
$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/32372e3130352e302e302f31362d3234203d3e203138313832.roa
File: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (raw, json)
Hash identifier: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=
Subject key identifier: AB:5B:78:1F:CA:9C:FD:88:F2:A6:AA:09:7C:5C:EF:2F:23:7A:F4:FD
Certificate issuer: /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial: 4BD26B34E304397C2E5AA27827EEA73DF6F40B51
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e302e302f31362d3234203d3e203138313832.roa
Signing time: Mon 11 May 2026 16:54:25 +0000
ROA not before: Mon 11 May 2026 16:49:25 +0000
ROA not after: Mon 10 May 2027 16:54:25 +0000
asID: 18182
IP address blocks: 27.105.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d2:6b:34:e3:04:39:7c:2e:5a:a2:78:27:ee:a7:3d:f6:f4:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Validity
Not Before: May 11 16:49:25 2026 GMT
Not After : May 10 16:54:25 2027 GMT
Subject: CN=AB5B781FCA9CFD88F2A6AA097C5CEF2F237AF4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:41:fa:47:d6:2c:5d:55:aa:63:82:f1:43:
0b:94:d7:a7:66:e6:3d:bd:9a:8a:60:84:32:f3:e0:
46:d3:bf:2d:9f:e2:2f:9b:8b:9c:7d:40:40:bb:c3:
ad:82:2e:2e:6a:df:e1:8a:a1:75:c1:38:a9:bb:0c:
d2:7e:ab:6f:60:3c:4a:a8:6f:b3:fc:f2:c0:5f:5b:
81:2c:0e:ac:f5:b3:f7:34:2d:f1:39:9c:72:86:ae:
ba:51:90:f3:55:56:ec:06:10:13:ae:dd:b5:38:06:
51:c2:0d:9f:d1:22:9b:85:25:d6:6b:75:2b:7a:b0:
ed:56:c0:77:c7:5e:c5:1b:b1:81:9b:23:cb:cd:60:
f4:3e:2a:7e:97:36:b1:49:e5:02:20:0a:fe:b1:ef:
78:2a:55:14:73:3f:c3:50:04:52:b9:a0:9a:c7:b8:
99:f3:9b:a6:16:bf:bc:41:ae:00:76:df:5d:4a:b0:
c1:46:8e:25:f6:f4:b0:60:16:13:35:c3:41:24:70:
d3:4e:ff:e2:95:db:a8:b5:73:c3:6b:7f:08:d7:17:
b2:f6:89:fa:41:eb:35:b0:9c:34:b0:20:26:aa:8d:
3c:1a:e6:17:8c:1c:4a:1b:04:ae:98:4b:7b:6b:07:
5e:67:81:9f:8f:75:74:d7:c4:4f:ac:bd:34:07:01:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:78:1F:CA:9C:FD:88:F2:A6:AA:09:7C:5C:EF:2F:23:7A:F4:FD
X509v3 Authority Key Identifier:
keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e302e302f31362d3234203d3e203138313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:55:ae:1d:5e:3d:14:a5:e4:bd:7d:49:9a:45:c8:aa:fb:22:
da:52:42:42:8a:59:71:f9:64:92:59:cf:d9:d7:b7:87:02:b1:
51:87:57:27:d9:25:18:1a:35:43:06:65:71:aa:36:85:99:4f:
f5:1c:94:e0:4a:14:96:59:2d:8d:4f:0e:6e:e8:68:74:8b:23:
1e:30:59:e0:b2:cc:6d:cc:2f:d8:08:37:78:dc:16:18:f3:66:
4f:63:15:f0:dc:d7:12:7d:9d:83:24:5d:93:14:2e:f4:7a:ea:
fe:74:34:86:9b:f9:03:dc:cb:c0:40:2c:c3:72:b4:48:08:f2:
fd:16:8e:f9:61:fc:7f:12:34:f0:ee:1e:6a:da:dc:34:5b:d4:
07:ed:3a:ec:59:6f:0c:d7:1f:06:6b:7e:7e:9b:b6:28:01:50:
7d:84:22:26:4c:a1:a7:96:da:f4:8f:a2:a1:61:e6:80:12:1c:
bd:d5:96:0e:11:51:37:ed:d9:94:3d:6f:f8:b2:31:5e:bd:ec:
ca:77:41:0c:f5:03:16:16:78:7e:05:94:9c:ea:2e:43:db:16:
ef:a2:3c:4f:e1:95:88:d4:86:9b:7e:82:8e:44:b7:ee:47:37:
a6:87:fc:7f:b0:63:fc:6e:74:21:01:eb:5a:f8:f7:b3:4a:ae:
88:b6:21:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUS9JrNOMEOXwuWqJ4J+6nPfb0C1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y2RDMzQzlCMzlDRkM5NTBBMkQzREJDNzgxMzFFMUFB
RjhDQzhFRjAeFw0yNjA1MTExNjQ5MjVaFw0yNzA1MTAxNjU0MjVaMDMxMTAvBgNV
BAMTKEFCNUI3ODFGQ0E5Q0ZEODhGMkE2QUEwOTdDNUNFRjJGMjM3QUY0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nUH6R9YsXVWqY4LxQwuU16dm
5j29mopghDLz4EbTvy2f4i+bi5x9QEC7w62CLi5q3+GKoXXBOKm7DNJ+q29gPEqo
b7P88sBfW4EsDqz1s/c0LfE5nHKGrrpRkPNVVuwGEBOu3bU4BlHCDZ/RIpuFJdZr
dSt6sO1WwHfHXsUbsYGbI8vNYPQ+Kn6XNrFJ5QIgCv6x73gqVRRzP8NQBFK5oJrH
uJnzm6YWv7xBrgB2311KsMFGjiX29LBgFhM1w0EkcNNO/+KV26i1c8NrfwjXF7L2
ifpB6zWwnDSwICaqjTwa5heMHEobBK6YS3trB15ngZ+PdXTXxE+svTQHARkrAgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUq1t4H8qc/YjypqoJfFzvLyN69P0wHwYDVR0j
BBgwFoAUP20zybOc/JUKLT28eBMeGq+MyO8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU09ORVQv
MC8zRjZEMzNDOUIzOUNGQzk1MEEyRDNEQkM3ODEzMUUxQUFGOENDOEVGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGNkQzM0M5QjM5Q0ZDOTUwQTJEM0RCQzc4MTMx
RTFBQUY4Q0M4RUYuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TT05FVC8wLzMyMzcyZTMxMzAzNTJl
MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM4MzEzODMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
G2kwDQYJKoZIhvcNAQELBQADggEBACZVrh1ePRSl5L19SZpFyKr7ItpSQkKKWXH5
ZJJZz9nXt4cCsVGHVyfZJRgaNUMGZXGqNoWZT/UclOBKFJZZLY1PDm7oaHSLIx4w
WeCyzG3ML9gIN3jcFhjzZk9jFfDc1xJ9nYMkXZMULvR66v50NIab+QPcy8BALMNy
tEgI8v0Wjvlh/H8SNPDuHmra3DRb1AftOuxZbwzXHwZrfn6btigBUH2EIiZMoaeW
2vSPoqFh5oASHL3Vlg4RUTft2ZQ9b/iyMV697Mp3QQz1AxYWeH4FlJzqLkPbFu+i
PE/hlYjUhpt+go5Et+5HN6aH/H+wY/xudCEB61r497NKroi2ITs=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:04 2026 by rpki-client