
$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa
File: 3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier: RcOnXMAI5zB/DCWGD2VqU4hiopUTsHbdPmPIHSfzOFQ=
Subject key identifier: 0B:FB:2B:AA:FA:D9:DF:2E:5C:85:45:13:06:36:31:79:E2:29:5D:AF
Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial: 661F9E362D320B45BAA679555258B8836B900761
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa
Signing time: Mon 11 May 2026 17:08:21 +0000
ROA not before: Mon 11 May 2026 17:03:21 +0000
ROA not after: Mon 10 May 2027 17:08:21 +0000
asID: 38843
IP address blocks: 124.150.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1f:9e:36:2d:32:0b:45:ba:a6:79:55:52:58:b8:83:6b:90:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Validity
Not Before: May 11 17:03:21 2026 GMT
Not After : May 10 17:08:21 2027 GMT
Subject: CN=0BFB2BAAFAD9DF2E5C85451306363179E2295DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:c4:1c:b6:9a:c5:29:20:3a:5e:d3:50:5b:
67:61:5f:23:65:7b:df:a1:c0:3f:41:33:8f:ad:c7:
68:59:b8:55:0c:6c:d1:b9:c9:43:c3:cd:a8:ad:59:
3b:a4:8f:cd:65:a1:f9:2f:13:ff:b5:19:c9:23:e7:
36:e1:a2:ff:f5:ff:42:27:2b:14:78:2c:ed:95:b3:
4c:4a:94:40:ee:78:9f:63:26:08:4f:b6:bd:3f:97:
99:a0:ac:76:d6:8d:74:a6:6b:a2:ef:9b:1b:30:3b:
e7:1c:4d:17:4b:21:ab:2a:37:9c:67:6c:d8:47:0f:
00:e2:6b:bf:26:39:a4:0b:25:09:ad:01:f4:c0:da:
1c:ed:d3:f8:75:62:08:74:31:9f:ef:1b:4a:3e:cd:
f4:c0:04:1c:47:ad:0b:80:46:02:ed:39:7a:da:1c:
89:5f:64:e3:4c:1f:6d:cd:a7:40:05:40:65:a4:f0:
51:9d:50:67:6d:5e:12:d3:66:8c:87:6c:0c:b2:92:
49:dd:e3:65:a6:40:97:c2:cb:4c:01:18:e3:0a:f0:
6f:20:62:8e:ac:69:bc:05:58:f0:17:71:56:96:86:
51:62:7e:22:20:23:79:f5:73:67:30:a0:5c:15:29:
5d:e1:a6:8e:2a:da:a5:6d:5a:8e:a5:e2:a9:d8:90:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:2B:AA:FA:D9:DF:2E:5C:85:45:13:06:36:31:79:E2:29:5D:AF
X509v3 Authority Key Identifier:
keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.150.135.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b0:d3:7a:51:c7:fb:ed:ab:81:9a:8a:d7:01:7f:e0:f4:2f:
70:c5:18:a5:67:8f:77:0c:b7:a3:21:17:12:26:59:cc:19:40:
fe:fa:c0:01:35:78:a6:01:09:c9:97:e5:1f:a6:18:dc:25:e3:
67:30:f7:5d:1e:54:7e:24:47:f6:a7:37:0d:39:ef:95:9e:d5:
0f:00:97:2f:67:de:1f:cf:e3:df:2f:83:60:a3:23:92:00:c1:
ab:a3:7b:c0:cd:11:ff:99:13:ee:6a:50:8b:48:e6:23:8f:24:
fa:25:90:b9:27:89:50:2c:c2:0e:12:63:0f:87:ac:76:fd:2b:
82:d9:6f:f2:17:81:6c:66:ba:20:34:3c:78:e6:42:0a:3b:2f:
1d:b7:07:6b:37:a6:1f:61:be:a4:a5:da:a9:fd:fa:4c:ce:a6:
ae:88:a6:06:ee:2b:e4:65:8c:06:67:3c:0b:4a:9a:a8:54:77:
3a:0f:da:5c:33:41:7d:4c:e1:c0:90:5f:2e:dd:14:96:e3:a2:
c4:36:33:fd:d8:ac:ef:c5:92:57:d1:61:17:79:90:13:a8:2b:
e0:7e:91:ef:1e:15:03:77:36:b4:c7:d1:09:83:4f:4e:23:8d:
ea:f7:95:d5:f3:40:ec:10:08:3c:e3:75:2b:c0:de:41:da:08:
02:64:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:32 2026 by rpki-client