
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e203138303432.roa
File: 3131352e34332e302e302f31372d3137203d3e203138303432.roa (raw, json)
Hash identifier: 5gZY3nEfq5SmiFBc4GkzG7kzPKYWP/eJ/0s+gE8A0xM=
Subject key identifier: 64:B7:76:20:A1:A5:34:4E:D0:AF:D9:EA:6A:8C:98:7D:13:E7:D7:BD
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 27E1C99A9751392FC9A6C96EF27C4DDFAF4AD3DD
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:09:14 +0000
ROA not before: Mon 11 May 2026 17:04:14 +0000
ROA not after: Mon 10 May 2027 17:09:14 +0000
asID: 18042
IP address blocks: 115.43.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:e1:c9:9a:97:51:39:2f:c9:a6:c9:6e:f2:7c:4d:df:af:4a:d3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 17:04:14 2026 GMT
Not After : May 10 17:09:14 2027 GMT
Subject: CN=64B77620A1A5344ED0AFD9EA6A8C987D13E7D7BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:15:4c:ff:35:df:36:49:ae:71:35:d7:a8:
5b:5b:22:80:7d:a9:eb:92:e8:98:c3:03:13:11:dc:
27:38:54:40:ff:30:43:e8:09:59:17:24:eb:0e:34:
d1:69:20:91:c7:60:aa:53:b7:40:6f:eb:34:ff:86:
74:44:52:17:3c:15:4d:22:25:35:1c:15:b5:65:ed:
da:2e:34:d8:08:ba:c7:45:fd:8e:f9:a8:8d:25:7f:
be:d6:ca:27:3f:1b:be:11:56:45:9a:11:ba:3e:8a:
2e:df:8c:cf:27:43:3f:ab:a4:91:9b:3a:50:91:cf:
92:14:13:d5:5b:7e:1d:67:09:bf:1c:27:d6:65:6e:
2d:e2:60:b0:04:06:5b:76:ec:7f:60:9b:ca:e4:e7:
0c:b9:8f:bb:64:d0:20:d0:55:e6:b2:93:fb:19:0b:
9f:d1:93:2d:53:6e:b7:08:97:45:6d:8a:2c:fb:a5:
39:5b:b9:87:8d:c6:ab:22:18:30:9f:de:0d:bb:4c:
29:a6:aa:92:8a:5e:2c:56:93:b8:89:4c:21:d5:9e:
3b:1d:7a:d6:76:72:73:df:2b:46:eb:b2:40:5d:c7:
31:41:7a:59:c1:47:c8:9a:8e:ff:84:f5:a2:fe:a7:
49:3e:33:44:43:29:70:7b:08:c8:c5:2e:14:78:96:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:76:20:A1:A5:34:4E:D0:AF:D9:EA:6A:8C:98:7D:13:E7:D7:BD
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31372d3137203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0d:77:1c:b9:cb:03:89:39:b3:4e:eb:b0:f3:b4:90:23:e3:fc:
45:02:d5:4c:4e:84:b3:60:da:49:34:25:ca:3c:28:2c:d4:8a:
47:a8:f0:c0:46:f5:d6:5c:ab:bf:51:8b:1e:d5:25:8a:60:d5:
e5:9c:8d:c1:f7:e3:01:39:7e:23:a0:42:8a:45:f6:95:ff:69:
39:2a:15:b1:4d:f3:fa:35:c0:02:04:62:f2:eb:c6:28:15:9b:
07:e2:e3:5e:20:18:ce:fe:28:ac:6a:13:b3:82:fd:9e:af:8e:
d2:74:b0:8a:b9:5c:cd:3b:e6:ff:51:38:bd:68:12:13:50:e9:
c1:cb:ea:10:35:aa:b6:50:55:df:bb:54:d0:74:4c:9e:ef:fe:
e8:0c:3c:25:af:b0:a2:f3:e1:d8:6e:f7:9c:45:8c:0c:d2:85:
72:6c:ab:33:fc:b9:96:a2:76:88:d9:b8:6b:71:8c:84:35:d2:
c7:5a:f7:a5:ea:d3:24:a3:07:bd:d4:05:ca:a6:1a:6b:af:d7:
74:36:ea:4a:3d:0c:f3:28:89:87:e1:0f:89:93:26:a9:8e:8a:
53:b7:c3:57:19:95:cd:b7:f8:21:d0:35:b2:90:93:88:54:6a:
fc:36:5f:93:71:88:13:3b:80:29:a5:e1:06:aa:4f:71:07:60:
63:fc:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:51:40 2026 by rpki-client