
$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa
File: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (raw, json)
Hash identifier: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=
Subject key identifier: 46:6B:B1:50:26:C3:08:50:75:E4:F0:48:9D:D5:CB:F4:10:E8:C0:86
Certificate issuer: /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Certificate serial: 7D4E966A7A37133D119562BC575E6A6C7730FE3B
Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa
Signing time: Mon 11 May 2026 17:06:59 +0000
ROA not before: Mon 11 May 2026 17:01:59 +0000
ROA not after: Mon 10 May 2027 17:06:59 +0000
asID: 131677
IP address blocks: 103.149.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl
rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:96:6a:7a:37:13:3d:11:95:62:bc:57:5e:6a:6c:77:30:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Validity
Not Before: May 11 17:01:59 2026 GMT
Not After : May 10 17:06:59 2027 GMT
Subject: CN=466BB15026C3085075E4F0489DD5CBF410E8C086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:b1:de:86:4d:8e:e1:ca:47:5b:a4:36:fc:
16:4a:56:b4:9b:70:1c:6e:fd:d1:94:2a:49:15:e4:
7f:ae:b8:35:5d:c7:de:d6:86:b8:96:24:84:2d:64:
d1:81:16:2b:38:67:6a:f8:33:1e:6a:52:e5:f7:56:
4c:3d:aa:a9:b1:a5:41:84:1c:0e:8b:87:2a:08:0a:
8d:4f:88:83:df:e2:c9:ea:0e:71:c2:4f:6d:59:8c:
f2:df:fc:4c:cc:17:02:78:ca:2a:84:4e:c9:15:b2:
95:75:dd:43:4f:d8:06:74:46:15:cc:8d:2a:47:61:
c0:19:cb:39:62:9f:61:e6:40:93:c3:18:1e:12:3f:
34:d9:8a:7f:2a:f5:9d:59:59:52:4a:5c:00:6a:f2:
d2:5a:d2:2c:d3:ec:c3:08:73:99:6e:57:b0:7a:7b:
bf:e0:75:09:6f:ba:4d:e1:25:34:78:f1:d3:43:49:
3a:d5:88:22:af:29:3c:80:5a:6b:b2:f8:6e:1f:7d:
4d:f9:8e:c5:71:f3:19:83:5f:28:23:cf:99:5c:c2:
a0:d5:39:2d:b9:a5:88:fd:f4:54:b9:9a:da:db:41:
9b:c1:a5:c6:c5:84:81:37:30:b7:ee:84:53:b5:7c:
c0:bc:f4:7c:72:97:fa:6f:c6:03:3e:28:73:b7:7a:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6B:B1:50:26:C3:08:50:75:E4:F0:48:9D:D5:CB:F4:10:E8:C0:86
X509v3 Authority Key Identifier:
keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.64.0/23
Signature Algorithm: sha256WithRSAEncryption
16:31:05:78:46:d7:14:02:b6:1b:57:2e:cf:23:3c:fc:a8:8c:
52:bb:b4:98:a9:3b:36:db:d6:01:47:a7:1f:95:19:9e:88:c8:
6c:58:52:05:64:31:41:5a:3e:c2:68:a6:c6:50:d7:c4:e2:f8:
67:29:db:c9:40:a3:13:7b:68:a9:89:fc:4c:1f:21:09:73:75:
d9:67:98:46:de:a5:85:28:e3:fc:54:b7:4f:20:9d:e8:7d:5e:
5c:12:f3:5f:59:2b:f2:42:f0:b8:1d:69:cd:35:ec:15:2d:61:
35:14:df:0d:f7:ee:2f:ec:b0:50:1b:10:3c:96:f5:17:0a:2e:
9c:5c:22:fe:90:e2:1f:fb:93:d9:56:ee:94:2a:71:56:e8:44:
96:b3:88:96:3f:3d:53:87:1b:db:85:59:2e:15:4b:ed:d1:fe:
10:05:90:a5:73:9c:d4:95:b6:e0:cc:e0:04:a8:f3:6b:c1:9b:
9d:de:1b:bd:65:a5:1f:21:ad:e7:5c:55:ca:32:d3:45:57:9d:
ac:94:36:09:f0:e2:06:6c:27:44:73:a6:43:05:b4:9d:7e:b3:
14:bc:7a:e0:49:7e:a1:69:2e:f7:41:a0:d1:ce:66:24:5a:75:
c7:63:a6:f6:d9:cc:7e:48:fe:63:95:f4:38:ad:bf:e2:7c:60:
ab:dd:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:03 2026 by rpki-client