
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa
File: 3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa (raw, json)
Hash identifier: E7oUOAQPwU/1YwrLhJW8yVt6QPbfk9BRh7TbtE2H6S8=
Subject key identifier: C1:4D:33:4C:C0:9F:A3:8D:15:13:DD:CF:F0:5A:29:6F:69:D1:6D:D8
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 09F1AEB7459F746D6779068AE7B717649C6C49DD
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa
Signing time: Mon 11 May 2026 17:57:39 +0000
ROA not before: Mon 11 May 2026 17:52:39 +0000
ROA not after: Mon 10 May 2027 17:57:39 +0000
asID: 131151
IP address blocks: 123.253.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f1:ae:b7:45:9f:74:6d:67:79:06:8a:e7:b7:17:64:9c:6c:49:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:52:39 2026 GMT
Not After : May 10 17:57:39 2027 GMT
Subject: CN=C14D334CC09FA38D1513DDCFF05A296F69D16DD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:8e:18:ee:98:53:09:e0:e5:86:2a:ee:a6:
c3:b9:1c:d1:f9:8a:22:12:98:28:ed:1c:a8:16:e6:
c2:3f:7d:5a:1c:a4:78:b3:eb:cc:77:f9:e0:92:7e:
97:bd:03:a2:c8:21:90:12:74:3a:57:9d:07:bb:30:
a8:6e:61:3b:f0:a6:21:84:0d:2b:e4:af:59:2f:db:
d2:b8:c1:01:ed:37:fb:67:97:d5:75:a2:aa:23:7b:
14:47:f9:24:30:86:eb:88:20:5c:ee:d8:8d:9f:e7:
0f:a7:57:aa:be:47:7b:e2:8f:eb:56:0e:a7:2d:ac:
24:1a:d7:d8:84:d4:73:fa:f8:18:0b:4f:7c:e2:17:
e5:25:4c:71:aa:c8:b7:58:be:ea:31:a1:ca:c8:90:
1f:1e:41:a8:ff:f0:6f:4c:a7:d7:69:67:a1:63:69:
c2:c7:4a:27:e3:be:c6:ea:56:0b:ae:ce:a8:7a:c6:
f8:86:ca:c5:18:03:b3:29:73:37:50:a2:ab:1b:12:
9c:b8:99:8e:e4:5b:77:69:1f:25:0c:96:34:4e:00:
59:79:3f:54:a2:08:d1:06:a8:b4:21:e6:ed:dd:b7:
ae:21:0f:85:5e:6e:14:8f:6e:a1:76:ab:6d:c4:14:
99:17:d8:b1:e6:30:2a:97:d9:f5:e0:8a:05:33:a3:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:33:4C:C0:9F:A3:8D:15:13:DD:CF:F0:5A:29:6F:69:D1:6D:D8
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313331313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.140.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4a:91:c7:70:d9:f5:41:e8:57:13:85:fa:48:7b:c5:64:3f:
c7:70:7a:81:df:38:dc:a5:7d:16:db:b2:6b:78:19:aa:7a:54:
4b:c3:20:ab:c1:7c:c7:d4:0f:40:8c:20:55:0e:3d:88:b9:3e:
47:ca:8d:a5:65:f8:29:6a:a9:ab:dc:c7:2e:1f:a9:4f:d0:f6:
c4:ad:36:8c:87:e0:ae:46:ec:49:7d:6e:f5:10:7a:9a:55:c0:
65:02:62:e4:eb:e8:b5:a8:8a:9a:44:b8:cf:14:75:da:51:45:
ee:9f:83:2f:52:77:71:fd:66:a5:b8:4a:81:07:16:0d:d0:3a:
e8:87:f6:3d:9b:c6:69:ef:8c:ed:ae:ed:fe:03:5d:1f:df:d9:
f4:bc:ca:08:4d:33:34:80:73:55:e8:61:1a:81:7b:78:b5:01:
0c:88:e8:3f:9c:08:b5:37:c2:0b:e8:11:0a:a7:1c:6b:40:8f:
75:56:60:2f:7a:98:bc:a1:b5:04:1c:a6:66:6a:29:03:55:e5:
15:42:07:ad:3f:da:5f:3d:f0:98:23:86:ac:de:c5:02:c1:ed:
f3:3a:30:f9:0d:cb:a3:23:e3:44:d7:13:dd:6a:53:78:52:65:
3c:90:03:7c:5f:1f:b3:27:7f:33:95:ea:30:3e:9f:db:00:e0:
a5:2e:8f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:04 2026 by rpki-client