
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e203138343139.roa
File: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (raw, json)
Hash identifier: imjrLzaJFOfn1srDmxzShIcHEMU5JmZyB2RXALJZsrY=
Subject key identifier: B4:F6:EB:F9:EC:E0:FF:03:32:23:F5:60:85:C9:7E:A5:AC:01:7C:A5
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 743F962889FAAA54226F0B4B07F970C1DD3765E1
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e203138343139.roa
Signing time: Mon 11 May 2026 16:41:46 +0000
ROA not before: Mon 11 May 2026 16:36:46 +0000
ROA not after: Mon 10 May 2027 16:41:46 +0000
asID: 18419
IP address blocks: 150.129.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3f:96:28:89:fa:aa:54:22:6f:0b:4b:07:f9:70:c1:dd:37:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:46 2026 GMT
Not After : May 10 16:41:46 2027 GMT
Subject: CN=B4F6EBF9ECE0FF033223F56085C97EA5AC017CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:c6:60:74:fd:70:d1:13:86:10:72:cc:2a:
eb:d6:1a:17:37:28:bd:5c:68:59:3a:31:92:60:9b:
29:c6:70:7f:1e:68:b1:f4:ed:2e:73:b9:57:4a:d2:
07:f8:08:ed:96:57:02:ee:2d:d7:24:2c:3c:f7:86:
30:9d:4d:bd:78:fd:aa:bd:9c:03:ec:16:5a:ef:1d:
64:21:30:88:8b:6d:ca:ac:30:25:ac:92:56:ab:e8:
24:21:ec:5c:46:3b:f5:0e:79:90:79:ec:24:13:e3:
a2:81:ed:71:8f:85:4c:e4:3a:b2:82:e3:25:cd:d0:
cd:ca:53:26:de:7e:67:96:ef:f0:67:43:11:a1:b6:
e4:90:ab:01:c9:f2:45:e8:fd:20:06:99:41:75:20:
06:d0:de:64:f0:e2:d0:4e:a6:db:c8:20:81:df:30:
6f:43:33:de:8d:d8:41:1a:7b:0e:77:85:09:a7:11:
24:cd:11:39:9d:d5:03:ce:e8:b4:06:0d:42:66:de:
e4:38:86:fc:39:57:8d:0b:41:62:c4:de:53:48:27:
04:65:e8:1e:50:85:09:7f:1b:8f:13:b1:0e:eb:65:
2f:cc:db:41:48:2e:59:6c:70:f0:7c:37:9c:0d:4f:
b1:83:38:3d:f5:d9:32:76:75:f0:fa:03:33:97:c9:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:EB:F9:EC:E0:FF:03:32:23:F5:60:85:C9:7E:A5:AC:01:7C:A5
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.72.0/22
Signature Algorithm: sha256WithRSAEncryption
64:3f:b1:11:2e:27:1d:0a:d2:3f:ae:a4:47:00:76:5f:59:8e:
73:3f:17:d9:09:ff:f9:8d:ea:4c:cf:fa:25:20:17:d3:a1:d4:
fe:d7:0c:20:33:4f:b6:42:3d:59:94:ad:bb:05:db:97:35:6b:
0c:b9:59:7d:a9:04:03:12:c6:78:09:32:29:1c:ef:1a:88:37:
4e:8e:65:fd:54:39:53:73:97:e8:a4:cb:46:8b:9f:cf:dd:8d:
13:45:f2:37:7e:7b:32:52:77:97:3e:24:83:11:27:03:7f:53:
8f:02:9a:43:0b:f9:3c:c6:b8:7f:6a:05:42:ea:02:9c:ee:99:
2f:38:36:b6:96:56:f0:9e:47:13:5d:59:b4:36:65:04:89:89:
1e:b0:d7:3a:74:46:a7:b0:a9:14:19:d6:db:e3:b1:f3:fe:93:
1c:c9:3f:27:f1:fc:b0:5f:a4:cb:b3:ed:ba:7b:9b:ee:5a:cb:
8f:23:30:e2:ac:87:7e:70:18:77:dc:36:ce:20:ed:c7:bb:6f:
ea:c4:a8:fe:38:44:58:9d:71:37:e7:a7:1e:37:a6:73:96:53:
f2:f1:a2:c2:ef:af:71:c3:4d:06:b4:66:33:47:ba:03:4f:75:
f4:eb:1a:17:71:7f:d4:d5:64:de:c7:75:a9:cb:ea:0f:e4:72:
ed:2d:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:46 2026 by rpki-client