
$ rpki-client -vvf rpkica.twnic.tw/rpki/TGM/0/3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa
File: 3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier: OqVP0uLmbV0LsJpz9XRBwsukxxQL93Tm+zzp3azYLeM=
Subject key identifier: 65:D6:B2:2F:65:23:9C:A6:3C:A6:36:D6:C1:39:BA:C5:60:69:95:B9
Certificate issuer: /CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
Certificate serial: 688D7080FC24E3308F59E21A13CE451E806DC7FC
Authority key identifier: BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TGM/0/3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa
Signing time: Mon 11 May 2026 17:37:54 +0000
ROA not before: Mon 11 May 2026 17:32:54 +0000
ROA not after: Mon 10 May 2027 17:37:54 +0000
asID: 131642
IP address blocks: 103.180.20.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl
rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8d:70:80:fc:24:e3:30:8f:59:e2:1a:13:ce:45:1e:80:6d:c7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD01FFE5AD287999E33C4586E91E6342ACE3C10B
Validity
Not Before: May 11 17:32:54 2026 GMT
Not After : May 10 17:37:54 2027 GMT
Subject: CN=65D6B22F65239CA63CA636D6C139BAC5606995B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:85:e5:1b:85:fb:4d:ad:65:89:0a:ca:30:
6e:40:18:64:8a:0e:62:b5:4a:83:35:8f:51:e8:1d:
14:8b:0a:e4:3b:01:fc:02:28:eb:dc:43:6e:94:b1:
d8:79:ef:9f:00:3c:9d:35:7d:b9:7b:b1:97:48:e5:
96:1e:c4:22:22:51:25:bf:25:56:62:0f:92:ee:97:
b4:33:46:33:20:48:3e:f6:37:82:eb:6a:9e:c6:62:
67:c6:b6:db:df:6c:f4:f4:69:d2:d1:42:b1:85:e7:
ca:5f:af:57:af:81:82:d4:60:63:a3:7c:c2:04:fb:
e5:e1:28:4a:7c:42:d4:4e:e0:af:75:3f:d0:c5:b3:
6d:36:2d:b7:cd:83:e7:64:f8:bc:7b:dc:aa:20:86:
02:c9:19:7e:8b:03:38:02:e8:6a:e0:62:4a:4a:0f:
93:ed:31:e8:d2:16:0b:29:ff:70:3d:15:93:26:0d:
6c:aa:b0:c0:66:3b:55:24:de:f9:96:c0:09:78:79:
98:d5:6c:03:a2:ab:24:4a:3b:a2:e1:80:74:7d:09:
9e:34:ac:44:d4:4b:81:2c:26:c7:de:9f:3b:6e:cf:
9d:cb:f8:27:d3:3d:2b:cd:7c:ef:a8:6e:61:45:d2:
98:88:c3:64:e5:e6:51:5a:4d:0c:67:34:92:cc:b2:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:B2:2F:65:23:9C:A6:3C:A6:36:D6:C1:39:BA:C5:60:69:95:B9
X509v3 Authority Key Identifier:
keyid:BD:01:FF:E5:AD:28:79:99:E3:3C:45:86:E9:1E:63:42:AC:E3:C1:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TGM/0/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD01FFE5AD287999E33C4586E91E6342ACE3C10B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TGM/0/3130332e3138302e32302e302f32332d3332203d3e20313331363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.20.0/23
Signature Algorithm: sha256WithRSAEncryption
58:a2:a1:dc:63:e4:c1:0a:32:2b:f8:13:52:21:c2:00:cc:72:
16:36:9e:ca:c1:20:fa:e3:6f:95:f6:ed:ec:69:ed:ef:41:cb:
41:79:f2:57:20:65:00:32:d6:f5:c3:a4:27:2f:a5:b9:6c:07:
fd:23:e5:ad:ae:bc:b5:f3:dc:24:bf:a4:54:dc:60:c9:74:b8:
0c:f0:e3:d0:e9:d0:15:9f:e2:ba:09:1d:ad:83:80:72:c2:75:
43:bc:02:bc:1b:eb:8a:7d:7e:e2:7a:e6:5f:34:58:42:9f:64:
2f:ea:c6:1c:a8:10:51:68:c9:eb:81:ad:51:17:2b:cf:8c:c6:
5d:ac:68:59:8c:ce:e5:5c:8a:a2:ab:8c:67:5d:68:1c:ca:2e:
96:c5:c7:89:a6:c4:ff:cb:e1:84:59:7d:87:e3:5f:7c:c3:b2:
47:a2:e8:dc:3d:50:b5:35:7f:66:0b:af:0d:c0:db:c5:ac:04:
ff:1d:ec:8a:1a:98:7d:75:6c:e1:d6:8e:7b:9f:d7:c9:5e:3d:
c0:4b:7a:20:f9:dc:29:dd:78:ba:f2:7d:d0:ba:bf:a4:37:7f:
15:ad:fb:4b:19:b4:b1:ea:0a:32:2f:f5:8b:27:ce:57:31:d4:
ad:d0:60:18:7d:79:43:16:84:19:34:5b:4d:f6:53:3e:76:88:
22:2a:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:11 2026 by rpki-client