
$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/3230332e36352e3139322e302f31392d3234203d3e203137343230.roa
File: 3230332e36352e3139322e302f31392d3234203d3e203137343230.roa (raw, json)
Hash identifier: y3u8qB85VptzA5YlFGsJbIfVWF77aJR7UfYTg6yAcZo=
Subject key identifier: A2:BD:39:4E:44:73:69:3D:2E:5B:49:32:86:0E:EE:39:D7:1F:BB:B6
Certificate issuer: /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial: 100E624FA072B95A4D50EAFEE092E7474B959CF4
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PAGIC/0/3230332e36352e3139322e302f31392d3234203d3e203137343230.roa
Signing time: Mon 11 May 2026 17:31:57 +0000
ROA not before: Mon 11 May 2026 17:26:57 +0000
ROA not after: Mon 10 May 2027 17:31:57 +0000
asID: 17420
IP address blocks: 203.65.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:0e:62:4f:a0:72:b9:5a:4d:50:ea:fe:e0:92:e7:47:4b:95:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Validity
Not Before: May 11 17:26:57 2026 GMT
Not After : May 10 17:31:57 2027 GMT
Subject: CN=A2BD394E4473693D2E5B4932860EEE39D71FBBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:d6:80:da:3b:33:25:b3:c7:83:d8:5e:9b:
50:80:4b:b9:b4:a7:8e:a2:de:6f:c0:52:2d:dd:9e:
65:29:53:91:84:bb:78:9d:31:da:6e:d3:49:30:c5:
2b:be:38:f2:3f:82:21:15:28:48:6e:b8:ac:28:af:
15:6c:d3:e3:54:83:73:32:54:07:c8:23:41:62:22:
99:a8:12:c4:47:15:17:7a:ba:74:96:5d:4a:70:0e:
80:bc:20:38:35:19:54:45:3c:92:7c:b1:43:42:37:
84:1f:82:68:1f:60:97:b6:d9:b2:dd:e3:31:b6:49:
81:98:e8:23:06:25:41:dd:54:4d:88:57:1d:df:ed:
c3:2e:ee:33:7a:ab:dc:8b:09:64:68:01:08:01:e8:
3a:43:20:46:b5:d9:37:9b:c4:34:5c:6f:0e:35:0d:
5f:7f:c3:ea:36:5e:14:e1:19:fc:a9:0e:b7:e3:ea:
a1:c6:68:87:dd:20:72:4e:c5:c7:38:e3:e0:30:7e:
5f:08:da:aa:95:c1:7e:42:2e:13:9e:7a:1a:06:a8:
04:d0:70:1c:b0:34:9b:88:bb:0a:a8:ac:f3:0d:43:
97:19:32:60:4f:1f:a7:22:20:45:fd:1d:f9:66:2d:
09:cd:7f:df:5e:1c:9e:22:29:14:07:f9:f8:3e:0f:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:39:4E:44:73:69:3D:2E:5B:49:32:86:0E:EE:39:D7:1F:BB:B6
X509v3 Authority Key Identifier:
keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/3230332e36352e3139322e302f31392d3234203d3e203137343230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.65.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:b3:20:9f:4a:36:f9:4f:4b:2b:97:85:f2:d5:ab:74:0b:b7:
0f:5f:12:c6:a2:5d:03:2d:c5:87:a6:a7:13:17:36:eb:f0:73:
3b:c0:11:a5:57:68:c9:19:a5:a2:5d:4e:a8:93:e5:dd:ca:0c:
66:cb:8a:ee:2e:67:1b:b1:71:2a:5c:c5:35:7f:a7:50:ea:7f:
02:dd:87:44:cc:a2:56:35:f9:9d:c6:d8:72:7d:0d:bf:c8:06:
0f:97:50:7e:48:bd:cd:a0:d5:a4:8f:ed:41:62:2c:6b:b4:8f:
65:34:71:44:04:04:4e:a1:19:e4:8c:d1:14:4d:e5:b3:96:d0:
a5:44:d9:c2:3a:42:65:90:ec:95:87:c6:6d:d3:c8:86:55:4d:
cf:aa:f4:19:cd:a4:e7:2a:a3:b4:56:bb:c5:4b:62:d4:a7:15:
e5:24:1d:30:4b:80:1c:10:23:03:3f:09:fb:dc:31:ef:25:f8:
77:fa:5f:02:6e:e9:77:67:e9:4d:d8:94:0b:7d:c1:19:3b:3e:
4f:6c:d7:1e:58:65:dc:d5:7f:d0:98:c1:fd:bd:d2:8c:0a:be:
94:da:3c:8a:38:df:1b:d5:35:1f:f0:dd:99:f3:0e:a4:a9:56:
c2:68:2f:0d:56:a0:01:c0:a5:7e:18:3e:4f:43:69:8a:f1:48:
55:17:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:14 2026 by rpki-client