
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa
File: 3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa (raw, json)
Hash identifier: cCL36gaY6VKRx/mME3OGV/Yfx4TD3+GXXjH4C5/aA74=
Subject key identifier: E5:83:F1:94:FF:C2:32:B9:72:1C:FE:70:A5:40:51:59:CF:A7:4B:5B
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 5BC19A0A85F9AF161DA7FF11E92BF2420C450BD7
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:11:16 +0000
ROA not before: Mon 11 May 2026 17:06:16 +0000
ROA not after: Mon 10 May 2027 17:11:16 +0000
asID: 38843
IP address blocks: 124.150.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c1:9a:0a:85:f9:af:16:1d:a7:ff:11:e9:2b:f2:42:0c:45:0b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:06:16 2026 GMT
Not After : May 10 17:11:16 2027 GMT
Subject: CN=E583F194FFC232B9721CFE70A5405159CFA74B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:6d:21:00:fb:1f:1b:d5:3e:e6:f0:c0:e1:
da:44:87:51:05:5e:21:d7:fe:a9:87:ec:c7:50:26:
9d:a8:94:d6:17:4c:5a:df:7d:39:09:ca:6c:93:57:
e5:4e:c4:90:57:8e:2c:1e:85:0f:7b:b2:9d:f7:e4:
06:61:57:28:7c:d9:6f:09:de:3c:b3:e4:09:47:70:
6c:f5:a2:b9:7c:e2:0b:22:ea:65:50:7b:13:ea:0a:
16:38:7a:48:90:22:9d:ba:23:cc:c0:3d:cb:85:09:
6f:c6:53:60:7f:44:62:e0:3e:5c:02:23:43:f8:2e:
4f:7e:2d:c9:ac:98:27:ea:37:64:2d:44:76:96:dd:
91:d4:a9:55:be:fd:fc:6b:30:c1:21:10:34:39:de:
11:d0:ca:6c:6d:ba:59:a4:c2:c7:4f:1e:43:0d:07:
3c:ec:06:d2:9b:f4:57:61:14:8f:29:73:f8:e0:2d:
e4:41:81:ed:57:cc:a4:65:d9:02:a3:b4:81:dc:50:
09:3e:0b:82:f8:92:51:65:1e:f7:ac:40:68:47:1e:
5a:94:a9:3a:59:33:40:6a:e9:cb:75:6c:e0:6f:c6:
4e:a7:5c:5e:d5:61:63:6a:91:65:de:ea:0d:67:9e:
bc:47:4a:56:52:73:5a:80:d0:66:c1:a0:aa:0e:ef:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:F1:94:FF:C2:32:B9:72:1C:FE:70:A5:40:51:59:CF:A7:4B:5B
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.150.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:1f:24:e4:ee:e6:1b:c3:ce:72:14:5c:a6:5c:46:93:1f:1c:
49:2f:ef:71:6c:95:6a:7a:c1:f3:17:2e:36:9a:b0:b8:03:19:
b6:38:97:ef:f6:63:7b:77:64:6c:a4:ff:3e:3e:7d:02:f8:71:
e4:37:ae:6f:47:2f:0b:8c:0b:f3:db:74:9b:e9:96:49:dd:03:
fe:61:cc:90:0a:27:ea:3b:e0:e7:20:17:80:ca:e0:b4:91:8a:
7c:47:58:b6:72:c5:60:c0:fb:db:cb:1a:9c:46:46:78:3e:7f:
82:d5:60:f8:68:20:96:88:da:39:8f:3d:e4:e6:0e:fc:14:fa:
39:d4:a5:76:b8:2b:13:8f:ba:ca:10:5e:1a:11:87:cf:25:cc:
4d:79:d0:77:e3:c1:49:e2:6f:6a:d8:10:7c:bd:b6:5f:7e:9c:
10:2f:d8:b1:11:fa:c4:60:89:d7:fb:6c:5c:11:ab:75:ac:6b:
a9:6a:1c:8b:47:4e:73:d5:a0:6f:b5:de:aa:5d:91:05:c1:5c:
4e:99:9f:d3:77:e8:5c:80:39:fe:c8:f4:9a:0d:9e:ef:94:1a:
cc:ce:4a:87:fa:fb:c3:59:cc:5e:a4:cd:c0:76:9f:16:fc:6c:
b8:2f:16:d0:36:bc:a0:9c:c3:10:ef:64:f9:a6:de:7d:62:c0:
de:3d:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:50 2026 by rpki-client