
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa
File: 3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa (raw, json)
Hash identifier: IN0+/ooOlPpq110sSFYkiYlC1Kewj2Ug+tzHpY6kPI0=
Subject key identifier: 79:BB:D8:31:B0:38:47:2E:BA:AA:57:0E:09:68:B3:B3:6F:24:3E:D8
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 43281AF55F11B3785A6F940E7AC7181200A5E651
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:04:19 +0000
ROA not before: Mon 11 May 2026 16:59:19 +0000
ROA not after: Mon 10 May 2027 17:04:19 +0000
asID: 18042
IP address blocks: 124.155.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:28:1a:f5:5f:11:b3:78:5a:6f:94:0e:7a:c7:18:12:00:a5:e6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 16:59:19 2026 GMT
Not After : May 10 17:04:19 2027 GMT
Subject: CN=79BBD831B038472EBAAA570E0968B3B36F243ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:30:06:a2:1a:8c:a9:c3:6d:35:76:9e:c7:
d5:89:31:4a:04:fb:25:26:6e:4f:62:b3:ee:cf:7d:
2c:ff:e4:1e:20:17:06:4f:95:33:92:0f:c3:07:2a:
75:46:7c:37:5a:51:ed:5f:cb:88:19:87:4c:7f:ef:
98:d1:58:d8:1f:7d:48:16:8b:34:60:23:85:76:f3:
12:a4:eb:9f:b0:54:49:b6:8f:fe:79:81:eb:71:e8:
5b:56:9c:56:1e:32:9b:63:05:92:f4:69:c4:53:c4:
9d:56:f7:86:b1:b6:2e:1c:8e:97:44:bf:7a:d6:70:
d7:3f:bd:cf:36:b8:e9:70:57:43:12:30:a8:92:e5:
4c:37:f7:0f:48:05:df:26:32:87:02:cb:65:be:34:
ea:25:a7:61:d0:5e:18:42:1c:2f:00:ac:01:51:e7:
2c:bf:7d:d6:e6:87:c9:c7:a0:f3:09:60:1c:09:1a:
77:bf:8e:4b:5e:f4:39:23:11:33:f8:b3:67:f0:cd:
6d:de:7e:33:be:47:4c:2d:fd:83:a2:14:bb:6d:3d:
02:0b:18:77:79:68:ca:5d:5c:72:5a:0d:54:84:3a:
fa:d7:60:9c:c6:4f:fc:df:a7:db:a3:43:ef:51:dc:
67:5f:6a:d7:71:62:93:b0:08:f4:e2:3f:61:0a:42:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:D8:31:B0:38:47:2E:BA:AA:57:0E:09:68:B3:B3:6F:24:3E:D8
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132342e3135352e3132382e302f31392d3234203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:bb:89:04:df:d1:43:da:a0:34:cf:32:5b:cc:79:da:ea:b6:
72:a8:25:64:18:f8:97:95:d8:bb:76:e1:74:d7:a9:a9:44:18:
1a:d3:ca:73:f2:bf:ce:4b:18:c3:ab:24:bb:ea:1e:92:9e:b8:
a1:4a:96:1b:56:54:34:fc:cf:7a:65:23:db:ba:80:fd:7b:a7:
89:00:92:e8:6f:ba:55:8b:90:f8:e3:f4:80:21:19:68:5a:5d:
84:8d:77:c1:d7:ba:ce:38:a4:e1:d4:69:a9:5d:3b:c4:d5:8d:
5a:08:f5:da:3f:39:5f:4d:b3:8a:05:34:25:e5:4f:08:83:49:
cf:2c:3b:61:b2:b6:4e:44:7f:ad:00:48:c4:37:1d:f0:1e:62:
a3:fc:a1:2a:1b:7c:43:35:fe:ad:ac:e3:6a:ed:c7:d6:38:4d:
9e:d9:d8:97:f3:fe:4a:5c:16:c6:3b:dd:a1:f6:ef:ee:24:3d:
1f:8f:91:f6:f6:04:ad:ec:26:3b:9a:bc:bc:b1:1f:84:d3:39:
43:85:70:76:0b:4e:1e:54:8d:63:ff:c0:1e:e1:1e:5d:0d:5e:
7c:52:d9:39:46:54:76:7d:03:b1:7d:b7:9a:e8:b5:5e:83:1f:
b7:41:29:63:47:86:45:b1:3a:e4:da:cd:81:0b:29:6a:d0:6c:
14:f2:09:25
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUQyga9V8Rs3hab5QOescYEgCl5lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy
MzMyNEU0QjAeFw0yNjA1MTExNjU5MTlaFw0yNzA1MTAxNzA0MTlaMDMxMTAvBgNV
BAMTKDc5QkJEODMxQjAzODQ3MkVCQUFBNTcwRTA5NjhCM0IzNkYyNDNFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRODAGohqMqcNtNXaex9WJMUoE
+yUmbk9is+7PfSz/5B4gFwZPlTOSD8MHKnVGfDdaUe1fy4gZh0x/75jRWNgffUgW
izRgI4V28xKk65+wVEm2j/55getx6FtWnFYeMptjBZL0acRTxJ1W94axti4cjpdE
v3rWcNc/vc82uOlwV0MSMKiS5Uw39w9IBd8mMocCy2W+NOolp2HQXhhCHC8ArAFR
5yy/fdbmh8nHoPMJYBwJGne/jkte9DkjETP4s2fwzW3efjO+R0wt/YOiFLttPQIL
GHd5aMpdXHJaDVSEOvrXYJzGT/zfp9ujQ+9R3GdfatdxYpOwCPTiP2EKQg1DAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUebvYMbA4Ry66qlcOCWizs28kPtgwHwYDVR0j
BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H
LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF
ODdDRDIzMzI0RTRCLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMjM0MmUzMTM1
MzUyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAV8m4AwDQYJKoZIhvcNAQELBQADggEBAG67iQTf0UPaoDTPMlvMedrq
tnKoJWQY+JeV2Lt24XTXqalEGBrTynPyv85LGMOrJLvqHpKeuKFKlhtWVDT8z3pl
I9u6gP17p4kAkuhvulWLkPjj9IAhGWhaXYSNd8HXus44pOHUaaldO8TVjVoI9do/
OV9Ns4oFNCXlTwiDSc8sO2Gytk5Ef60ASMQ3HfAeYqP8oSobfEM1/q2s42rtx9Y4
TZ7Z2Jfz/kpcFsY73aH27+4kPR+Pkfb2BK3sJjuavLyxH4TTOUOFcHYLTh5UjWP/
wB7hHl0NXnxS2TlGVHZ9A7F9t5rotV6DH7dBKWNHhkWxOuTazYELKWrQbBTyCSU=
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:01 2026 by rpki-client