
$ rpki-client -vvf rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa
File: 3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (raw, json)
Hash identifier: G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=
Subject key identifier: FE:69:40:E3:10:80:DF:50:79:C2:5B:1A:EF:DF:16:51:B6:54:6A:43
Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
Certificate serial: 120C5553AC468674CAC4666408B132ACB97BE6CC
Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa
Signing time: Mon 11 May 2026 17:40:31 +0000
ROA not before: Mon 11 May 2026 17:35:31 +0000
ROA not after: Mon 10 May 2027 17:40:31 +0000
asID: 131645
IP address blocks: 202.148.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl
rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0c:55:53:ac:46:86:74:ca:c4:66:64:08:b1:32:ac:b9:7b:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
Validity
Not Before: May 11 17:35:31 2026 GMT
Not After : May 10 17:40:31 2027 GMT
Subject: CN=FE6940E31080DF5079C25B1AEFDF1651B6546A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:e6:d2:e9:ed:3d:ef:3f:2c:6a:6a:07:90:
46:9e:21:99:04:ee:f0:a7:b7:44:c8:ae:3e:ff:3f:
68:2d:38:e1:2c:43:9e:b7:95:cb:2d:58:99:0e:e6:
9f:f4:4d:eb:e7:71:ea:b4:c8:6b:82:41:3a:0b:33:
48:bc:24:d4:6a:af:fc:e8:1a:06:f1:b9:ab:55:19:
c9:db:ff:bf:6b:12:b5:56:74:79:ae:1e:72:bc:15:
1f:2f:ec:16:21:e5:a9:30:85:78:dd:04:ca:c4:b4:
60:f4:c4:1e:e0:30:fc:38:ca:45:1f:69:05:f0:3f:
86:d4:d9:79:c9:e5:ef:05:5d:c4:43:33:79:1f:1b:
13:3a:93:19:02:9a:39:91:ef:b7:47:2d:8f:7c:3c:
64:36:f7:4f:c5:b5:28:3c:e5:f6:e2:06:81:17:7a:
c5:e2:33:99:55:e0:b5:46:51:73:e2:08:e7:66:bb:
4b:86:ec:f7:1d:2f:cd:cf:cd:53:42:72:2f:6c:92:
e4:f6:35:5c:1b:f5:a8:06:91:96:a1:f4:9d:28:30:
88:d7:83:91:b6:55:50:12:ed:71:47:21:0a:17:43:
c7:79:b3:57:81:c9:39:19:f0:46:ae:0a:02:f1:94:
fe:8f:14:7d:00:8a:f0:b4:db:12:67:ed:3c:e0:d1:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:40:E3:10:80:DF:50:79:C2:5B:1A:EF:DF:16:51:B6:54:6A:43
X509v3 Authority Key Identifier:
keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.208.0/23
Signature Algorithm: sha256WithRSAEncryption
92:39:98:00:6b:c5:70:13:0e:62:d1:07:0f:ef:cf:ca:4c:92:
1a:e6:1f:b8:54:25:27:7b:7a:ad:55:9e:66:2a:68:74:40:cc:
da:1e:77:14:60:4c:dc:22:54:a4:c4:e8:f2:53:cc:66:23:3b:
41:be:8d:17:39:d2:be:bb:30:7f:79:5c:b6:90:99:bd:24:d8:
8a:a0:5b:e0:89:fb:ec:11:e9:f1:2f:f7:7b:fe:91:0e:ab:8a:
2c:b1:fd:b9:85:bd:cb:9b:97:5a:99:ea:78:aa:d8:97:91:7b:
13:6f:64:73:a2:9d:54:ff:5f:11:6e:f7:d4:39:e4:d2:18:da:
66:1e:21:5e:7d:3c:76:98:4a:d7:3b:d8:f7:93:4a:cd:3b:f9:
9c:e5:80:72:60:2e:f9:3b:87:fc:10:a8:9f:7f:af:a7:fc:28:
18:06:84:ca:42:a3:ee:94:b2:6f:1b:0b:c7:8d:e5:9d:6c:dd:
6a:92:dc:c3:8a:0b:a6:05:4b:3d:3f:68:c3:2c:9f:0f:52:6d:
05:9d:f4:25:3e:ea:c2:1e:30:e5:99:40:ba:a2:28:07:84:57:
43:8e:ba:4f:21:90:d1:59:36:11:94:91:0f:97:20:3a:8a:2f:
94:ef:8f:24:21:06:23:be:c8:32:e9:7f:a2:21:ec:93:3a:56:
58:40:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:22 2026 by rpki-client