
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa
File: 3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa (raw, json)
Hash identifier: DlmTrH0HWP82INqSmtsVtIWlfyhVreq2AQXQztnDoMc=
Subject key identifier: 85:27:66:90:C1:96:7F:45:67:6B:A7:BF:14:ED:0E:5E:B3:8C:89:AD
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 330C541B6D94A77DEBF1E7F7E3C418446413F3ED
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa
Signing time: Sun 09 Aug 2026 03:44:00 +0000
ROA not before: Sun 09 Aug 2026 03:39:00 +0000
ROA not after: Sun 08 Aug 2027 03:44:00 +0000
asID: 207550
IP address blocks: 187.79.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0c:54:1b:6d:94:a7:7d:eb:f1:e7:f7:e3:c4:18:44:64:13:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Aug 9 03:39:00 2026 GMT
Not After : Aug 8 03:44:00 2027 GMT
Subject: CN=85276690C1967F45676BA7BF14ED0E5EB38C89AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:e7:e8:35:ed:3e:b6:02:03:a9:f9:4d:bf:
97:46:af:7d:7a:28:23:e1:a6:68:92:4c:16:a8:9d:
50:6a:9e:43:b3:c2:5b:4f:d9:49:41:f7:c1:d7:c7:
9b:17:a4:d8:e4:3b:f0:c9:b3:9f:b4:2a:23:c7:b1:
01:f0:73:9e:a7:21:ba:b1:ee:b4:02:1f:00:f3:c9:
72:1a:f1:03:e1:b1:ea:50:78:9c:3b:72:80:64:39:
5a:11:28:5c:62:ba:d2:b8:fb:88:02:1f:8b:ca:b7:
51:4a:73:67:d7:00:d6:79:ed:44:29:e1:61:3b:29:
dc:46:50:63:52:e5:28:f1:de:89:cd:7f:a9:9a:b5:
77:b4:3d:46:e4:ac:99:7c:82:50:b6:9c:de:57:bd:
3f:e0:af:ef:d3:0e:4f:fc:25:a2:c9:2c:90:94:13:
54:ce:88:95:2f:0b:a9:46:f4:99:55:e3:24:c1:05:
f3:3e:52:33:98:c4:e6:36:08:0a:3e:e4:88:b7:ee:
28:f1:05:83:84:2a:c3:ab:7a:90:e5:71:07:5f:c8:
81:35:4b:03:cb:1f:f9:1b:d3:d1:7f:8d:55:2c:70:
b7:21:e7:c0:f0:42:dc:d5:c4:70:46:3a:de:09:88:
31:67:10:80:ce:2e:4c:40:f6:01:64:49:3a:81:69:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:27:66:90:C1:96:7F:45:67:6B:A7:BF:14:ED:0E:5E:B3:8C:89:AD
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:c0:dc:21:39:c6:a2:f7:30:ae:b1:89:7e:a0:cf:9a:81:0b:
7e:96:08:23:6a:9b:c3:98:0b:3b:07:97:70:5b:0c:ea:05:42:
70:dd:7c:62:d7:66:6c:18:31:99:1f:83:ed:35:2b:a4:c1:72:
8f:8f:ca:8e:f0:02:9a:59:30:84:7d:ca:26:75:d6:36:13:21:
38:a2:9e:3e:28:35:3d:c8:16:09:23:d1:83:48:0a:db:8c:5c:
a5:cf:23:d0:c7:5f:2e:8e:98:c4:ba:fa:e2:f5:9b:92:0e:5c:
06:5a:b8:06:d2:5f:70:07:96:3b:e4:85:9d:ce:a0:a5:00:88:
32:9a:e5:f7:b9:71:34:96:d9:06:87:83:cb:35:51:61:cb:4c:
3c:70:72:c0:82:98:16:62:be:f6:c5:2d:6d:a8:1a:05:f4:ad:
b5:4b:30:2c:c3:76:9e:86:27:17:e2:04:1d:6f:0c:33:48:b6:
3d:d5:40:53:8b:1b:f1:99:5c:be:a2:5a:9e:b0:47:8a:0a:d6:
75:97:0c:64:bf:c4:52:66:89:9e:53:bc:64:0f:52:48:0a:b4:
87:23:31:f0:51:9f:9f:92:97:3c:f7:1f:c3:80:63:a2:29:c3:
c1:86:b8:f5:c2:e0:15:8a:3f:02:4f:24:45:50:71:76:a7:a8:
c3:d7:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:13 2026 by rpki-client