
$ rpki-client -vvf rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa
File: 3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: no5UAwdRO4kjNGxbvYPZEaL3l8LMfiO9W7UwW9zvqIc=
Subject key identifier: 75:72:E1:06:34:88:02:85:4C:0A:2D:98:1F:5F:85:32:AB:10:4B:02
Certificate issuer: /CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Certificate serial: 0759B549AC679E24E180685D0678E5A67A9A974E
Authority key identifier: C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:44:56 +0000
ROA not before: Mon 11 May 2026 17:39:56 +0000
ROA not after: Mon 10 May 2027 17:44:56 +0000
asID: 134823
IP address blocks: 203.18.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:59:b5:49:ac:67:9e:24:e1:80:68:5d:06:78:e5:a6:7a:9a:97:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Validity
Not Before: May 11 17:39:56 2026 GMT
Not After : May 10 17:44:56 2027 GMT
Subject: CN=7572E106348802854C0A2D981F5F8532AB104B02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:f1:0b:ae:14:59:aa:93:e8:88:76:56:b3:
b2:3a:0e:40:4a:5e:5d:5d:25:02:b2:fa:55:af:05:
f7:fa:a1:14:bb:34:f5:7d:9c:d5:3f:0c:ab:9d:d8:
6f:4a:3e:18:b6:8b:2f:30:79:c5:9b:c6:44:81:03:
2b:e7:6c:da:2d:e0:01:d2:a2:d0:07:bf:1e:9c:c7:
bd:27:6e:b9:cd:fe:a9:9a:7c:ce:95:1e:3d:bf:82:
78:94:e9:e8:22:4a:84:57:f4:25:cc:7b:22:da:ea:
b1:e4:03:52:f8:dd:90:c4:ae:d2:28:fe:49:e0:13:
7f:3b:a8:b0:7b:29:c1:ac:7f:61:3a:d1:4c:37:41:
de:cd:42:2d:c0:42:2e:45:ef:5d:6e:5a:53:d1:0d:
47:e4:a4:57:c2:51:98:bc:c6:4f:be:71:86:37:30:
0a:76:89:2f:a3:16:02:c5:3a:7f:bd:9f:d0:af:9d:
dc:2a:83:37:01:6d:ca:df:f5:21:cb:8f:30:a6:72:
05:37:6a:83:63:10:23:38:2d:a1:aa:1f:6d:07:eb:
34:2f:33:4e:0e:52:9f:24:68:e3:62:ff:da:e4:5b:
38:ab:14:f7:cb:e5:1d:3a:d5:00:fa:95:d7:03:b3:
7a:32:b9:57:07:92:e7:a7:c3:14:31:c3:b5:d2:14:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:72:E1:06:34:88:02:85:4C:0A:2D:98:1F:5F:85:32:AB:10:4B:02
X509v3 Authority Key Identifier:
keyid:C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.18.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:dc:73:f2:87:e5:04:b8:41:d3:e0:8f:86:0d:94:7f:4e:11:
73:08:f0:c9:db:35:74:ce:72:2b:0c:ad:e1:a7:a7:77:97:cd:
15:9f:ca:05:72:4b:4d:00:9b:ca:1f:44:4f:ee:40:60:fa:a2:
a2:e6:ff:d1:79:7d:86:92:ae:b9:a9:0a:60:ed:5b:1e:bf:e5:
5d:49:a3:33:b7:56:c1:2b:4d:9d:43:1a:36:f1:37:85:75:1c:
1e:65:9f:bc:4b:d5:62:9b:0d:66:2c:71:81:6f:b9:5e:e9:d1:
37:8c:f2:b0:38:a8:a6:e4:91:04:4b:72:14:d1:75:54:a9:37:
8e:b9:67:aa:6c:13:4c:1e:6f:b1:38:8c:98:5b:a4:ef:24:69:
07:1b:a9:48:3a:f6:07:33:81:39:e4:ee:1e:3a:29:0e:ea:95:
9f:be:e4:ff:77:88:36:6d:23:f4:02:79:83:4e:e8:e6:29:cc:
4b:70:df:25:aa:83:96:36:19:64:26:a6:42:ac:a1:fc:98:79:
2f:81:eb:b3:23:e6:b1:42:72:68:75:e4:63:6f:6c:79:a1:a8:
09:6c:fa:1e:01:ac:8e:cb:85:5d:65:22:31:37:eb:d8:3e:5c:
c5:76:a1:00:3d:ef:b5:7b:ce:da:17:63:f5:ae:68:12:07:0e:
b7:f4:f5:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:15 2026 by rpki-client