
$ rpki-client -vvf rpkica.twnic.tw/rpki/NORDATW/0/3231312e37392e39382e302f32332d3234203d3e20313530323838.roa
File: 3231312e37392e39382e302f32332d3234203d3e20313530323838.roa (raw, json)
Hash identifier: hyBqf6CtEwkG2N35ylu9mRRCVoEzfqPS3BAfelnzHEQ=
Subject key identifier: 2A:E7:1F:7A:5A:36:A5:4C:88:A7:2A:13:DB:EF:FA:62:83:B5:7B:EC
Certificate issuer: /CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8
Certificate serial: 1D30C742C65F2DAE197900AEAA25ED94C139548F
Authority key identifier: 43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NORDATW/0/3231312e37392e39382e302f32332d3234203d3e20313530323838.roa
Signing time: Mon 11 May 2026 17:56:19 +0000
ROA not before: Mon 11 May 2026 17:51:19 +0000
ROA not after: Mon 10 May 2027 17:56:19 +0000
asID: 150288
IP address blocks: 211.79.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl
rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:30:c7:42:c6:5f:2d:ae:19:79:00:ae:aa:25:ed:94:c1:39:54:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432716EE054CEBDC62FC02DDE8C62AFC5333A2A8
Validity
Not Before: May 11 17:51:19 2026 GMT
Not After : May 10 17:56:19 2027 GMT
Subject: CN=2AE71F7A5A36A54C88A72A13DBEFFA6283B57BEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:84:91:2f:0e:70:a6:f4:cd:3f:cf:b2:7b:
3d:dc:fc:cd:a6:56:07:dc:ec:07:c2:d4:5c:21:27:
38:bb:a0:63:7c:d0:1e:bd:40:ae:6a:59:7d:cf:f5:
63:e1:f7:60:74:c3:45:9e:84:bf:57:16:90:21:ce:
e8:b5:bb:1f:85:32:96:7e:4b:bb:28:89:33:07:2f:
55:dd:d4:c7:d7:5f:97:bc:1d:95:b1:e6:54:60:5c:
65:aa:52:21:ee:18:a6:b2:b8:de:b4:75:fd:56:a3:
4d:88:5e:6a:5a:18:53:6c:8e:71:ce:c6:b2:e7:81:
72:ff:a4:cb:a2:2c:5c:91:75:f1:cd:c2:e7:31:16:
f9:b7:5b:9d:4f:0f:d1:7d:98:41:61:a5:42:bf:7a:
dd:8d:2f:7a:86:47:7f:24:00:5f:ec:fc:81:ad:19:
ea:9e:8a:c9:17:d9:98:b4:4b:40:64:a5:90:2e:92:
49:d8:dc:d7:37:e9:a6:b7:f8:31:2c:83:d4:8a:f9:
88:77:c9:50:82:ab:1e:39:67:99:f1:d6:ab:cf:62:
42:33:b2:a4:e3:1d:f3:07:70:28:07:b8:5a:2c:f6:
22:8d:9f:33:f8:c2:91:48:79:37:34:b8:7a:92:0f:
73:b5:52:a6:73:9c:a7:15:48:73:3d:75:b4:3a:42:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E7:1F:7A:5A:36:A5:4C:88:A7:2A:13:DB:EF:FA:62:83:B5:7B:EC
X509v3 Authority Key Identifier:
keyid:43:27:16:EE:05:4C:EB:DC:62:FC:02:DD:E8:C6:2A:FC:53:33:A2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432716EE054CEBDC62FC02DDE8C62AFC5333A2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NORDATW/0/3231312e37392e39382e302f32332d3234203d3e20313530323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.79.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:a9:02:d2:92:59:66:7e:8f:7c:9e:9b:86:6b:6d:7f:a6:cd:
27:da:ad:bb:b2:ae:66:b8:96:f9:d7:63:fe:bb:70:ee:3c:53:
fc:7f:6a:95:66:4d:51:cf:bb:9a:f5:00:2b:2d:ee:79:68:0a:
22:63:24:1e:7b:0c:d0:22:5a:b8:e9:7f:7e:c1:ef:eb:c6:4c:
4e:fc:9c:2e:5d:18:f2:e4:81:4f:42:12:0e:ae:16:a6:11:ed:
ad:6f:79:9b:ee:ec:a9:36:eb:83:7b:32:57:86:2c:7c:20:16:
07:15:3e:92:fc:7b:ea:d0:8c:c4:03:5e:dd:c3:11:5a:c2:a8:
29:c0:ed:99:56:0c:13:98:e0:f7:97:5f:ec:75:28:70:64:12:
5a:df:32:97:5f:8a:55:e0:57:35:7f:4d:df:5c:4a:4f:ba:2c:
a9:be:d1:ce:91:26:af:56:a7:ba:a3:1b:d6:ea:0e:e8:eb:e5:
45:2a:48:6a:96:ff:d6:99:8d:ae:e6:75:92:e5:67:d9:ca:1e:
ac:24:b9:7b:27:70:9d:f6:71:ac:3a:6b:82:b8:57:13:86:59:
bf:35:71:91:29:c3:95:d1:cb:97:2f:f2:cf:4c:eb:00:3e:ea:
3a:30:f0:ef:a3:4c:dd:08:ae:50:83:c4:36:13:63:02:56:b2:
98:9a:b6:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:38 2026 by rpki-client