
$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
File: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier: j1m+zZLdqs9LgjkwFEX0LcK9wAoj6PXxasGI/0pp6Z4=
Subject key identifier: C3:70:33:AC:6C:65:EA:1C:5E:80:47:D4:0A:9B:43:66:FA:CF:FE:E9
Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial: 7051C16927EE354625B5E3F69B2B894399564E9B
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
Signing time: Mon 11 May 2026 16:41:53 +0000
ROA not before: Mon 11 May 2026 16:36:53 +0000
ROA not after: Mon 10 May 2027 16:41:53 +0000
asID: 4780
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:51:c1:69:27:ee:35:46:25:b5:e3:f6:9b:2b:89:43:99:56:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Validity
Not Before: May 11 16:36:53 2026 GMT
Not After : May 10 16:41:53 2027 GMT
Subject: CN=C37033AC6C65EA1C5E8047D40A9B4366FACFFEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:5e:3b:83:b0:02:1e:20:35:83:dd:8c:fc:
51:f0:5b:48:da:77:84:b5:c5:07:e7:50:4f:d1:e0:
0a:99:24:8d:77:0d:eb:13:ea:86:ce:20:e6:73:e0:
5e:70:f5:a3:37:d1:6e:fd:bb:11:96:7a:00:97:c8:
ad:d4:c7:77:b0:c5:94:6c:de:45:6a:dd:e0:1b:c5:
6a:b8:0c:0c:20:1e:e4:4d:3a:55:fe:f1:3b:ff:60:
84:37:cb:7f:7f:f4:bd:d9:0c:e7:87:6e:4d:ff:1b:
d3:01:87:fe:f9:87:dc:c6:a6:13:ec:2c:46:81:56:
e2:55:5e:3f:b8:bb:b4:8a:01:19:e8:92:8a:6b:da:
cb:9b:0f:69:0d:1e:5c:75:f9:5e:e3:13:67:ba:d2:
06:be:a3:cb:b1:51:07:58:0a:3d:d3:95:f2:92:d1:
5b:3e:07:55:4e:76:0a:f1:62:85:bd:75:d8:6a:89:
08:ed:55:13:fe:64:c9:07:bf:0a:ef:7c:f2:20:20:
03:f7:7a:99:a6:93:ba:fb:0a:33:94:2e:30:b2:63:
98:5a:7c:e1:91:81:a6:08:e5:d5:e2:8e:b8:b8:95:
fc:f4:25:d2:f0:6e:9d:a1:35:19:4a:c6:5c:95:8e:
c5:db:43:b3:94:e5:6d:79:d4:2e:6d:46:42:a3:2f:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:33:AC:6C:65:EA:1C:5E:80:47:D4:0A:9B:43:66:FA:CF:FE:E9
X509v3 Authority Key Identifier:
keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
03:81:60:31:27:31:3a:2a:f6:d6:9c:fc:6f:67:15:eb:5b:96:
61:59:ee:4b:ac:38:2a:ef:30:7a:6f:70:e9:29:f9:4c:62:57:
ea:10:ad:f8:c2:9a:ac:22:4f:34:11:a9:52:92:23:13:9b:d9:
10:04:2c:cc:a8:52:23:87:e2:65:73:f1:a0:b9:49:a2:70:91:
8b:7a:01:0e:d5:d3:01:d2:01:bf:94:ea:25:e6:a6:cd:93:93:
7f:1b:1a:c7:7a:8e:37:71:3e:0f:19:fa:b3:f6:a2:75:93:bd:
ec:5c:42:d5:b9:3b:c6:d0:75:3d:e7:c6:2f:bc:69:53:f4:5e:
04:35:eb:f5:1d:72:7b:5e:87:ce:5c:61:aa:bc:0c:b2:10:65:
24:bc:bf:bd:53:97:68:c2:e3:07:9d:1c:7d:69:89:0d:66:6e:
ea:6c:ac:c5:9b:c7:da:5e:b1:f0:f9:5b:49:e2:1c:f1:c0:7e:
f0:cb:4c:2b:2b:28:73:a1:71:c1:07:6f:2a:fa:37:47:d5:c8:
ce:cf:c2:af:89:78:d9:98:1d:c7:08:55:ea:b4:25:9f:cd:fd:
f7:41:c2:8f:3b:2d:f8:a3:88:7c:67:ee:8d:13:e9:73:de:2a:
ef:d8:fd:d3:d3:11:48:13:fc:2c:bd:40:be:e7:97:ff:7f:f6:
13:c7:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:57 2026 by rpki-client