
$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3234382e302f32322d3232203d3e2031363539.roa
File: 3139322e3139322e3234382e302f32322d3232203d3e2031363539.roa (raw, json)
Hash identifier: MDpMAacch9+z/WAxkBcxekuEwf6CrXdm/XFHQ86TI1s=
Subject key identifier: 5A:1B:E0:28:EC:55:D8:CF:60:10:A9:7F:99:63:BD:79:4E:E7:FE:E3
Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial: 7C4990536D2A08641D1B411305C75053DCD68F44
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3234382e302f32322d3232203d3e2031363539.roa
Signing time: Wed 05 Aug 2026 02:04:00 +0000
ROA not before: Wed 05 Aug 2026 01:59:00 +0000
ROA not after: Wed 04 Aug 2027 02:04:00 +0000
asID: 1659
IP address blocks: 192.192.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 22:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:49:90:53:6d:2a:08:64:1d:1b:41:13:05:c7:50:53:dc:d6:8f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Validity
Not Before: Aug 5 01:59:00 2026 GMT
Not After : Aug 4 02:04:00 2027 GMT
Subject: CN=5A1BE028EC55D8CF6010A97F9963BD794EE7FEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:60:bd:89:9c:73:63:f7:74:72:d4:2f:8e:
39:6e:e4:b7:f6:99:3c:d7:7f:f8:4d:84:de:ca:55:
f0:15:0d:ef:6a:14:03:65:de:c5:fa:34:74:53:2a:
bb:9e:37:ae:3d:c0:b2:a4:1a:51:1b:a9:39:9b:9b:
3c:8c:1a:c9:3d:71:31:c5:d4:68:f4:db:e5:26:b2:
2b:51:74:42:18:41:81:40:ec:28:b4:d0:52:80:30:
31:94:7e:70:22:53:77:31:12:62:04:f9:3b:a9:7d:
a0:88:49:bb:c4:7e:01:f2:2a:55:59:7f:5c:85:b8:
20:5c:f5:77:9c:70:94:ff:2e:f6:7c:a0:54:50:f6:
c2:9a:0f:89:8a:3a:bf:8c:39:14:46:f8:35:2f:0c:
54:fb:b9:e0:37:12:3f:dc:cc:5e:73:fa:a1:73:c5:
d9:64:3b:8c:65:53:64:63:49:0f:f4:3c:b0:54:5a:
db:bf:cd:17:29:1c:25:8b:4d:3a:e8:52:0e:f0:f9:
79:ed:5a:db:0f:95:42:0b:76:18:a4:5a:fe:fd:52:
6c:5a:5c:36:d1:da:d8:8a:af:db:ee:bf:df:31:48:
67:b2:16:ff:e6:41:82:4b:3c:e3:8d:fd:b8:02:cc:
d0:c4:eb:85:78:e3:0d:74:5b:aa:b6:44:d3:d9:99:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:E0:28:EC:55:D8:CF:60:10:A9:7F:99:63:BD:79:4E:E7:FE:E3
X509v3 Authority Key Identifier:
keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3234382e302f32322d3232203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
95:73:6e:a9:3a:fb:5a:68:64:41:8a:ee:85:d3:e4:4c:05:1d:
16:ec:d8:ca:b9:35:81:f4:bc:21:ed:04:7b:10:80:2f:98:f7:
9e:98:9d:6d:c2:a8:c6:91:e3:cb:25:d2:df:0b:f8:3d:d9:e4:
2a:4e:b0:ec:34:02:bf:88:94:9f:01:ab:af:b6:4d:a4:7a:c7:
7b:d8:87:b3:c0:d7:6d:3a:34:3f:a8:8b:6d:b1:76:9c:38:88:
26:66:b3:99:d2:45:3a:cd:78:44:95:78:ac:92:9d:f2:5f:c9:
ce:11:78:c5:ac:56:a3:c5:d8:50:35:6c:b2:b1:65:03:5b:2b:
c8:95:70:7b:03:65:87:f6:fa:99:06:41:a7:37:8d:ee:78:11:
a6:a2:6a:b6:91:6b:62:8b:c3:74:ca:a7:04:1f:ab:4a:72:67:
a8:7b:9f:98:50:b4:ea:02:8a:46:74:da:05:42:7f:c8:8a:ff:
62:6e:95:b6:dc:cd:6e:b3:5f:67:10:cc:23:20:64:3d:18:c1:
cc:94:19:a4:e0:d3:9f:d2:7a:c1:1a:a6:c0:81:48:ed:11:96:
38:0c:7f:d6:60:57:08:97:bc:96:eb:05:0f:38:42:57:db:bc:
61:81:49:bb:03:a2:95:34:7d:10:00:ca:9e:76:45:d7:e2:29:
a7:af:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 12:34:43 2026 by rpki-client