
$ rpki-client -vvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20323133343330.roa
File: 3231302e36372e3134322e302f32332d3234203d3e20323133343330.roa (raw, json)
Hash identifier: 8irft8AZ2L+yYQm7krEESN56CuIELN8EE5YzPMGirnE=
Subject key identifier: B2:70:EB:00:F1:78:9B:70:B2:6B:0C:28:A9:B4:D5:28:C6:C7:62:A7
Certificate issuer: /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial: 1054ADFE0572C19EE50AD52FDC8E3E9CA64357BA
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20323133343330.roa
Signing time: Mon 11 May 2026 17:52:49 +0000
ROA not before: Mon 11 May 2026 17:47:49 +0000
ROA not after: Mon 10 May 2027 17:52:49 +0000
asID: 213430
IP address blocks: 210.67.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:54:ad:fe:05:72:c1:9e:e5:0a:d5:2f:dc:8e:3e:9c:a6:43:57:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Validity
Not Before: May 11 17:47:49 2026 GMT
Not After : May 10 17:52:49 2027 GMT
Subject: CN=B270EB00F1789B70B26B0C28A9B4D528C6C762A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:37:d7:c1:da:71:9e:40:ca:f3:09:f7:81:
3c:1a:98:ae:19:3f:53:b8:5d:a1:f1:3e:1a:85:d6:
21:73:94:f8:5c:b1:ff:6d:96:63:41:17:de:04:fe:
53:f3:03:6c:c5:5a:91:ee:70:9f:b9:69:18:7e:72:
d2:1b:8a:a2:ff:c3:99:73:76:a7:86:f8:6f:07:99:
78:1c:80:54:19:40:37:aa:12:1e:d4:e9:55:ed:85:
3d:7b:f7:b7:1d:17:d5:de:a8:59:39:e9:4f:5d:d6:
bd:a7:fc:51:fe:ba:28:79:c7:7c:9e:c8:83:3c:cd:
d3:2f:c5:0e:af:6d:9e:ec:ae:d4:4a:7d:aa:50:68:
6e:a2:90:e1:85:5e:17:45:a0:d4:c4:0d:2d:6f:7b:
0a:05:8e:3f:26:1b:2c:90:36:6b:c2:af:a8:77:3f:
91:a0:ec:f7:89:22:da:14:6e:8c:c1:57:7c:1d:29:
b3:4b:8b:86:7b:af:59:a0:1c:67:60:93:82:dc:c3:
fb:20:66:5a:3c:98:81:34:4d:43:5e:c4:4b:49:37:
80:88:f5:87:9c:a2:f8:7d:cd:5a:af:28:c1:fa:10:
3b:cc:00:4a:3f:38:b3:e0:cd:7b:0e:12:54:10:c6:
04:e9:bf:ee:71:47:ed:f1:a9:1f:fc:09:9d:0b:4e:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:70:EB:00:F1:78:9B:70:B2:6B:0C:28:A9:B4:D5:28:C6:C7:62:A7
X509v3 Authority Key Identifier:
keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20323133343330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.67.142.0/23
Signature Algorithm: sha256WithRSAEncryption
97:33:51:67:58:59:76:c1:84:1e:ea:b0:4e:a4:ca:00:9e:89:
f6:49:cb:ed:23:d3:83:ad:38:c2:0d:48:46:2d:d7:b8:12:56:
65:00:0f:ab:63:2f:a7:c8:10:4d:38:65:6a:3c:07:76:75:67:
d9:6f:1a:72:88:89:5b:23:b4:94:bc:da:39:07:03:1d:a8:c9:
85:c5:78:13:e7:32:94:f8:04:2b:6b:18:6d:25:6f:9b:ba:2e:
89:e8:07:e2:fb:28:00:a2:d8:a9:e5:27:86:4d:3f:6f:92:31:
49:36:66:7d:da:55:19:40:74:0f:8e:2e:00:92:6c:af:21:79:
5b:c2:1b:20:f5:7a:85:8b:5f:52:b9:60:4f:5f:15:3e:40:a3:
0b:20:c1:81:cd:38:53:0c:1c:33:a1:c9:7b:74:e2:d3:fb:d5:
42:e8:9a:85:1e:3a:9b:1b:c5:f3:c9:49:a9:01:7c:0d:d3:8a:
b8:c3:a1:9b:e7:34:56:21:b4:c4:30:21:ea:af:fa:04:36:fb:
7b:0f:5c:38:f6:cf:c5:92:c7:b2:0f:3c:79:f9:b5:fa:e7:03:
46:97:25:b9:2d:ec:ee:e5:c5:36:74:8f:e8:b6:fb:4e:7a:16:
db:48:c4:af:f8:43:e4:b9:8d:8e:2d:e1:ec:dc:9b:fb:5c:fc:
d1:ac:eb:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:10:50 2026 by rpki-client