
$ rpki-client -vvvf rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa
File: 323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa (raw, json)
Hash identifier: 5NPYn896f6cSL35NtV5sGfz6luML+FwCVhmlOoiZn4A=
Subject key identifier: F3:A1:52:51:8D:72:9B:06:23:93:CE:50:EA:BB:8A:40:4A:21:F0:63
Certificate issuer: /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Certificate serial: 6CF3445E87BD2E283B79BC71051DF629957D707C
Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa
Signing time: Sat 12 Sep 2026 03:04:00 +0000
ROA not before: Sat 12 Sep 2026 02:59:00 +0000
ROA not after: Sat 11 Sep 2027 03:04:00 +0000
asID: 218699
IP address blocks: 2407:e4c0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f3:44:5e:87:bd:2e:28:3b:79:bc:71:05:1d:f6:29:95:7d:70:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Validity
Not Before: Sep 12 02:59:00 2026 GMT
Not After : Sep 11 03:04:00 2027 GMT
Subject: CN=F3A152518D729B062393CE50EABB8A404A21F063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:39:ca:5f:b6:42:80:37:3f:45:04:1a:90:
2b:73:96:14:3c:fa:86:57:7b:6d:38:fa:1d:cf:31:
a6:c7:60:15:6f:53:42:ce:98:92:61:b6:45:33:06:
df:ce:a9:87:a4:17:1f:e5:ba:f1:17:b2:db:f6:fe:
91:da:95:e7:30:26:80:71:dc:71:70:97:19:e8:be:
62:aa:bc:93:a0:c0:9c:e5:41:d1:1c:3a:3d:73:23:
d8:60:cf:87:41:af:c7:43:82:cc:4d:b9:cd:56:c5:
ad:a0:f6:f0:15:f7:2c:eb:4c:b2:1f:a1:b3:3b:18:
85:60:a4:9d:eb:dc:89:c4:1d:db:45:fb:2f:89:58:
72:cc:94:2a:5b:b5:35:f9:6b:03:dc:79:80:54:98:
f4:d7:77:54:cc:6a:14:80:71:2d:17:7f:89:48:92:
b7:0a:e7:7d:4e:7f:b4:65:43:a4:9d:b8:5e:92:5f:
8b:dc:4f:dd:9c:3f:a8:62:d6:57:09:c0:be:72:9e:
1e:0c:fa:82:db:5e:ef:8b:de:4b:9d:e9:05:df:88:
29:5a:0c:d1:1c:a7:fd:d6:63:e4:6c:cc:c2:79:d9:
ff:e0:b7:8d:02:72:17:2d:7a:78:65:bb:92:44:4b:
8e:04:32:25:51:79:3a:ff:58:a4:3c:76:f5:19:dc:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:52:51:8D:72:9B:06:23:93:CE:50:EA:BB:8A:40:4A:21:F0:63
X509v3 Authority Key Identifier:
keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a31303a3a2f34382d3438203d3e20323138363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:e4c0:10::/48
Signature Algorithm: sha256WithRSAEncryption
8c:73:80:29:3e:32:f8:8d:9c:43:5c:74:c6:08:e3:e0:f1:0d:
49:35:30:3a:f7:8c:a6:77:3d:97:19:63:23:c6:5d:05:a7:2f:
e1:1e:3f:2e:ea:ad:7b:6c:94:96:3c:40:db:f8:4c:be:70:87:
6b:79:0e:4a:77:8c:5b:03:f6:ef:98:5d:d3:7c:b2:96:d2:26:
3b:2c:68:2e:c9:45:6b:47:2e:38:14:f3:83:1a:48:48:21:50:
eb:7d:97:7b:03:77:d6:84:30:5e:d0:77:91:73:db:7e:db:e4:
d7:bd:f3:f0:b6:3b:cd:41:de:4d:82:ee:b5:ed:82:8b:80:f7:
df:70:8a:d9:c8:2e:51:51:16:b4:4c:df:05:19:9c:12:35:57:
e8:ee:30:1f:5c:30:d2:db:70:dc:89:20:7d:37:ae:16:a0:e1:
c2:91:07:84:9b:4c:33:33:a8:bb:57:0c:4b:4a:0c:60:79:85:
cd:f5:d6:a3:f1:f3:3c:d7:04:5b:b0:5f:aa:22:e0:f4:d4:80:
10:8e:2c:6f:ae:9d:43:c2:82:6d:d9:80:d5:fd:b6:17:39:a7:
53:84:5a:0e:37:44:ea:1c:d1:63:b4:c3:29:08:33:94:70:3a:
80:68:a4:82:c7:95:29:b6:f8:f1:fb:9f:d9:2b:5e:85:09:97:
b2:85:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:31:57 2026 by rpki-client