
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/34332e3235352e31322e302f32322d3234203d3e20313331353834.roa
File: 34332e3235352e31322e302f32322d3234203d3e20313331353834.roa (raw, json)
Hash identifier: xr3wjSeSM0n7guHGwmE6uYuIWzUJyOCRwyP6tv6jeHE=
Subject key identifier: 0F:48:C1:ED:32:B3:04:58:14:58:BA:71:DC:01:0D:BE:85:36:ED:EE
Certificate issuer: /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Certificate serial: 1505334065656F7FF832572500DC4D30B56A8F
Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/34332e3235352e31322e302f32322d3234203d3e20313331353834.roa
Signing time: Mon 11 May 2026 17:19:53 +0000
ROA not before: Mon 11 May 2026 17:14:53 +0000
ROA not after: Mon 10 May 2027 17:19:53 +0000
asID: 131584
IP address blocks: 43.255.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:05:33:40:65:65:6f:7f:f8:32:57:25:00:dc:4d:30:b5:6a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Validity
Not Before: May 11 17:14:53 2026 GMT
Not After : May 10 17:19:53 2027 GMT
Subject: CN=0F48C1ED32B304581458BA71DC010DBE8536EDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:6b:71:cd:33:27:25:c8:c3:62:26:7d:1a:
d0:ca:6a:3d:6d:72:e3:d3:66:57:2b:d5:6d:4b:8f:
de:24:12:3e:a6:46:f6:fa:d1:9c:83:50:b6:81:16:
b9:7b:72:b2:bd:05:50:78:51:4f:dc:f7:43:30:00:
b9:21:00:9d:41:1c:ab:e4:a1:f8:89:8f:06:ae:b2:
fb:41:43:66:70:fb:a3:3d:45:cc:8b:e5:97:68:f9:
98:97:83:df:fa:38:e6:75:e0:5c:bb:a4:73:33:07:
89:b2:7a:5d:1e:59:52:cb:b3:8c:84:4f:9b:4a:6f:
09:7d:16:96:29:5e:44:5a:03:85:1a:6d:1b:52:6a:
ea:f0:ef:94:1b:02:46:a5:c2:ed:77:65:7b:c7:d1:
7d:fd:3e:b9:61:fb:62:f9:a5:5c:da:5b:ad:20:aa:
8c:a7:52:d3:8a:db:ce:8e:b5:d7:5d:28:14:50:45:
91:e3:07:d0:ac:ab:01:29:c1:d4:32:a8:f0:c4:0d:
e7:dc:8a:5c:80:9d:a9:d9:50:0e:1a:03:0a:2e:93:
35:31:bc:03:bc:4b:3a:f8:f4:95:bd:87:28:66:4b:
da:e0:b0:c1:88:98:0e:4b:c6:30:fb:68:88:70:53:
7b:07:77:36:d4:49:f1:65:ab:02:72:a6:eb:02:a5:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:48:C1:ED:32:B3:04:58:14:58:BA:71:DC:01:0D:BE:85:36:ED:EE
X509v3 Authority Key Identifier:
keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/34332e3235352e31322e302f32322d3234203d3e20313331353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
75:1e:f7:78:67:f4:1d:4e:86:97:9a:7d:19:4d:82:2a:fe:e1:
8d:63:a0:3e:73:71:52:6b:e3:16:a0:d0:10:3a:f4:f1:7d:64:
7e:a6:85:6a:3b:85:d3:1c:cb:d6:5d:f0:20:e0:81:e9:79:57:
9b:03:b8:1f:c1:d6:27:7e:fd:6a:c0:37:1e:4d:33:b3:c0:f5:
ab:19:f7:85:fd:08:aa:74:8d:bf:92:3f:59:39:95:bc:17:5e:
78:51:0a:24:d6:27:f8:84:bb:34:74:e9:53:1f:63:bd:19:87:
c6:88:ea:1b:32:51:1e:3a:46:0b:db:f6:dc:2f:49:4b:46:56:
a9:59:09:f3:4c:57:f0:d7:d2:7e:21:1b:5f:60:5a:c3:04:bb:
87:d1:95:39:ed:ce:27:70:d6:ac:7a:e4:5c:b3:3a:1d:d3:d4:
c2:02:d2:21:9b:53:bc:c5:ac:73:d7:1a:55:42:0f:f5:ff:b1:
0f:14:77:11:57:b7:d7:c7:74:77:7a:9e:3c:bf:84:5a:a9:68:
bd:91:a1:80:35:6d:e2:a1:4b:00:ae:77:fd:fd:23:da:f2:29:
b9:2f:e0:0b:a2:95:4c:53:db:b0:5c:58:c4:a7:2a:69:07:57:
d2:fb:46:0f:3a:cf:fa:96:4d:99:bb:ca:d3:b0:fe:ca:4c:db:
bc:57:4c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:49 2026 by rpki-client