
$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3230322e3135312e34382e302f32302d3234203d3e203138303432.roa
File: 3230322e3135312e34382e302f32302d3234203d3e203138303432.roa (raw, json)
Hash identifier: 0Sm3TU3ucHMOKOYa+d48jFM4xmkHZ7KXpkQsW/3BXuk=
Subject key identifier: 09:15:8B:13:5A:13:7C:05:8E:EF:FF:51:68:5A:EA:08:EF:74:A4:47
Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial: 51A2E8B6180800ED8F49EF5AC47A0E9FD9B4173E
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230322e3135312e34382e302f32302d3234203d3e203138303432.roa
Signing time: Mon 11 May 2026 17:04:20 +0000
ROA not before: Mon 11 May 2026 16:59:20 +0000
ROA not after: Mon 10 May 2027 17:04:20 +0000
asID: 18042
IP address blocks: 202.151.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a2:e8:b6:18:08:00:ed:8f:49:ef:5a:c4:7a:0e:9f:d9:b4:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Validity
Not Before: May 11 16:59:20 2026 GMT
Not After : May 10 17:04:20 2027 GMT
Subject: CN=09158B135A137C058EEFFF51685AEA08EF74A447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:0b:a7:52:08:57:0c:a1:3e:2a:3c:0d:54:
98:74:6a:78:31:cd:4e:e8:9e:b7:09:49:1f:1c:90:
b9:b1:83:09:e0:8a:f7:1f:9b:a5:66:37:3b:fb:93:
9a:9f:65:4c:80:da:90:d7:25:0f:79:98:db:60:11:
70:9b:4c:36:16:88:65:62:f9:4c:6f:ef:20:35:be:
2c:28:7c:95:fa:9b:b0:23:23:1d:54:e5:35:84:78:
ee:cc:b8:14:f9:a1:94:dd:72:a6:9f:80:0e:ac:e9:
6e:f2:79:bd:0e:08:f5:f0:e6:d2:05:04:47:81:35:
b4:95:96:6c:9b:f2:fc:5d:d3:86:e8:09:a7:32:a7:
8e:c5:0a:aa:27:6d:89:71:a6:26:69:e7:2d:9d:42:
e2:aa:06:13:f9:89:8c:d7:57:62:ba:2d:63:a6:02:
bd:fb:7b:d2:fe:be:c7:e0:72:99:dd:c1:f8:9a:87:
53:93:35:8f:9a:66:af:60:7a:fb:28:de:7d:77:92:
31:fa:4c:a8:8c:16:0d:7d:d1:0a:c8:10:7c:92:ba:
34:32:50:72:49:c7:e0:94:4a:4d:81:02:76:e5:5a:
78:c3:c6:6e:bc:5e:13:74:1e:34:49:d5:0c:d8:89:
0c:ed:da:32:a1:8f:63:21:27:0b:b0:4d:7f:7f:0b:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:15:8B:13:5A:13:7C:05:8E:EF:FF:51:68:5A:EA:08:EF:74:A4:47
X509v3 Authority Key Identifier:
keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230322e3135312e34382e302f32302d3234203d3e203138303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.151.48.0/20
Signature Algorithm: sha256WithRSAEncryption
27:d9:f0:75:e0:4a:30:67:e2:5c:6b:bc:98:0d:9b:39:d9:ec:
42:b9:7a:3f:93:84:e3:95:ce:52:f0:02:e3:d5:31:ad:6f:24:
30:4f:57:30:d3:be:10:f0:c6:dd:ad:d8:d4:e6:cb:5f:ab:4d:
7f:ca:b5:7f:0a:0f:f9:a9:6e:81:6c:70:76:f5:90:2b:25:8e:
6b:4a:fb:64:c2:2c:2b:7b:f9:ec:d4:33:3a:f2:3f:a2:a0:92:
77:0c:d4:7f:0d:86:40:be:ce:d6:00:5b:9f:f3:e8:48:f3:74:
e9:d3:2b:e5:4f:b7:3a:12:60:bd:c3:c0:29:37:26:be:a8:6f:
48:84:78:4f:75:35:55:2d:f9:28:f7:e2:f1:e0:5b:59:8d:ec:
fc:21:bd:82:a1:fd:28:4c:4c:23:ab:f3:2b:66:4a:0e:03:be:
df:8b:b2:fd:c7:d8:aa:0f:46:f9:4c:ee:93:6f:cf:53:84:1a:
3d:b6:f6:9d:e5:76:f9:67:62:29:6a:14:42:19:63:c1:a8:9d:
bd:ff:d6:c3:f6:05:9e:13:d2:9f:5b:a0:26:d3:2f:3a:f5:58:
ad:5d:78:b9:8c:31:de:bd:2c:f9:89:c7:19:1d:0e:ea:27:d4:
2c:1b:a3:e4:ca:a3:0e:7d:b1:01:3e:e6:12:43:1d:0f:c5:db:
f6:8b:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:35 2026 by rpki-client