
$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa
File: 3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (raw, json)
Hash identifier: F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=
Subject key identifier: BE:D1:54:E3:26:0F:36:E4:2E:5E:B4:C7:BF:41:97:B3:E5:37:28:2D
Certificate issuer: /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial: 67DF7C2E9E370693E0134ABC27CF97B489B1F2D8
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa
Signing time: Mon 11 May 2026 17:59:05 +0000
ROA not before: Mon 11 May 2026 17:54:05 +0000
ROA not after: Mon 10 May 2027 17:59:05 +0000
asID: 201217
IP address blocks: 103.220.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:df:7c:2e:9e:37:06:93:e0:13:4a:bc:27:cf:97:b4:89:b1:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Validity
Not Before: May 11 17:54:05 2026 GMT
Not After : May 10 17:59:05 2027 GMT
Subject: CN=BED154E3260F36E42E5EB4C7BF4197B3E537282D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:74:8f:d3:c7:6e:46:dc:40:fc:ef:56:fa:
c2:a8:d1:3b:4b:3c:97:a6:57:2c:2a:c2:51:0e:da:
49:5d:10:e5:d7:94:cd:21:7b:a7:4c:ab:e3:62:73:
05:c5:07:b6:7d:d0:64:2d:24:22:70:54:7e:e8:ec:
be:49:a9:d1:af:6c:fa:79:2a:44:5d:5d:ad:ba:0c:
9c:09:29:f9:59:a1:69:3c:2e:49:e6:25:27:11:66:
70:88:67:df:ed:3e:7a:13:92:1e:f3:6d:ac:19:88:
f3:e8:50:d3:01:bb:82:d8:a9:f9:08:73:6c:c0:b8:
28:60:9d:2b:eb:0a:ac:fd:e4:ec:29:e0:56:48:31:
f8:b7:e0:2a:d9:6a:83:86:74:52:7f:c3:b8:33:6f:
a1:42:6e:7c:03:f9:ae:12:fc:fc:d5:90:b9:31:a2:
ad:52:cb:84:6b:c7:ea:ec:7e:b1:5d:80:6b:3b:c5:
fd:d5:8a:b0:54:b5:92:a0:d5:c8:6b:41:22:6a:66:
ba:27:fb:c9:91:27:ee:56:ab:2c:e3:cc:16:d4:17:
cf:92:9f:05:04:2b:ea:3d:b0:3f:d3:46:b8:00:12:
88:af:02:bf:eb:1e:13:27:08:8e:d4:6c:df:fe:cd:
19:7c:a9:75:bd:8c:54:54:88:b6:4f:bf:c5:9a:72:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:54:E3:26:0F:36:E4:2E:5E:B4:C7:BF:41:97:B3:E5:37:28:2D
X509v3 Authority Key Identifier:
keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.220.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fd:b5:26:37:8e:1a:9b:c9:96:18:84:f2:42:d1:70:e8:fb:
06:d3:55:e7:95:d7:ed:c3:00:69:b3:49:41:36:1c:5f:e3:59:
91:26:73:ee:66:90:fc:02:d1:25:65:a1:5c:8b:a7:98:6b:66:
00:4e:3e:f0:d8:c6:26:1e:5f:aa:4c:de:b7:c8:c8:3b:0e:5e:
e4:59:8e:79:ec:f9:10:3b:53:5e:81:f2:f4:ce:19:1a:e4:69:
31:5b:5d:9b:09:d6:82:3e:69:6c:57:dd:98:bc:e0:6c:ac:31:
ad:63:29:ec:74:7e:30:1c:73:2a:2e:ed:75:ba:44:5f:83:83:
1a:7e:88:7d:8f:eb:66:a0:48:94:df:c6:55:f0:28:87:dc:72:
bf:d6:97:1d:f9:db:65:ed:23:5f:6f:31:7b:ff:3f:f2:bb:d2:
cf:94:62:8e:3d:54:4a:d1:09:a3:d3:d6:64:e7:f3:2f:38:ef:
d3:38:61:a7:c0:db:aa:d6:0f:c2:3f:e2:e2:b1:7b:9a:a1:55:
bb:35:2b:c0:ac:91:d9:ce:49:73:3a:d6:d8:74:ee:86:c9:59:
72:e1:0b:b3:b2:55:39:d4:3f:58:63:d5:c1:88:13:fc:c3:27:
89:0b:42:fa:59:1c:dc:ac:96:17:6a:56:dd:12:99:44:88:86:
a9:47:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:01 2026 by rpki-client