
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa
File: 3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa (raw, json)
Hash identifier: NOssyf0cVbehU0NIrpbuxzGDevbFBHHPuCiEoYJfVaI=
Subject key identifier: CE:D9:12:16:AF:47:71:4D:54:84:58:D6:1E:B2:BC:1D:C6:6A:62:32
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 62A6AC74527153989FC035948BD6168A8D2A05FF
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa
Signing time: Sat 10 Oct 2026 15:44:02 +0000
ROA not before: Sat 10 Oct 2026 15:39:02 +0000
ROA not after: Sat 09 Oct 2027 15:44:02 +0000
asID: 207550
IP address blocks: 187.79.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 18:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a6:ac:74:52:71:53:98:9f:c0:35:94:8b:d6:16:8a:8d:2a:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Oct 10 15:39:02 2026 GMT
Not After : Oct 9 15:44:02 2027 GMT
Subject: CN=CED91216AF47714D548458D61EB2BC1DC66A6232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7a:54:84:4b:eb:35:d5:0f:6a:f1:79:d4:4d:
7e:3c:1f:b6:c0:11:38:80:be:de:29:61:1f:5b:2f:
4d:61:72:00:69:98:af:61:28:6c:7d:a5:a8:2c:a8:
4c:14:8b:ce:7f:ec:2b:69:26:7d:d3:50:12:52:9f:
17:c6:44:ba:35:10:ea:f2:c0:bd:5f:03:ec:86:55:
09:6f:8e:2c:ab:37:a6:a6:4c:45:ea:97:4d:c6:a4:
98:d9:9a:f9:bc:4f:35:79:2b:36:cd:6e:a3:ea:29:
4d:01:08:45:a4:88:51:a7:b6:d8:7c:92:60:20:0c:
86:a3:73:e8:34:b0:4c:0f:54:98:18:fb:9f:1e:72:
46:7c:d2:1d:c0:5e:a9:1e:07:b8:1a:97:62:2c:3b:
47:9f:a3:6d:f6:16:bc:4c:4c:63:e1:b7:67:b0:05:
49:fe:12:2a:85:d3:13:e7:3d:68:0d:5e:25:86:c8:
43:b4:33:6a:a6:aa:79:2e:1b:65:1d:f7:aa:9b:61:
4d:b9:8d:ef:df:b8:f0:c8:ca:73:dd:5e:db:ed:b4:
e0:62:ca:03:9e:7a:08:67:54:18:77:d8:8b:77:75:
40:b3:93:25:72:62:aa:a5:5f:f5:c5:b4:bd:e0:be:
c9:7c:d0:8d:b3:2b:cc:51:c2:c8:0d:dc:39:b2:80:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D9:12:16:AF:47:71:4D:54:84:58:D6:1E:B2:BC:1D:C6:6A:62:32
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.202.0/23
Signature Algorithm: sha256WithRSAEncryption
79:34:37:00:1b:ee:d7:a5:53:cf:53:b5:51:c2:91:3a:14:fd:
cc:05:4a:3f:5a:98:97:b6:0a:6d:90:4d:9c:d9:49:2e:09:40:
f7:0f:01:92:e0:17:7e:c7:eb:f4:45:be:96:69:1b:dc:64:b6:
fd:95:c0:81:1d:59:8f:0f:c8:1b:b5:97:9a:cb:f8:f7:a2:5e:
dc:aa:31:76:e7:e7:9a:e1:ba:cb:63:a4:21:88:9a:7c:45:8a:
03:da:de:74:6a:9b:e6:cd:dd:da:6d:cf:d4:1b:64:0d:26:fe:
56:32:25:00:73:31:a9:15:53:ab:c8:15:13:32:9e:fa:14:a2:
fb:31:cc:d3:d7:fd:f6:e8:51:80:8f:4d:9b:87:db:14:cf:8f:
fa:d4:90:d0:ee:54:b0:0d:03:ad:b8:62:14:3c:7f:8f:51:02:
d1:d5:88:28:23:15:96:d8:2c:6f:00:4e:1b:a0:cc:4e:23:42:
79:aa:85:90:d0:e6:0c:e6:5d:df:b9:15:f7:b9:65:a3:34:55:
76:e3:32:b4:08:d7:95:22:b6:b0:46:fc:56:db:88:31:e8:3f:
f2:3b:a4:f6:69:a9:9a:c1:10:e6:e4:1f:84:a7:ba:52:80:5b:
42:2a:95:d0:02:5c:81:03:a5:74:c4:d8:9f:a6:79:62:88:67:
71:16:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:15 2026 by rpki-client