
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37362e3138342e302f32332d3234203d3e2039333034.roa
File: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=
Subject key identifier: 8A:31:61:29:A1:C9:89:97:54:77:BB:8A:B6:03:9B:D0:DF:FE:4D:70
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 5FBE63255F5D40629B35B5D1EFBFB4FE26A91820
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37362e3138342e302f32332d3234203d3e2039333034.roa
Signing time: Wed 24 Jun 2026 08:23:49 +0000
ROA not before: Wed 24 Jun 2026 08:18:49 +0000
ROA not after: Wed 23 Jun 2027 08:23:49 +0000
asID: 9304
IP address blocks: 211.76.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 13:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:63:25:5f:5d:40:62:9b:35:b5:d1:ef:bf:b4:fe:26:a9:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: Jun 24 08:18:49 2026 GMT
Not After : Jun 23 08:23:49 2027 GMT
Subject: CN=8A316129A1C989975477BB8AB6039BD0DFFE4D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:c7:02:d3:20:d4:80:cd:f3:4a:49:6e:d2:
28:a4:78:1f:f6:8c:11:2e:d7:76:22:4c:1e:00:be:
19:1e:fa:99:48:25:d9:4d:b8:4d:95:b7:c2:84:1c:
f0:c6:bd:07:bd:02:4d:f3:9c:ad:e9:9c:26:17:6d:
5b:47:8a:0e:58:15:42:4a:88:19:ef:9f:d2:54:08:
20:55:bf:ec:8b:21:fe:ba:84:04:bb:b8:18:99:62:
eb:b9:58:7a:bc:3f:e9:fa:17:6d:30:cd:8f:2f:57:
e3:57:89:07:7b:eb:96:f0:2d:e5:10:ad:3e:af:14:
bd:03:14:64:a9:9b:f0:ab:65:0c:a0:89:32:b0:ad:
b5:e3:35:6a:6b:5d:26:8a:54:3e:6d:43:d1:31:27:
e1:a9:58:aa:fa:43:03:ff:56:8a:60:17:7c:59:dc:
6a:35:f6:1f:a7:ee:1c:85:16:b9:28:aa:ee:f7:23:
81:82:46:75:dd:8c:52:b0:78:d9:27:29:fd:dd:ce:
6f:1a:7b:74:36:0e:51:75:4b:95:af:8a:0b:c3:87:
07:91:14:50:4a:ab:3d:6d:67:8a:82:29:9b:96:5e:
a1:fc:c8:d2:a2:a7:3c:c2:7c:4c:f5:c1:2b:18:6f:
32:96:ca:c4:cc:4d:b9:2c:06:0a:8e:c1:a6:fc:87:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:61:29:A1:C9:89:97:54:77:BB:8A:B6:03:9B:D0:DF:FE:4D:70
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37362e3138342e302f32332d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.184.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:15:e8:89:b3:cc:be:ad:42:02:fa:9c:7d:7c:87:7b:1c:d8:
49:ef:24:ed:fb:35:9d:05:49:b5:74:78:50:e0:5b:17:66:de:
fc:2d:05:28:d3:eb:17:47:d6:30:2c:99:bb:73:1b:a3:ba:4e:
29:cc:9f:40:8b:88:d7:ab:e9:cb:31:a2:84:a7:44:e2:ef:74:
22:8a:6b:bd:53:18:f7:96:e1:b9:b0:f4:70:a4:96:47:48:09:
6a:77:b0:e0:7d:78:65:4d:2c:d3:5c:49:c0:cf:d1:53:60:04:
9a:0e:4a:dd:17:d7:a4:5c:dd:9c:f7:5a:cf:80:9e:9a:f2:7f:
60:1e:ac:aa:38:25:62:7b:0b:61:e3:59:10:11:04:43:2c:77:
eb:3e:5c:20:fe:44:bc:1e:f0:77:67:59:4b:ae:99:5b:10:e6:
1a:21:a9:15:99:2d:b2:2d:1f:6f:18:40:6d:b3:08:84:03:95:
01:c5:55:3c:8e:c2:4c:31:09:2b:05:43:d4:9e:2e:08:bd:5c:
d5:6f:e6:5b:d5:94:42:92:b8:b7:16:e8:fa:a6:fd:95:89:79:
45:2a:e5:0b:00:df:1a:8e:9f:99:2f:25:15:c5:de:b6:47:c3:
d6:dc:04:6e:3a:10:9e:ea:8d:63:9f:30:11:89:c5:2e:e6:c5:
b1:eb:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:13:00 2026 by rpki-client