
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa
File: 323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (raw, json)
Hash identifier: mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=
Subject key identifier: D9:4F:E0:E3:C4:C4:14:93:14:FA:59:1F:37:68:75:57:D6:33:BB:40
Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial: 6DF18EDE37579186BDDCC32FF5C0086C73D61A59
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa
Signing time: Wed 26 Aug 2026 03:44:01 +0000
ROA not before: Wed 26 Aug 2026 03:39:01 +0000
ROA not after: Wed 25 Aug 2027 03:44:01 +0000
asID: 131678
IP address blocks: 2402:71e0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 15:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f1:8e:de:37:57:91:86:bd:dc:c3:2f:f5:c0:08:6c:73:d6:1a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Validity
Not Before: Aug 26 03:39:01 2026 GMT
Not After : Aug 25 03:44:01 2027 GMT
Subject: CN=D94FE0E3C4C4149314FA591F37687557D633BB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:0c:b8:db:d8:2f:d4:e1:8d:d3:92:91:86:
b6:10:a2:5e:26:fb:37:e2:89:bd:c5:da:f9:fe:89:
1e:8f:36:e2:bc:41:73:7c:f5:49:8f:61:15:85:89:
b5:82:4a:08:36:49:dc:e6:9a:07:b1:26:d3:a7:e2:
03:41:77:d2:13:f7:f2:d8:8d:1f:ea:38:f3:e4:cb:
45:80:21:46:a6:a1:f1:2c:3f:b7:5e:1b:30:39:3f:
7a:9e:ec:cb:a3:f6:a0:44:84:f6:fe:0c:4c:cc:42:
ec:5d:68:40:6f:75:cb:b5:b0:45:3d:e1:85:fc:ac:
9b:64:bd:be:11:0b:df:83:79:b3:65:b5:e7:29:33:
a9:78:f8:7d:d6:c0:35:af:2a:52:3f:f5:76:32:b1:
9a:8c:19:b9:ab:3e:d2:06:02:30:36:7d:55:66:e6:
96:ea:25:7f:f3:e7:c8:ea:9b:5e:24:06:73:75:3a:
0d:1f:90:eb:23:89:4b:97:0c:fe:b8:d6:7d:d4:7b:
04:82:36:dc:c6:47:71:da:61:e0:56:05:58:4e:3d:
b6:b3:1c:e7:2c:45:42:ff:82:84:ad:09:b9:a9:1d:
10:00:a8:e9:2f:b8:9e:97:65:ed:cd:87:f8:78:4a:
84:3a:65:a8:17:59:5f:a0:fd:1e:06:76:d2:27:c4:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4F:E0:E3:C4:C4:14:93:14:FA:59:1F:37:68:75:57:D6:33:BB:40
X509v3 Authority Key Identifier:
keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:71e0::/40
Signature Algorithm: sha256WithRSAEncryption
1c:0d:81:ae:ea:c3:c2:05:b9:cc:06:66:c6:e2:cd:22:6c:7c:
70:6b:98:20:2d:1f:5b:86:ac:a7:59:89:e1:5a:31:d4:09:dd:
b1:33:94:92:7a:26:0b:41:3d:64:25:13:a5:9b:ea:c3:14:e2:
5f:de:2a:ff:ea:9e:0e:66:af:46:2a:48:5f:6e:c2:a4:1a:7c:
93:b8:e7:01:4d:93:0c:c9:86:9e:66:ec:ce:8f:b6:da:5d:5e:
0f:fa:97:82:70:c3:8f:df:a7:ba:1d:d5:1c:ec:84:12:28:1e:
e6:71:8f:7a:f9:70:7d:a1:4e:35:73:c3:b9:41:52:bb:05:d9:
9d:af:08:0c:f7:3f:09:2b:0f:d5:9f:89:fc:7e:f5:e5:64:2f:
9c:32:43:65:e3:66:9f:27:99:14:fa:6d:e3:60:7d:b8:c2:2e:
f6:23:5a:35:0a:f4:eb:95:9a:76:54:99:5f:88:ca:c5:86:8d:
84:b6:eb:6b:29:2d:77:ad:63:0b:8b:2b:a9:9e:b2:98:d9:fa:
02:b3:bb:1a:4b:ca:44:51:dc:5b:5c:07:eb:cf:fe:be:ae:22:
9a:a3:fc:80:5e:33:9c:cb:a4:56:5b:a2:cd:48:67:d8:67:8f:
9a:40:26:a4:a3:3c:db:15:da:0d:03:bc:1e:5a:de:45:0a:21:
91:b1:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:27:12 2026 by rpki-client