
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa
File: 3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (raw, json)
Hash identifier: AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=
Subject key identifier: D4:9F:35:65:E7:47:11:82:87:E9:6F:14:6A:A2:91:58:E4:CE:EB:CD
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 7BE14EB4DB849767F495612A348D0FF221A60E56
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa
Signing time: Thu 06 Aug 2026 09:44:00 +0000
ROA not before: Thu 06 Aug 2026 09:39:00 +0000
ROA not after: Thu 05 Aug 2027 09:44:00 +0000
asID: 207550
IP address blocks: 187.79.196.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e1:4e:b4:db:84:97:67:f4:95:61:2a:34:8d:0f:f2:21:a6:0e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Aug 6 09:39:00 2026 GMT
Not After : Aug 5 09:44:00 2027 GMT
Subject: CN=D49F3565E747118287E96F146AA29158E4CEEBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:7c:31:b3:e5:4f:4e:ee:27:00:98:92:82:
e6:04:32:16:1f:84:10:c8:c5:18:99:ba:0d:74:28:
1a:ef:6c:92:21:2d:ca:33:f3:da:66:e9:0d:7b:8f:
4d:21:2d:ab:c7:bc:c3:93:20:2e:1f:c8:69:80:af:
05:6e:05:ae:a7:0e:b3:60:96:a0:42:a2:83:c2:bc:
f0:3e:3f:a3:09:40:db:8b:99:ca:b7:a3:e5:07:b7:
f6:61:ae:a9:61:94:38:18:20:ef:77:2e:dc:d9:0e:
78:db:71:e7:ac:52:4a:17:fa:70:16:14:a9:ad:4d:
ab:bc:7b:06:ef:a2:be:e7:84:84:4b:ec:70:da:57:
9c:a3:df:03:eb:65:50:6a:5c:16:f7:e5:df:52:e6:
47:b2:91:63:4a:e3:70:20:dd:a2:1a:a2:4e:b3:ff:
b6:6f:08:fc:17:96:8e:04:9e:1f:5b:f1:a6:0c:03:
48:40:d7:8d:5d:72:12:54:de:08:ea:4a:8d:1b:ae:
8f:9d:2e:9a:e6:dc:40:40:82:18:23:19:d0:55:59:
d1:1c:7a:1d:0a:64:f8:9c:a0:14:fb:4c:4d:39:18:
57:c3:cd:7e:2f:0e:c4:48:dc:16:e0:3b:04:e2:f7:
5d:2a:41:01:69:12:88:01:7d:23:e9:7a:2d:c3:cd:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:35:65:E7:47:11:82:87:E9:6F:14:6A:A2:91:58:E4:CE:EB:CD
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.196.0/22
Signature Algorithm: sha256WithRSAEncryption
47:99:1d:7e:1b:a2:8c:3d:34:a6:25:c8:4d:14:c7:9c:9d:0b:
61:ac:2f:5a:4a:2a:5f:b6:95:4d:65:3a:eb:53:46:0b:06:c0:
f9:e4:1f:75:2d:85:78:cb:15:4d:70:bc:56:1c:7b:75:cc:57:
42:98:4f:16:a3:51:93:26:9a:d9:90:6d:bf:c7:a0:3b:55:93:
96:10:5f:3b:e9:3b:15:de:25:5d:b4:e4:c9:7a:4a:03:e8:4f:
c2:9c:68:ed:47:b7:f8:4b:04:5f:7b:b2:03:c0:ae:7f:17:be:
f3:83:84:4a:96:11:f6:33:8e:8a:0e:7f:9a:88:d7:7f:e1:f5:
ce:32:18:da:c1:9b:ed:82:2a:75:b2:92:75:11:fa:90:20:98:
15:60:04:38:0a:0a:da:7e:49:58:cb:5c:be:69:17:8f:c7:66:
a0:e8:08:5a:bc:b4:aa:7c:5e:6f:c6:62:62:07:b7:92:f0:eb:
5b:9c:37:b5:a7:4d:0f:78:2e:38:9d:6d:ef:99:b9:e7:7a:8d:
84:bc:29:d0:9f:57:26:8c:aa:14:6b:f0:a2:f8:4b:f1:0e:c1:
e7:f8:93:5d:1d:ba:88:a3:94:dc:3c:69:e5:d4:5c:77:83:5d:
5c:67:27:3a:43:d9:1b:7b:ff:a5:77:f9:88:e1:fd:26:4b:d4:
4d:bd:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:13 2026 by rpki-client