
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32342d3234203d3e203137393939.roa
File: 3231312e37362e3138362e302f32342d3234203d3e203137393939.roa (raw, json)
Hash identifier: NKa8Iy3MaUeUumQO6cNWkp1u/SclAT0YOySq+5J8B9Q=
Subject key identifier: 1D:16:31:08:FB:8B:F2:71:D7:82:CA:3D:32:D2:E0:AB:34:8E:57:B2
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 18476FA3169889E12C4AAC943214821E99DCD998
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32342d3234203d3e203137393939.roa
Signing time: Fri 16 Oct 2026 13:44:01 +0000
ROA not before: Fri 16 Oct 2026 13:39:01 +0000
ROA not after: Fri 15 Oct 2027 13:44:01 +0000
asID: 17999
IP address blocks: 211.76.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 20:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:47:6f:a3:16:98:89:e1:2c:4a:ac:94:32:14:82:1e:99:dc:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: Oct 16 13:39:01 2026 GMT
Not After : Oct 15 13:44:01 2027 GMT
Subject: CN=1D163108FB8BF271D782CA3D32D2E0AB348E57B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:37:9b:b9:24:0f:b1:3b:02:c5:06:47:fd:
6d:c3:d9:f9:3d:09:93:6a:12:31:a5:41:9b:9a:f4:
20:1e:78:ed:28:20:64:ed:37:92:e6:b2:90:96:ae:
56:f8:ef:42:1a:37:aa:2c:be:69:9f:bf:61:f2:cc:
c1:c9:c7:3b:fc:4c:d3:55:cc:6e:4b:b9:de:32:c3:
3e:c7:79:f2:63:a1:bd:f3:b0:52:e6:03:79:22:60:
f6:c5:f3:17:22:74:38:7b:c2:5b:d2:95:65:7a:12:
09:92:75:bc:1c:84:85:50:ec:0f:f9:dc:a7:98:10:
ad:98:44:58:a6:13:a9:d1:a4:c0:1e:99:98:23:54:
e3:86:20:ad:3c:bd:15:95:99:9f:c4:fb:df:15:dc:
8e:95:51:c5:d4:9d:1a:f5:49:de:ca:0c:00:9a:b4:
5b:1e:5d:89:8c:7f:8a:fd:14:34:c8:a3:9e:ba:27:
b4:e5:0a:4d:0b:9f:d2:a3:98:bd:74:50:1e:60:fe:
75:73:90:f9:e5:bb:ef:b8:42:b8:3e:03:9b:d8:a8:
3b:a9:2a:d0:40:70:81:9e:78:5e:46:1b:f0:09:be:
0a:66:dd:ef:26:79:ea:13:3f:27:2b:78:b4:45:67:
f8:ac:46:75:e9:fc:ab:a5:94:f5:21:c5:83:ee:28:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:31:08:FB:8B:F2:71:D7:82:CA:3D:32:D2:E0:AB:34:8E:57:B2
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32342d3234203d3e203137393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ac:42:b8:cc:1b:aa:12:10:fe:f2:fb:ea:91:f1:32:b0:94:
1c:75:56:3e:f4:46:74:d2:43:e5:4b:f6:46:fa:97:b7:63:0b:
2f:8b:eb:65:c0:5a:7f:9a:3e:bd:6c:0b:ae:a5:bb:ab:9e:5f:
ac:61:14:40:3d:9b:a1:ad:68:53:87:d7:cd:fe:17:9a:d4:e2:
2d:ec:0f:ac:25:c8:d1:66:a6:9c:16:7d:ad:99:ef:2b:33:40:
3b:54:a7:84:ca:16:2f:6e:00:1b:b4:33:9a:9a:cb:4b:19:2a:
01:cc:29:ef:02:f1:41:54:6c:e4:2a:21:90:76:3d:3f:90:6e:
ea:7f:c6:fd:8c:16:98:94:54:9d:93:26:c0:0e:67:29:80:b1:
c2:73:9c:e0:76:dc:93:73:23:2b:48:a5:55:90:2f:87:b9:3e:
69:40:66:0b:d1:ee:52:a4:11:85:84:47:b7:97:43:2f:50:3a:
eb:e9:4f:9d:f5:ba:7b:c0:0a:9a:8c:5c:1c:81:64:e5:bc:25:
e6:7c:98:b8:bf:c8:78:d0:99:44:04:37:ab:13:48:66:8f:6c:
19:a9:3a:26:fa:b7:9f:34:e9:96:1c:70:57:cb:1d:31:02:8b:
22:ec:b8:d9:06:94:9b:1d:a9:36:23:e2:7b:af:f7:a5:53:45:
72:39:a4:4e
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUGEdvoxaYieEsSqyUMhSCHpnc2ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjEwMTYxMzM5MDFaFw0yNzEwMTUxMzQ0MDFaMDMxMTAvBgNV
BAMTKDFEMTYzMTA4RkI4QkYyNzFENzgyQ0EzRDMyRDJFMEFCMzQ4RTU3QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjsjebuSQPsTsCxQZH/W3D2fk9
CZNqEjGlQZua9CAeeO0oIGTtN5LmspCWrlb470IaN6osvmmfv2HyzMHJxzv8TNNV
zG5Lud4ywz7HefJjob3zsFLmA3kiYPbF8xcidDh7wlvSlWV6EgmSdbwchIVQ7A/5
3KeYEK2YRFimE6nRpMAemZgjVOOGIK08vRWVmZ/E+98V3I6VUcXUnRr1Sd7KDACa
tFseXYmMf4r9FDTIo566J7TlCk0Ln9KjmL10UB5g/nVzkPnlu++4Qrg+A5vYqDup
KtBAcIGeeF5GG/AJvgpm3e8meeoTPycreLRFZ/isRnXp/KullPUhxYPuKObRAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUHRYxCPuL8nHXgso9MtLgqzSOV7IwHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC8zMjMxMzEyZTM3
MzYyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczOTM5Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADTTLowDQYJKoZIhvcNAQELBQADggEBADmsQrjMG6oSEP7y++qR8TKw
lBx1Vj70RnTSQ+VL9kb6l7djCy+L62XAWn+aPr1sC66lu6ueX6xhFEA9m6GtaFOH
183+F5rU4i3sD6wlyNFmppwWfa2Z7yszQDtUp4TKFi9uABu0M5qay0sZKgHMKe8C
8UFUbOQqIZB2PT+Qbup/xv2MFpiUVJ2TJsAOZymAscJznOB23JNzIytIpVWQL4e5
PmlAZgvR7lKkEYWER7eXQy9QOuvpT531unvACpqMXByBZOW8JeZ8mLi/yHjQmUQE
N6sTSGaPbBmpOib6t5806ZYccFfLHTECiyLsuNkGlJsdqTYj4nuv96VTRXI5pE4=
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:17 2026 by rpki-client