
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa
File: 3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa (raw, json)
Hash identifier: 3+dW9wI0EjgqQpXg6HhrskIvYJ2q/OO48C7Pc+fjGww=
Subject key identifier: 2E:25:3F:AD:F7:4D:86:40:4C:87:42:7A:DE:A3:89:43:BD:94:64:45
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 432FBE07C1652BD4A15CC6570350A149BD05DFE9
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa
Signing time: Sat 10 Oct 2026 15:44:01 +0000
ROA not before: Sat 10 Oct 2026 15:39:01 +0000
ROA not after: Sat 09 Oct 2027 15:44:01 +0000
asID: 207550
IP address blocks: 187.79.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 18:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2f:be:07:c1:65:2b:d4:a1:5c:c6:57:03:50:a1:49:bd:05:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Oct 10 15:39:01 2026 GMT
Not After : Oct 9 15:44:01 2027 GMT
Subject: CN=2E253FADF74D86404C87427ADEA38943BD946445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:d1:0f:1a:51:8a:df:82:64:76:28:ad:ed:
00:0c:42:79:f9:af:21:14:44:3e:3a:4e:96:ff:50:
09:90:34:fb:b5:17:85:49:41:b5:a4:69:84:71:d6:
55:fe:7d:51:86:fc:23:87:0b:af:e2:bc:7f:ba:8d:
14:dc:00:67:e6:a9:01:7d:7a:eb:e6:3d:7e:09:0e:
46:32:f8:76:01:38:06:bb:17:19:95:0c:a6:45:e5:
50:a2:20:8a:0b:f5:ed:11:99:1a:11:be:c4:21:17:
eb:73:a9:0c:2b:b4:bc:2d:fc:34:72:50:5c:01:7e:
bc:f7:be:68:7b:83:1b:4c:7d:2f:05:df:ed:88:ff:
3c:30:d2:54:19:f7:96:f4:8f:44:fd:d3:0a:21:d1:
2a:45:39:45:5a:9b:ec:ea:c8:a1:87:80:00:a9:4e:
30:ad:4f:7d:45:a8:c4:8a:82:87:94:d5:16:fd:ef:
b0:30:90:e4:78:f9:c3:45:03:e6:b3:80:20:a2:0d:
4d:63:0b:94:2d:2a:b2:f3:5b:8f:f5:c4:0d:04:46:
8e:8c:94:c3:ba:a2:90:ee:c9:e4:28:6e:1f:08:c1:
9c:ac:02:8f:39:98:2e:eb:2a:5b:35:b4:a4:5b:df:
97:d1:53:a3:ab:2b:ea:1b:94:a3:06:57:be:e7:be:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:3F:AD:F7:4D:86:40:4C:87:42:7A:DE:A3:89:43:BD:94:64:45
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3231362e302f32312d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.216.0/21
Signature Algorithm: sha256WithRSAEncryption
77:79:78:ac:7a:a1:38:09:81:65:e5:e1:fe:10:ba:99:e0:98:
33:6a:95:84:ee:94:15:bb:42:85:56:67:88:0c:24:13:de:f5:
34:e8:d7:82:39:32:d7:89:71:06:61:c8:df:4e:12:06:c4:4b:
81:52:b5:f2:3e:b3:32:4b:e3:be:ac:c8:c7:ce:76:5b:4b:db:
85:6a:6c:cd:b9:ad:a2:bf:88:1e:04:99:40:b7:15:84:fd:9c:
29:a1:92:70:9f:de:6a:73:5a:40:a9:5a:10:40:b0:3f:4e:95:
f8:93:08:8c:bc:da:b5:dd:ce:22:62:af:8c:46:fe:13:91:87:
07:78:93:cb:b1:70:a0:12:60:59:92:09:97:7c:f8:29:89:3c:
6a:e6:f9:0f:e2:81:5d:14:1a:1c:e1:46:12:ad:1f:44:14:e2:
d6:88:f9:82:fc:07:d5:ef:33:23:2b:74:4e:5c:3e:66:c7:cb:
01:50:3a:c6:34:23:18:f1:eb:2a:11:5f:4a:a0:be:47:ef:11:
fb:55:c3:20:f9:bd:e2:50:94:17:70:67:a5:1b:3c:67:28:53:
12:06:d8:79:3b:2a:26:30:58:a5:2e:7a:27:87:da:58:d9:a3:
42:54:e5:23:c0:01:e3:4b:ce:08:24:84:7f:02:7b:37:fe:3e:
43:37:b3:6a
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUQy++B8FlK9ShXMZXA1ChSb0F3+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1
RDFDMEI1MDAeFw0yNjEwMTAxNTM5MDFaFw0yNzEwMDkxNTQ0MDFaMDMxMTAvBgNV
BAMTKDJFMjUzRkFERjc0RDg2NDA0Qzg3NDI3QURFQTM4OTQzQkQ5NDY0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pNEPGlGK34Jkdiit7QAMQnn5
ryEURD46Tpb/UAmQNPu1F4VJQbWkaYRx1lX+fVGG/COHC6/ivH+6jRTcAGfmqQF9
euvmPX4JDkYy+HYBOAa7FxmVDKZF5VCiIIoL9e0RmRoRvsQhF+tzqQwrtLwt/DRy
UFwBfrz3vmh7gxtMfS8F3+2I/zww0lQZ95b0j0T90woh0SpFOUVam+zqyKGHgACp
TjCtT31FqMSKgoeU1Rb977AwkOR4+cNFA+azgCCiDU1jC5QtKrLzW4/1xA0ERo6M
lMO6opDuyeQobh8IwZysAo85mC7rKls1tKRb35fRU6OrK+oblKMGV77nvnFPAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQULiU/rfdNhkBMh0J63qOJQ72UZEUwHwYDVR0j
BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG
MUUzRjA1RDFDMEI1MC5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS8zMTM4MzcyZTM3
MzkyZTMyMzEzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEA7tP2DANBgkqhkiG9w0BAQsFAAOCAQEAd3l4rHqhOAmBZeXh/hC6
meCYM2qVhO6UFbtChVZniAwkE971NOjXgjky14lxBmHI304SBsRLgVK18j6zMkvj
vqzIx852W0vbhWpszbmtor+IHgSZQLcVhP2cKaGScJ/eanNaQKlaEECwP06V+JMI
jLzatd3OImKvjEb+E5GHB3iTy7FwoBJgWZIJl3z4KYk8aub5D+KBXRQaHOFGEq0f
RBTi1oj5gvwH1e8zIyt0Tlw+ZsfLAVA6xjQjGPHrKhFfSqC+R+8R+1XDIPm94lCU
F3BnpRs8ZyhTEgbYeTsqJjBYpS56J4faWNmjQlTlI8AB40vOCCSEfwJ7N/4+Qzez
ag==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:10 2026 by rpki-client