
$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa
File: 34332e3234302e3130382e302f32322d3234203d3e203234313538.roa (raw, json)
Hash identifier: jgSZl/bfvxgEOJvzV0oo2+KlY4i3qBqFvCMdnZLKmpQ=
Subject key identifier: 86:2B:15:E3:DF:61:37:18:1E:F3:21:7A:77:42:43:A0:B7:A6:27:9E
Certificate issuer: /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial: 4ADBD5839D8D1B54A96D96D6551B526CF667FDA4
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa
Signing time: Mon 11 May 2026 16:13:42 +0000
ROA not before: Mon 11 May 2026 16:08:42 +0000
ROA not after: Mon 10 May 2027 16:13:42 +0000
asID: 24158
IP address blocks: 43.240.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:db:d5:83:9d:8d:1b:54:a9:6d:96:d6:55:1b:52:6c:f6:67:fd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Validity
Not Before: May 11 16:08:42 2026 GMT
Not After : May 10 16:13:42 2027 GMT
Subject: CN=862B15E3DF6137181EF3217A774243A0B7A6279E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:23:5d:3c:85:0d:db:aa:c0:c5:f9:4f:ee:87:
1c:03:d5:b8:a3:c6:ed:7a:3a:bd:1d:04:9b:c4:41:
bc:e9:85:50:66:4d:09:96:e8:7f:19:65:ff:35:a7:
22:f4:f2:b7:bf:61:5b:ff:cc:44:b3:db:bc:7e:1f:
f2:4b:d8:38:f6:d6:da:bb:a5:cd:1c:fd:38:ee:f5:
44:26:1b:ef:15:bd:c5:da:e7:60:04:f4:20:a1:d2:
d2:86:7d:cd:4c:87:97:77:19:bb:d1:be:4a:cf:9d:
fd:b8:a2:1d:25:7b:00:d5:7d:20:3e:40:07:f8:43:
0e:37:38:7e:21:8b:59:97:89:31:0d:22:71:86:81:
40:93:7d:d6:9f:74:00:11:2e:3c:f3:0b:de:ec:1d:
a2:8b:df:19:92:4a:c2:08:cc:69:5a:73:a5:7e:28:
64:e1:f4:a4:84:4f:89:b3:5b:51:de:8d:83:22:11:
08:b7:72:7f:bf:16:0f:8b:f0:da:f9:25:d2:af:0d:
9c:26:2e:2f:b0:8d:33:82:ef:93:a1:d9:d8:be:4c:
7e:2b:cf:15:a1:10:b5:39:e4:7f:41:98:cf:82:9a:
6f:38:cf:c8:7f:a9:52:7d:34:30:d6:5b:0e:b6:0d:
1a:3b:24:df:fd:13:0f:7a:bd:9a:93:69:71:44:18:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:15:E3:DF:61:37:18:1E:F3:21:7A:77:42:43:A0:B7:A6:27:9E
X509v3 Authority Key Identifier:
keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.108.0/22
Signature Algorithm: sha256WithRSAEncryption
36:39:8b:ac:07:98:5e:84:9e:8a:9a:d4:bc:80:a3:9d:ec:2e:
1e:32:b7:63:bf:55:f4:16:e1:c1:95:58:52:9c:af:36:2a:b1:
01:2a:ea:d2:8e:57:5a:54:9b:97:a8:1d:d7:fb:11:c1:04:b2:
0b:c3:78:91:a4:c8:4e:d3:89:d9:2d:2d:45:01:e3:d8:7b:c3:
24:42:ca:6c:1c:b1:96:f4:d2:17:69:2f:8c:f2:62:6b:80:fd:
72:95:4a:97:12:66:19:76:73:20:e4:e6:57:b6:0c:96:08:be:
99:3e:df:03:a2:ee:32:70:ec:28:42:98:a6:61:ef:5d:39:de:
9a:91:d8:54:2d:cc:73:7b:c4:ea:39:09:b9:81:83:83:72:10:
03:28:49:69:fd:20:8a:6d:7a:dc:2a:e5:2c:5e:31:c2:ee:8b:
1c:88:54:9a:90:23:32:da:62:0e:00:ee:f2:58:ef:d2:86:cf:
82:1f:6c:c4:7b:00:57:47:f1:0b:53:e2:7d:be:e8:04:b5:86:
dc:13:49:03:c6:b2:78:78:98:b1:72:3c:7e:3a:81:f5:42:51:
15:70:ed:24:ad:b7:b3:8b:d8:75:a6:55:2a:0e:5b:63:53:be:
d9:ed:16:f0:1e:38:bb:ba:6c:25:62:89:b7:72:1a:a0:f5:1c:
62:a0:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:23 2026 by rpki-client