
$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa
File: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=
Subject key identifier: 95:58:9A:CD:3D:8E:39:96:EF:08:52:0E:BB:A6:30:4E:32:B8:5B:63
Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial: 344DEBB56761688ACE9B1406416446F7B69CEA7D
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa
Signing time: Mon 11 May 2026 17:38:04 +0000
ROA not before: Mon 11 May 2026 17:33:04 +0000
ROA not after: Mon 10 May 2027 17:38:04 +0000
asID: 131642
IP address blocks: 103.137.62.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4d:eb:b5:67:61:68:8a:ce:9b:14:06:41:64:46:f7:b6:9c:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
Validity
Not Before: May 11 17:33:04 2026 GMT
Not After : May 10 17:38:04 2027 GMT
Subject: CN=95589ACD3D8E3996EF08520EBBA6304E32B85B63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:9c:88:bf:36:c2:c1:dd:af:4a:c1:c8:33:
f0:59:de:15:ca:42:1c:e8:52:a9:bc:4f:46:8e:e2:
ba:14:91:e8:79:63:26:91:b7:de:a6:f6:7d:e0:72:
6d:ee:38:c9:ab:c2:d3:8f:61:08:ce:82:bc:e2:22:
d6:9d:29:f3:97:3e:31:15:ad:d3:39:4d:54:1d:9b:
33:23:f1:96:ee:31:d1:8f:d2:e7:f2:73:c2:1e:76:
df:41:83:f0:0f:8e:32:c3:bd:0c:1c:6c:99:03:65:
1f:64:da:4a:19:3d:3c:b0:6f:80:84:4f:ba:19:ac:
a1:91:39:99:aa:b8:07:f5:34:9f:c1:89:ce:77:68:
2c:1e:5c:e3:76:73:0e:fe:24:b8:aa:74:3b:b1:ec:
df:75:2f:1e:1f:b7:15:e7:26:61:c8:ad:e7:96:29:
d0:20:a8:85:14:5c:77:94:12:a2:c1:7c:18:56:d7:
55:c2:d2:99:ef:b7:f1:30:0c:f3:30:0c:bb:66:99:
b6:6d:bf:1f:2c:5f:5f:55:02:52:7c:bd:a4:75:f9:
9a:ac:ec:c7:63:06:16:7c:31:f2:30:3a:80:90:ae:
93:db:94:95:b7:ad:e7:4d:85:68:1b:97:3f:1f:99:
30:00:cb:58:12:89:db:9b:bb:0d:8d:09:dc:a7:5c:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:58:9A:CD:3D:8E:39:96:EF:08:52:0E:BB:A6:30:4E:32:B8:5B:63
X509v3 Authority Key Identifier:
keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.62.0/23
Signature Algorithm: sha256WithRSAEncryption
21:c8:7f:e9:86:ab:ee:f2:0d:85:a8:12:a8:58:fd:3c:87:be:
3e:d6:e9:ab:69:e8:9f:4b:69:a2:db:64:90:f8:99:ff:c6:19:
a2:a3:ba:24:12:99:60:8e:4a:d1:33:2b:26:47:c6:18:54:ac:
bb:ae:72:c9:0a:92:c1:c8:b9:ba:4a:1e:d4:7a:3f:eb:86:d1:
af:45:62:94:28:02:46:c6:3a:dd:b4:85:ae:e4:50:6e:53:58:
b5:1e:79:c2:ae:3e:9a:26:ad:fa:53:10:2a:62:a7:98:2e:1f:
b9:a3:5c:25:dc:36:40:be:17:70:cb:02:55:03:c3:45:3e:95:
35:00:79:e3:ce:17:b0:13:49:63:ff:68:0f:2d:45:d5:14:f4:
1c:f6:6c:e8:be:07:c2:1e:48:4d:a3:cc:bb:35:53:43:23:1e:
8d:86:d8:64:a3:f1:9a:f6:68:4b:f5:40:b0:90:ff:b2:e1:13:
1f:f5:bb:0b:bc:aa:93:77:fa:10:59:28:23:91:54:a4:18:26:
32:49:96:7e:b0:2c:c8:ec:1f:fe:b7:34:49:4a:cc:19:98:8b:
de:37:d0:aa:25:57:93:98:11:21:d0:ac:28:c9:27:eb:ec:49:
c9:69:db:48:96:66:28:7a:e6:bb:f1:9b:52:79:63:45:e5:5f:
2f:12:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:00 2026 by rpki-client