
$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa
File: 323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (raw, json)
Hash identifier: Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=
Subject key identifier: EF:E8:2F:FC:0A:40:8E:D0:F3:14:E9:BC:68:36:BD:B0:D4:E7:E8:24
Certificate issuer: /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial: 66E556BBD3F1340B690D906945108314E3E2A27C
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa
Signing time: Mon 11 May 2026 17:38:42 +0000
ROA not before: Mon 11 May 2026 17:33:42 +0000
ROA not after: Mon 10 May 2027 17:38:42 +0000
asID: 150767
IP address blocks: 2401:5f20::/32 maxlen: 127
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e5:56:bb:d3:f1:34:0b:69:0d:90:69:45:10:83:14:e3:e2:a2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Validity
Not Before: May 11 17:33:42 2026 GMT
Not After : May 10 17:38:42 2027 GMT
Subject: CN=EFE82FFC0A408ED0F314E9BC6836BDB0D4E7E824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:21:1b:c7:74:5d:4a:b2:25:9d:b6:a6:d1:
9a:eb:56:a6:33:f2:23:57:df:80:71:72:cc:ef:a3:
4e:ac:eb:77:df:bc:e1:c6:a6:8d:85:fe:f6:2a:1a:
67:c6:31:66:a6:9d:4d:2a:ea:6e:53:23:87:40:1b:
34:d9:62:47:16:54:06:c7:26:32:7f:92:c5:12:e5:
c7:b7:33:af:fe:b1:b2:00:ea:2d:0e:6f:2c:0c:5b:
65:39:31:fd:1c:c7:7c:ed:65:09:95:79:bb:e8:c9:
df:63:91:8a:60:ee:b6:83:49:9f:34:c0:72:fb:3a:
9e:8f:d7:61:88:62:99:ab:db:fc:65:32:4f:ed:b5:
18:9e:ae:56:b0:6a:a8:0c:c3:cb:73:34:f0:c5:5d:
b0:d8:f3:73:58:4c:54:7c:f1:80:6b:71:09:c4:7e:
02:9a:1e:af:87:e5:b7:27:05:ad:58:36:65:9c:39:
2f:83:73:18:ad:70:19:ac:02:c9:94:41:79:c8:82:
af:fb:5e:d2:19:93:d6:7f:28:f6:0c:a7:27:df:a0:
4e:5e:b2:95:c6:4e:fc:a2:68:d0:6d:50:67:91:87:
b7:4a:b6:e7:32:c5:66:f8:e0:8b:aa:a9:d2:41:c2:
08:32:3e:8b:e2:6c:80:60:d8:b5:a2:eb:6c:bb:21:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:2F:FC:0A:40:8E:D0:F3:14:E9:BC:68:36:BD:B0:D4:E7:E8:24
X509v3 Authority Key Identifier:
keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5f20::/32
Signature Algorithm: sha256WithRSAEncryption
a2:9c:d7:09:12:d5:d8:ae:3a:ee:f5:a4:73:00:20:d2:1a:a5:
e7:a7:07:7a:7e:fd:2f:fc:65:33:78:8c:ea:a1:cf:df:ce:7b:
6d:76:2a:02:42:6b:9d:5a:cb:f5:40:9b:82:ec:17:bc:f8:1f:
10:79:05:1b:39:68:3d:a0:85:16:6d:10:ee:67:0e:ae:49:9d:
df:ed:2b:7e:6e:6c:ac:f1:55:eb:04:c9:52:74:1d:12:4f:0f:
ff:b4:e3:40:19:0c:f0:bc:e1:ff:cb:23:3a:29:13:cc:15:83:
a8:fb:5a:be:51:1f:40:7a:c9:57:ab:ec:11:a7:c1:4c:2b:90:
5d:c9:1c:21:63:11:1c:ee:f0:63:c0:45:cc:a2:4e:1e:db:ed:
34:60:b1:c5:ef:8e:d6:7f:9d:ba:1f:1c:4d:36:70:97:55:d3:
9c:37:2c:21:76:34:1d:25:94:65:6c:fd:70:90:f4:22:37:69:
d4:6e:69:7f:db:fa:01:2b:de:e5:9d:87:d9:15:d3:06:47:a4:
f2:d2:e5:2a:9f:60:2c:6d:4e:78:75:49:79:9a:52:3a:0a:f2:
71:13:39:da:64:4c:52:8e:ad:4e:19:68:ef:a6:34:14:9a:c0:
85:cb:86:a9:96:03:50:4a:62:93:46:c6:f9:df:3d:40:2e:67:
70:29:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:10 2026 by rpki-client