
$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa
File: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (raw, json)
Hash identifier: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=
Subject key identifier: 18:79:35:CB:A8:29:4D:12:74:25:80:18:68:AC:B2:FD:1C:E5:28:11
Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial: 0B19A543FFF3DCC80D51263B1EE5AE461198AA0A
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa
Signing time: Mon 11 May 2026 16:50:21 +0000
ROA not before: Mon 11 May 2026 16:45:21 +0000
ROA not after: Mon 10 May 2027 16:50:21 +0000
asID: 7539
IP address blocks: 203.145.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:43:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:19:a5:43:ff:f3:dc:c8:0d:51:26:3b:1e:e5:ae:46:11:98:aa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Validity
Not Before: May 11 16:45:21 2026 GMT
Not After : May 10 16:50:21 2027 GMT
Subject: CN=187935CBA8294D127425801868ACB2FD1CE52811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:87:ea:1f:72:2f:85:be:d9:54:1a:08:0c:
ad:16:e6:f2:22:ab:d1:25:82:30:9e:78:ad:ea:65:
68:9c:ec:f6:c6:7d:df:3f:3e:67:5d:a8:28:62:f6:
3d:97:e6:76:5a:52:3f:5c:76:51:43:09:5b:ce:d9:
b1:45:73:a8:1e:ac:72:c5:b5:dc:f6:2b:36:53:3e:
0d:af:de:5e:c1:13:1e:44:bb:ec:c3:73:57:8c:49:
64:71:02:3e:ed:f5:a8:66:ee:71:4b:ce:f3:0a:2b:
a3:e9:72:5b:21:c3:13:ce:11:78:51:9a:b3:d9:2d:
e2:03:b1:d8:77:6b:3d:73:32:dc:e9:08:1d:f3:d4:
ab:b9:5a:bf:62:15:af:61:49:bd:2b:18:11:41:da:
e3:d4:bf:13:ee:45:35:ba:30:ad:55:16:10:d5:2d:
c1:c4:84:ba:0a:b0:7c:08:01:67:7e:d3:7a:1f:b6:
26:b8:03:9d:89:a3:91:ab:c3:d7:1a:e8:40:4e:8c:
ab:98:2c:c7:f4:1f:76:e5:83:60:4a:ee:a1:e4:78:
1e:8f:dc:e0:61:04:f2:cc:76:05:0c:8c:c6:ca:ad:
9d:b8:a0:d6:ef:cf:fd:7d:49:de:b5:5b:8d:fa:26:
61:93:15:42:d3:ce:b6:ad:81:a1:c0:11:30:ac:2b:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:35:CB:A8:29:4D:12:74:25:80:18:68:AC:B2:FD:1C:E5:28:11
X509v3 Authority Key Identifier:
keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.208.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:e2:43:e9:7e:0c:af:26:94:73:1f:e1:93:ad:7a:52:e3:ce:
d7:8a:6d:5d:6c:46:9d:c5:d5:9b:80:ad:8c:f8:2f:6e:01:6b:
8c:35:0e:07:a8:40:29:e2:df:19:68:fd:d8:80:88:dd:b5:f9:
42:5b:60:ba:24:de:8e:84:eb:33:84:92:9f:54:ee:18:b2:a3:
a8:61:8a:13:a0:7e:98:1e:c8:3b:ee:cc:15:b5:62:bf:a2:71:
43:12:64:98:7d:2d:e9:ab:e3:f0:65:42:2e:ba:0e:2a:77:7f:
93:ac:6d:41:97:07:12:8b:2a:80:c2:8e:cc:c4:88:83:9d:93:
2d:9a:cc:8c:9f:f1:58:b9:40:43:2c:ab:f2:b8:fe:bf:07:21:
3c:91:d8:10:67:ff:8b:69:de:75:53:59:a5:ec:31:94:d8:9c:
fb:e7:d2:de:41:e6:71:05:73:f7:72:dd:d3:d9:61:82:33:69:
18:58:75:ca:7e:df:6e:9a:e3:8b:db:2d:e8:4a:f5:17:d3:62:
0a:23:02:1a:86:5f:0c:b5:16:2b:0a:b2:9a:9a:34:06:29:af:
a1:8d:8f:5d:65:82:28:cc:89:73:25:01:e1:48:4e:3a:20:c5:
af:31:ea:8e:55:09:ff:24:57:38:bf:ef:f7:b5:38:c2:30:38:
e8:21:75:19
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUCxmlQ//z3MgNUSY7HuWuRhGYqgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD
QzhFQTZDMTAeFw0yNjA1MTExNjQ1MjFaFw0yNzA1MTAxNjUwMjFaMDMxMTAvBgNV
BAMTKDE4NzkzNUNCQTgyOTREMTI3NDI1ODAxODY4QUNCMkZEMUNFNTI4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mofqH3Ivhb7ZVBoIDK0W5vIi
q9ElgjCeeK3qZWic7PbGfd8/PmddqChi9j2X5nZaUj9cdlFDCVvO2bFFc6gerHLF
tdz2KzZTPg2v3l7BEx5Eu+zDc1eMSWRxAj7t9ahm7nFLzvMKK6PpclshwxPOEXhR
mrPZLeIDsdh3az1zMtzpCB3z1Ku5Wr9iFa9hSb0rGBFB2uPUvxPuRTW6MK1VFhDV
LcHEhLoKsHwIAWd+03oftia4A52Jo5Grw9ca6EBOjKuYLMf0H3blg2BK7qHkeB6P
3OBhBPLMdgUMjMbKrZ24oNbvz/19Sd61W436JmGTFULTzratgaHAETCsK0IdAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUGHk1y6gpTRJ0JYAYaKyy/RzlKBEwHwYDVR0j
BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w
LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB
RkFDQzhFQTZDMS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC8zMjMwMzMyZTMxMzQzNTJl
MzIzMDM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzczNTMzMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATLkdAwDQYJKoZIhvcNAQELBQADggEBAJ3iQ+l+DK8mlHMf4ZOtelLjzteKbV1s
Rp3F1ZuArYz4L24Ba4w1DgeoQCni3xlo/diAiN21+UJbYLok3o6E6zOEkp9U7hiy
o6hhihOgfpgeyDvuzBW1Yr+icUMSZJh9Lemr4/BlQi66Dip3f5OsbUGXBxKLKoDC
jszEiIOdky2azIyf8Vi5QEMsq/K4/r8HITyR2BBn/4tp3nVTWaXsMZTYnPvn0t5B
5nEFc/dy3dPZYYIzaRhYdcp+326a44vbLehK9RfTYgojAhqGXwy1FisKspqaNAYp
r6GNj11lgijMiXMlAeFITjogxa8x6o5VCf8kVzi/7/e1OMIwOOghdRk=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:25 2026 by rpki-client