
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa
File: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (raw, json)
Hash identifier: AjesNqW5LDu3OPOc+j2VBFnEq+C/Ay72aP18G/C8UQM=
Subject key identifier: 3F:E4:97:45:9A:69:A5:EE:75:7F:65:65:DA:E4:B9:64:65:FD:D2:87
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 461E7A9A290B6A8D773FE8451B3E9AC9C9292DE8
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 17:40:40 +0000
ROA not before: Mon 11 May 2026 17:35:40 +0000
ROA not after: Mon 10 May 2027 17:40:40 +0000
asID: 4780
IP address blocks: 202.148.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1e:7a:9a:29:0b:6a:8d:77:3f:e8:45:1b:3e:9a:c9:c9:29:2d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 17:35:40 2026 GMT
Not After : May 10 17:40:40 2027 GMT
Subject: CN=3FE497459A69A5EE757F6565DAE4B96465FDD287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:0a:42:f9:b4:55:82:db:2a:62:11:0d:70:
71:1e:01:19:76:6d:0f:1e:db:a9:71:5a:86:a5:52:
8f:c2:77:3a:fc:85:05:90:39:72:ec:fb:ae:7c:bc:
e7:fd:dc:c0:5a:ed:3b:f5:f1:af:64:f9:b2:5e:9c:
6e:e2:5b:7e:4f:4f:3f:91:e4:b1:90:d4:5a:38:96:
6d:ec:c7:64:b3:4a:15:f5:18:a7:ca:30:b1:c2:d5:
01:a6:0a:5d:73:44:4d:27:93:b3:f2:74:44:ae:0d:
00:64:18:ac:8d:02:9e:f9:32:15:c0:9a:d5:9f:75:
96:64:99:aa:b8:50:0c:8a:70:77:e4:bf:db:78:8d:
99:45:7b:38:3c:7b:66:c7:ad:8f:d7:a1:8e:62:32:
eb:38:5e:61:06:dc:27:06:da:8a:10:ee:1d:4b:45:
00:70:27:02:9c:14:b4:d5:d7:f5:8b:da:0f:2f:c8:
5b:78:3a:5f:e3:cd:05:b1:c5:0f:7a:4c:56:fc:04:
e1:28:94:da:7b:22:84:f4:b3:39:db:46:5a:e9:61:
4f:01:93:4f:9c:b8:ff:d3:1b:90:d3:12:7b:75:eb:
05:b1:8e:71:6d:a6:2d:59:4f:9a:e4:69:8b:2e:65:
d4:c7:9d:bc:7a:fd:b6:55:60:65:ae:cc:2c:76:59:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:97:45:9A:69:A5:EE:75:7F:65:65:DA:E4:B9:64:65:FD:D2:87
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:7e:3e:3d:93:1f:7f:c3:f9:f1:4f:01:8c:55:aa:78:6a:94:
52:43:ff:96:46:17:91:69:cd:10:4a:98:8b:ce:9e:39:ce:30:
66:f7:04:d7:3b:67:45:55:3f:45:f0:80:1a:5d:94:cd:bc:74:
c3:8f:63:ab:be:4d:88:ff:c8:54:ba:19:3c:97:7c:52:08:60:
6f:de:47:e9:3c:b1:7f:a7:fc:ec:0a:b4:41:91:5c:16:b3:73:
c2:17:79:6f:82:cc:a4:56:64:66:69:38:79:85:18:95:18:f3:
37:b4:d8:37:89:42:56:31:f5:8a:68:54:6f:84:cc:12:34:1e:
cb:3c:0b:11:b7:14:12:c9:c4:51:6c:0a:26:fb:8b:1a:b4:1e:
fa:07:7f:60:47:54:34:0d:af:0a:e1:39:6e:50:8f:b3:49:ed:
1c:62:03:dd:28:91:da:f2:17:31:b7:5f:12:ec:5e:c9:c8:ae:
3b:f6:77:ca:16:6d:06:5c:c8:b0:d3:ff:13:00:d7:2f:e0:b8:
b5:38:56:9a:90:97:99:e1:5b:c6:6e:6b:79:14:c6:64:7e:a2:
b5:2c:7f:15:a3:58:b6:51:37:43:29:0f:97:ca:ae:66:87:34:
4a:8a:ae:9d:86:50:99:de:0e:29:a7:7d:12:d4:38:4c:f0:a4:
83:6b:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:22 2026 by rpki-client