
$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa
File: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (raw, json)
Hash identifier: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=
Subject key identifier: FD:61:88:CF:21:17:4B:D9:87:67:8A:93:D8:11:03:52:86:69:71:EF
Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial: 50E933EA9758E38C928526483E9538F9AD37CE9A
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa
Signing time: Mon 11 May 2026 17:40:38 +0000
ROA not before: Mon 11 May 2026 17:35:38 +0000
ROA not after: Mon 10 May 2027 17:40:38 +0000
asID: 31972
IP address blocks: 202.148.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e9:33:ea:97:58:e3:8c:92:85:26:48:3e:95:38:f9:ad:37:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Validity
Not Before: May 11 17:35:38 2026 GMT
Not After : May 10 17:40:38 2027 GMT
Subject: CN=FD6188CF21174BD987678A93D8110352866971EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:61:9b:80:2f:24:07:4a:20:b1:a2:b3:77:
fb:85:db:85:1f:ee:c9:d5:9b:c3:ad:07:9c:bb:30:
30:6b:52:22:02:06:58:0a:80:e9:3b:5f:b3:bb:49:
02:81:5f:db:97:a5:f2:c4:34:05:73:62:c5:6b:6e:
9a:92:9d:9d:57:55:02:e2:78:a7:24:21:62:50:db:
eb:0c:ac:f9:66:de:5f:3c:05:a9:35:ff:d0:e1:ce:
4c:bb:05:7b:c5:0a:2c:bb:7c:ba:e5:39:ea:28:24:
e8:81:3a:d6:f1:3e:06:8f:9a:36:cd:db:9d:4a:e4:
73:66:b6:ec:b0:4d:8d:94:a7:08:cf:36:aa:64:6c:
57:46:9e:64:ca:23:6e:f2:8b:32:74:42:3a:c3:24:
5e:46:d5:b4:04:04:53:a1:51:c7:ae:18:bc:af:6a:
6b:92:ea:18:2b:0c:93:46:1a:59:65:15:c2:7f:f9:
04:e4:53:79:dd:8e:e8:29:87:17:ec:e8:5e:61:e8:
5f:02:05:11:96:b4:05:2e:ea:28:be:d0:bd:82:7e:
25:d2:07:8e:d8:58:1d:33:d8:9f:b6:22:39:b3:57:
72:0f:7d:ff:ad:2d:8b:5c:8f:f9:62:6a:c2:66:a8:
f0:08:b9:85:c0:6d:a1:c0:69:90:65:9c:ce:c3:1b:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:88:CF:21:17:4B:D9:87:67:8A:93:D8:11:03:52:86:69:71:EF
X509v3 Authority Key Identifier:
keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:fa:85:51:49:5d:29:5b:a0:04:f8:ec:f5:ce:4f:c8:0e:a1:
40:27:d4:ba:ba:77:ad:4d:00:40:f2:cf:7f:1c:8b:cd:5b:a2:
1b:b3:39:6d:48:ae:45:ba:b0:5d:98:a0:b8:e9:c0:42:c9:96:
e3:cf:f9:8e:26:a7:f1:ba:f1:fd:82:e3:12:0d:07:bc:8d:ac:
ce:3c:44:54:50:00:19:86:6b:62:36:13:d2:75:3a:f5:5a:7d:
f0:70:b9:c0:2c:9e:a9:3f:40:60:46:8b:8a:d3:c0:62:bd:3e:
bf:37:8d:db:9e:56:68:21:79:6c:80:19:d6:42:31:af:91:51:
c2:2b:db:64:40:6a:e6:f8:c5:ca:9b:45:8a:10:6d:83:d2:ae:
86:3d:de:07:19:99:35:42:09:c3:f6:88:d5:21:f3:39:bb:53:
62:d9:88:5e:df:81:6b:67:f5:ee:a4:46:1d:bf:a9:a3:df:31:
66:a9:e1:01:46:08:90:02:5f:86:e4:4a:e9:fc:55:37:f3:e1:
c6:a6:ad:60:6f:77:54:0c:4e:d6:88:c9:e2:fa:37:76:eb:b9:
b8:c9:88:d6:ee:89:91:03:0a:ce:09:93:14:79:d8:71:a2:f5:
c8:ae:63:81:cb:8e:24:86:b2:26:f2:68:5a:09:81:71:78:e1:
ae:60:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:01 2026 by rpki-client