
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa
File: 3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa (raw, json)
Hash identifier: YnpfP1IY3Vl8PX3NftJuZv3w6OU/wLlp+t4Hb1Ri/Ek=
Subject key identifier: 5F:8E:12:13:7B:88:99:1B:9E:48:E6:7E:16:1C:B6:4C:93:DB:B1:B1
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 57D48384CD79074CD6EA484BC24943456DE0A21B
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa
Signing time: Sat 10 Oct 2026 15:44:00 +0000
ROA not before: Sat 10 Oct 2026 15:39:00 +0000
ROA not after: Sat 09 Oct 2027 15:44:00 +0000
asID: 207550
IP address blocks: 187.79.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 06:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d4:83:84:cd:79:07:4c:d6:ea:48:4b:c2:49:43:45:6d:e0:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Oct 10 15:39:00 2026 GMT
Not After : Oct 9 15:44:00 2027 GMT
Subject: CN=5F8E12137B88991B9E48E67E161CB64C93DBB1B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:84:6b:17:5e:d8:45:de:93:74:da:0b:85:a8:
14:27:ad:bc:45:62:27:d6:ca:cc:35:cb:48:d3:3e:
7b:f9:b7:e4:bc:78:df:47:d9:c8:15:a9:24:e7:d0:
95:0b:96:8c:6f:83:74:8d:06:a2:69:cf:76:8f:67:
1a:d5:49:ff:77:53:7a:b2:72:68:57:c8:56:f1:65:
c8:d0:be:80:63:3a:7d:51:c9:e9:15:d5:97:3a:15:
fb:9a:3c:73:d0:3a:41:4e:f9:c3:17:42:6d:80:ea:
e9:0a:8f:7e:cb:81:0f:7c:fb:4e:7f:fe:b1:b2:07:
48:c5:15:bd:ff:3c:0e:66:6d:6e:fd:45:bb:ca:34:
90:cd:d8:a0:ab:ce:7b:90:e1:5b:c0:a8:ad:6a:f2:
23:85:65:e6:62:94:fe:eb:eb:e0:bb:3e:71:c0:25:
3c:5b:2b:51:59:f8:b9:48:27:ec:c6:9e:02:4e:f6:
40:8f:3b:20:84:72:2a:e2:e2:dd:63:dc:c7:ec:8d:
d5:78:6e:60:10:c0:aa:50:7d:f8:dd:73:ee:75:df:
86:34:ef:40:35:6e:2e:46:d9:78:52:2d:87:b6:e3:
32:1f:90:9a:d6:e8:66:89:af:cc:53:65:f0:a4:90:
87:9b:20:90:f4:fb:52:9a:ee:03:a7:da:a2:67:3a:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:12:13:7B:88:99:1B:9E:48:E6:7E:16:1C:B6:4C:93:DB:B1:B1
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230312e302f32342d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.201.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f5:ac:66:53:4c:79:af:ee:f7:2e:2a:1a:73:a6:7d:82:24:
be:f4:c7:0a:d0:d7:7f:28:15:7a:11:68:6c:9e:21:61:d4:df:
95:b0:54:8d:89:11:48:da:d9:f0:f7:5a:3f:2b:66:b8:92:d7:
2f:2d:7b:6a:da:a9:f9:b2:c3:bf:4c:64:92:92:34:7e:57:5f:
31:61:35:cc:94:49:aa:89:c4:cb:0d:08:ee:aa:55:94:fc:d4:
35:c1:97:f2:27:e7:79:26:a8:a9:7c:72:d9:0e:ad:66:a7:2c:
24:44:4a:9c:ed:3c:bf:ce:24:11:c0:bf:21:d4:d6:84:a3:c2:
5d:52:6c:11:ad:3d:e6:3a:74:38:80:05:3b:dc:f3:d6:c4:73:
a1:c1:29:70:5d:01:de:33:48:fe:7a:5c:e1:fe:7e:69:98:6b:
74:a2:f9:48:c1:68:b5:06:26:7c:8e:8e:94:e4:01:9b:17:92:
a6:7d:1c:38:5b:16:1b:54:5d:bc:66:9b:20:7d:92:00:22:65:
e1:e2:59:7f:3f:20:68:6d:f5:d8:7d:7b:44:f2:15:74:cd:a8:
47:a4:e1:da:e5:dc:f3:cd:d3:bd:82:79:6c:4b:f7:f3:89:7d:
32:8d:69:f9:5c:8b:c3:74:f3:a7:cd:a9:2c:33:b5:a8:fd:57:
89:62:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:11:26 2026 by rpki-client