa:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:7A:F1:41:50:B8:E5:19:92:E3:81:FB:F6:D3:A3:78:F5:E2:AF
X509v3 Authority Key Identifier:
keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232352e302f32342d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.225.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e7:5e:64:6b:e8:f6:67:5d:e3:b3:e1:59:e9:c6:2f:43:bc:
8a:56:1b:f7:8d:eb:6f:c7:fa:14:06:7f:c0:c6:2d:e1:68:37:
f9:06:cc:7e:c7:f1:28:c3:8e:76:f5:54:02:41:3a:e9:a0:e8:
94:e8:27:da:6d:15:5c:62:8b:71:32:af:49:20:39:19:34:ec:
3c:98:bd:e5:bd:08:25:08:61:a4:f8:2d:da:6c:12:93:f3:0b:
43:c9:bf:56:b2:40:3f:a0:5d:2b:c2:b8:77:81:11:fc:5e:77:
d2:c2:89:10:16:56:b1:14:80:eb:b6:4c:cc:54:2e:94:d1:c3:
6f:a9:ed:10:b6:1f:48:7b:aa:86:9a:3f:9e:e1:9b:d4:af:26:
38:d7:74:42:cd:b4:9b:36:1f:40:89:a1:45:9e:f3:41:78:c8:
30:bd:eb:da:2a:f2:b5:71:0d:cd:61:dc:af:ba:40:16:3c:26:
7f:1d:a8:1d:b1:bf:b2:16:cd:30:dc:bc:0f:42:05:50:34:96:
88:69:26:b6:c8:2a:cb:9f:ff:33:b6:d2:16:a5:01:91:46:ce:
29:1e:05:96:ae:da:dc:03:57:43:5e:4a:ed:0a:74:22:5c:fa:
e1:e0:9d:76:8a:ca:42:b4:5e:dc:af:cf:36:c0:fb:7b:df:af:
30:5d:d7:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:46 2026 by rpki-client