
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa
File: 3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (raw, json)
Hash identifier: /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=
Subject key identifier: 82:EE:E1:EB:7C:3F:B0:A7:2D:50:DC:F6:AC:F2:6C:32:62:FE:60:C8
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 1F9B439B4F457C071FF268299254DCEE90E0D905
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa
Signing time: Fri 04 Sep 2026 13:44:00 +0000
ROA not before: Fri 04 Sep 2026 13:39:00 +0000
ROA not after: Fri 03 Sep 2027 13:44:00 +0000
asID: 207550
IP address blocks: 187.79.204.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 13:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9b:43:9b:4f:45:7c:07:1f:f2:68:29:92:54:dc:ee:90:e0:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Sep 4 13:39:00 2026 GMT
Not After : Sep 3 13:44:00 2027 GMT
Subject: CN=82EEE1EB7C3FB0A72D50DCF6ACF26C3262FE60C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:08:23:8d:a6:b7:a3:fd:92:e9:cf:0d:8d:
90:88:c3:13:38:14:d6:57:2f:0a:b9:02:54:a5:a2:
b9:10:d2:3c:a7:46:c1:d5:3f:43:8a:a8:23:a8:f1:
95:63:1b:cd:88:36:36:e7:1a:c7:56:3b:c4:38:0a:
35:c5:97:aa:e7:92:53:99:d3:71:28:68:95:64:88:
66:98:b4:5d:98:ea:14:fc:47:98:ff:92:5c:dc:3f:
70:4f:63:0f:b0:2c:65:a8:31:25:46:c8:98:13:68:
26:96:86:a6:64:25:00:b1:b2:df:4d:06:eb:18:8c:
43:28:a1:11:80:58:26:6a:75:e5:65:b0:d6:39:39:
a1:9f:43:fc:5d:e7:5e:d7:bc:20:91:6a:63:b3:f3:
ce:6c:65:d4:d5:3c:12:7e:97:3b:62:0c:cd:67:79:
a5:c2:7e:72:43:20:76:fd:7b:55:38:15:b4:03:b4:
bc:74:cc:ac:bd:29:a5:5b:96:f7:55:95:ce:9e:34:
45:e5:82:17:8f:60:6d:92:57:e4:ba:58:11:50:93:
f0:d9:86:0a:87:83:5d:c2:9a:60:10:3c:fe:6b:71:
ca:b0:58:91:e6:c2:1b:3e:14:fd:49:8b:80:91:64:
5a:38:35:ba:ee:94:ab:77:7b:c5:6d:77:67:fe:06:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:E1:EB:7C:3F:B0:A7:2D:50:DC:F6:AC:F2:6C:32:62:FE:60:C8
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.204.0/22
Signature Algorithm: sha256WithRSAEncryption
16:00:a7:2a:de:0d:35:9e:53:4e:18:4e:8a:7a:f3:37:f3:a9:
de:bd:d8:4b:1d:04:9c:69:0e:ab:73:75:81:6a:b3:13:00:2b:
37:c7:f0:d4:90:66:b3:3d:77:56:a1:c7:b4:66:42:23:7b:3d:
f8:5e:7b:e7:20:2c:53:06:49:75:6a:30:04:d8:04:50:00:99:
8a:3d:76:fa:4e:c7:8a:1d:49:7a:2f:e0:2e:16:d2:c0:9e:b2:
70:a5:e4:34:b2:a1:52:40:7e:0f:7b:c0:f6:3e:3b:5f:f1:58:
45:c6:2f:68:7c:c6:d2:36:c0:12:fb:c9:4a:41:8d:39:44:1f:
a8:b3:44:da:f2:0e:58:a8:ad:20:e9:e6:2e:e9:0c:f4:45:80:
17:79:61:9e:4f:b3:f3:7d:64:f0:4d:d8:a1:aa:f9:f2:02:1a:
05:52:d0:6e:de:d7:69:83:46:19:bf:13:fe:ca:5b:09:75:f9:
9b:ae:47:4a:28:9f:7f:4e:34:77:69:93:b0:f5:c5:39:77:13:
8b:6a:1e:12:6b:30:3f:99:f7:a3:96:74:bc:27:d8:68:4b:b2:
76:73:4e:53:03:1c:35:22:13:14:0d:63:d6:55:f8:92:2c:19:
a4:ec:25:34:6c:e7:92:61:a5:23:08:d2:21:62:ed:bd:af:81:
fe:65:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:11 2026 by rpki-client