
$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa
File: 3130332e32332e3130382e302f32332d3332203d3e203138313738.roa (raw, json)
Hash identifier: UFS/Hr7FRpvvD37ViC5Fa6JcMEvAh98z7iSjnL//iSs=
Subject key identifier: 44:7F:05:EB:8E:A5:CF:B2:37:C0:A1:8D:66:1E:EF:E5:E4:37:8E:35
Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial: 772BF1AAEF115D9A9FEF1343B3074EFB724D495B
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa
Signing time: Thu 20 Aug 2026 09:04:01 +0000
ROA not before: Thu 20 Aug 2026 08:59:01 +0000
ROA not after: Thu 19 Aug 2027 09:04:01 +0000
asID: 18178
IP address blocks: 103.23.108.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 02:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:2b:f1:aa:ef:11:5d:9a:9f:ef:13:43:b3:07:4e:fb:72:4d:49:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
Validity
Not Before: Aug 20 08:59:01 2026 GMT
Not After : Aug 19 09:04:01 2027 GMT
Subject: CN=447F05EB8EA5CFB237C0A18D661EEFE5E4378E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:fb:81:27:6a:7f:2b:b6:a1:aa:a1:a0:f2:
30:59:94:be:13:a9:fc:1e:51:75:67:31:7f:e0:75:
50:5b:6e:88:aa:62:8f:22:c2:e4:ab:1d:7a:77:5b:
e2:f4:36:e2:a4:1d:1f:98:59:ec:5d:e5:a3:66:d3:
0f:2f:f1:6f:ec:42:96:22:96:94:79:92:d1:69:c2:
d1:c8:92:f4:ae:17:22:37:ce:5e:46:71:67:f7:b3:
81:1e:60:d9:fe:79:94:0f:8c:1b:bf:0c:0d:cc:71:
11:b3:17:5f:c7:7a:dd:25:a9:22:c8:11:ad:db:5f:
1a:99:0b:54:18:e0:9a:e8:3b:6d:49:11:1f:c5:6b:
c7:8e:02:41:52:1a:82:c9:53:f8:5c:50:19:fd:fa:
ca:40:a2:b4:15:46:31:cb:1c:f7:63:78:8b:24:88:
e2:bd:1d:bb:15:f4:ed:d6:b3:08:84:74:ce:a1:75:
56:24:4e:cd:e0:58:2e:5e:80:10:dd:2c:5c:71:73:
1c:09:c4:3f:a6:af:36:79:a8:42:b8:55:f8:c5:f1:
c6:d6:a0:e5:1c:92:96:0b:e4:a7:3d:f3:6c:9e:20:
eb:02:22:17:60:f9:77:a3:74:43:2a:33:47:e7:06:
91:5c:cf:74:91:dc:38:1b:2c:1f:35:33:26:94:30:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7F:05:EB:8E:A5:CF:B2:37:C0:A1:8D:66:1E:EF:E5:E4:37:8E:35
X509v3 Authority Key Identifier:
keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.108.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b8:bf:50:1d:93:63:1c:95:6c:e8:a6:a9:b2:68:7e:03:69:
90:f6:ed:a9:fb:c4:1a:32:74:d0:ee:1e:47:9a:42:e1:e2:42:
21:31:c4:40:cc:3e:1d:85:23:a0:95:d7:8d:15:ca:6c:71:43:
b4:68:ec:14:0f:a3:fc:4a:81:c5:e6:06:67:79:46:47:f0:4d:
9f:1a:8b:04:5a:71:e9:8b:e6:af:c9:7b:12:b5:e1:e3:71:c2:
8a:74:e8:94:df:95:2b:1f:3c:62:5d:d5:7a:96:68:82:d7:4a:
2d:0c:b3:73:98:28:59:de:a3:ae:47:e1:d4:2e:e3:80:fd:2f:
98:8d:45:69:2c:cb:7b:1b:61:ac:13:df:f9:4e:25:99:4b:ad:
16:eb:50:20:3a:de:3e:b4:4a:85:f9:a1:f1:cb:5f:9c:5c:58:
75:ff:62:3f:a0:97:cd:aa:dd:78:2c:b5:92:4b:e6:ce:50:7d:
c9:f1:12:9c:97:6f:2f:85:b2:a2:3a:79:e6:db:d0:25:65:3e:
df:64:36:93:7d:87:d7:22:64:4e:f3:e0:e5:35:9d:fe:1e:3f:
98:a0:3d:ce:e8:c2:e2:a9:39:3d:95:3e:48:30:3f:5b:53:f3:
48:86:48:13:1d:e4:d5:ea:07:f1:d3:84:1c:44:f9:61:f9:b0:
18:9c:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:28 2026 by rpki-client