
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa
File: 3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: CrTNs0AH90r7cZBlpSeAIE3vwnetXg/AusPTD3RqShg=
Subject key identifier: BE:AE:A6:AF:7E:0C:38:62:9A:E1:2E:38:08:15:BE:51:70:D2:9A:99
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 25ADD91BF95AD628839F16F20C8BB485DCE18B4F
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:36:36 +0000
ROA not before: Mon 11 May 2026 17:31:36 +0000
ROA not after: Mon 10 May 2027 17:36:36 +0000
asID: 134823
IP address blocks: 123.253.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ad:d9:1b:f9:5a:d6:28:83:9f:16:f2:0c:8b:b4:85:dc:e1:8b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:31:36 2026 GMT
Not After : May 10 17:36:36 2027 GMT
Subject: CN=BEAEA6AF7E0C38629AE12E380815BE5170D29A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:07:3d:be:71:61:5e:73:b4:a5:92:73:9f:
6f:f9:16:ed:ee:28:b8:73:a4:13:ee:a1:1c:46:ad:
83:2a:da:e7:2b:f5:1f:f0:eb:3e:6f:58:fb:5d:e1:
72:59:b0:07:61:52:60:72:8b:45:92:66:7a:6c:b1:
31:1b:70:b9:4e:40:3a:94:27:d4:5d:2d:08:dd:99:
ec:4d:80:ef:6a:7e:71:ad:3d:22:b4:fa:98:1a:a9:
76:13:c7:bf:47:6a:05:3b:74:e0:0a:da:40:ee:90:
86:24:a0:34:de:93:55:a7:11:ee:87:1f:fc:b0:46:
f9:6f:4f:f9:32:83:56:4d:9f:0a:eb:db:b1:8e:a2:
6d:7d:6f:3e:0d:5f:a9:f5:13:7a:49:94:37:3e:7f:
51:63:11:37:54:14:df:b9:ae:23:5f:fa:9a:98:2b:
91:04:95:b3:a3:72:5c:5a:1e:4f:a8:a2:65:06:33:
3c:9d:c0:48:1b:c9:1c:78:d2:d2:15:0b:30:5a:18:
df:6b:eb:5e:be:22:ef:15:97:08:6f:9f:38:3d:8f:
bd:21:ff:75:d1:8d:8e:b3:70:9f:3f:30:bf:fc:29:
35:8d:52:27:a2:ec:d9:67:48:95:24:84:e0:55:5f:
40:4e:f7:53:c1:4e:59:b8:b7:f9:6a:55:e7:ad:1e:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:A6:AF:7E:0C:38:62:9A:E1:2E:38:08:15:BE:51:70:D2:9A:99
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3132332e3235332e3134302e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.253.140.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:d8:79:d3:16:f8:6f:3a:80:f9:52:2c:fc:49:eb:a9:36:b3:
ff:58:24:54:d4:98:59:6f:29:1d:8a:a9:ad:30:59:2e:3a:65:
fc:a3:05:83:6a:8e:3f:78:7e:18:13:70:15:77:bc:ff:d4:91:
89:d2:a8:40:ad:82:8f:e3:2c:ce:7a:f8:17:d7:09:29:c5:14:
2a:c1:b1:d0:1e:a3:c8:59:a1:9b:95:ea:fa:c3:81:15:69:9d:
41:dd:3c:00:0a:8c:af:d9:ed:eb:f9:d6:c5:4b:8f:30:91:0c:
b7:6b:f2:5b:27:52:10:46:10:f1:96:f7:6d:47:f5:51:02:60:
c7:98:c3:ad:e8:a0:e2:39:1f:77:08:f7:fa:e7:b9:af:0c:80:
b3:e0:e0:08:2e:2d:2c:e9:53:3a:b0:2c:70:1b:e2:4f:98:79:
00:d2:cf:9e:ef:71:87:06:4f:c5:80:c4:0d:ce:ad:a1:e5:ab:
21:64:d0:69:78:87:36:f9:19:58:1e:6b:c9:15:92:57:fd:30:
9b:95:a6:9d:e0:50:15:83:75:38:3e:a1:56:1e:30:a7:c0:e8:
29:63:08:a0:a3:11:61:b3:01:04:29:e0:7e:c4:c9:f2:ba:d3:
3e:da:3c:1e:b3:3d:e0:38:54:2b:45:97:ea:16:2d:e8:a0:77:
8e:e6:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:31 2026 by rpki-client