
$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa
File: 3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier: frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=
Subject key identifier: 1F:5B:EE:7F:C2:2B:79:78:82:1D:34:8D:52:BB:3B:F4:1C:08:92:80
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 5A580C50BFA220B48D5DC483C8E0E0171F798B7A
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa
Signing time: Mon 11 May 2026 17:40:34 +0000
ROA not before: Mon 11 May 2026 17:35:34 +0000
ROA not after: Mon 10 May 2027 17:40:34 +0000
asID: 134823
IP address blocks: 211.76.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:58:0c:50:bf:a2:20:b4:8d:5d:c4:83:c8:e0:e0:17:1f:79:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: May 11 17:35:34 2026 GMT
Not After : May 10 17:40:34 2027 GMT
Subject: CN=1F5BEE7FC22B7978821D348D52BB3BF41C089280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:3b:d8:71:18:d8:a5:10:74:36:6a:24:ad:
c8:43:66:8c:ab:52:be:a2:d8:4b:1d:ff:0c:fc:6f:
cd:74:23:a4:c9:15:d5:33:a5:e5:03:6a:16:26:e2:
4d:d7:15:65:37:66:d6:5a:89:b4:c7:60:95:1b:c9:
84:d3:73:8b:99:03:a0:f8:55:ba:40:83:9a:4f:18:
ad:79:a8:eb:2b:6f:94:4e:95:8e:01:17:56:f6:75:
c4:87:ee:10:bb:c6:e2:87:c8:84:d4:cf:b3:4e:f2:
be:ef:63:e1:44:83:59:55:1e:89:ed:d9:54:8a:bf:
f0:ab:99:9b:88:2c:2c:ae:7a:46:91:31:6b:bb:d9:
da:77:c5:6d:68:f0:8f:13:17:73:cf:6e:2d:ec:30:
6a:89:8c:94:92:46:4e:18:2d:c5:1e:a6:26:4d:06:
cf:1c:d8:cb:1c:71:40:dd:53:df:e7:7d:b2:91:f2:
69:f8:fd:a4:1d:8a:ff:9f:7a:dd:40:c6:e0:01:1b:
10:71:b4:96:57:eb:08:5a:84:ca:f1:05:6a:ef:99:
d2:46:d4:c0:be:25:f9:fe:e1:e9:52:2c:79:b9:b7:
a3:2d:f8:04:b7:e7:b6:9b:12:a0:2a:83:3a:02:a8:
eb:be:ea:e1:c4:a0:55:1e:74:57:b9:67:94:1d:09:
52:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:EE:7F:C2:2B:79:78:82:1D:34:8D:52:BB:3B:F4:1C:08:92:80
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.186.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:fc:a7:f1:9f:4e:40:69:a2:00:05:b9:b5:c7:72:2a:d4:aa:
40:20:1f:d9:d7:da:44:af:0a:f4:95:d3:e8:ae:94:b7:77:c0:
e0:85:a5:02:61:58:d7:e2:49:a1:44:28:7a:7f:49:b8:15:47:
f3:7a:b7:fc:19:e0:52:18:0b:ce:0d:cc:b0:9f:7f:35:a5:f8:
de:49:bd:89:50:b4:ae:c4:d3:f3:09:de:05:d4:37:e2:06:66:
0e:e1:a0:2d:2c:5b:bc:0e:b5:5f:1e:f1:a1:91:4a:38:59:ca:
29:5e:a3:96:79:d2:29:38:f8:f9:8a:f5:64:fe:a6:3a:ac:85:
e9:8a:e2:26:ba:da:06:5a:d7:96:8a:ef:af:85:60:28:ff:26:
fb:92:01:9a:63:e4:08:2d:80:b7:61:37:b2:bf:fd:16:aa:d3:
89:5d:a6:49:12:12:30:57:f8:64:e0:d5:d0:d7:28:7e:db:d7:
d6:fe:b9:ea:82:d8:50:b4:61:fe:20:d8:12:49:0e:23:46:08:
3a:b7:2f:d4:99:57:a9:28:e9:51:8a:91:44:0a:5c:81:a5:76:
d4:06:a9:d1:92:4a:f3:7c:a8:49:92:bf:79:0e:75:23:e6:8a:
94:40:d5:d4:f0:9d:69:f4:04:0b:b8:72:21:68:f9:7a:ca:c6:
a3:9a:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:17 2026 by rpki-client