
$ rpki-client -vvf rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa
File: 3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (raw, json)
Hash identifier: UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=
Subject key identifier: 48:E9:01:E8:A4:44:52:A3:67:43:7A:D1:B4:B9:D3:DB:F2:88:FE:72
Certificate issuer: /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial: 1D09B0052F5FCBF927090C1D0FDA92E8503D7D21
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa
Signing time: Mon 11 May 2026 17:09:45 +0000
ROA not before: Mon 11 May 2026 17:04:45 +0000
ROA not after: Mon 10 May 2027 17:09:45 +0000
asID: 131659
IP address blocks: 103.124.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:09:b0:05:2f:5f:cb:f9:27:09:0c:1d:0f:da:92:e8:50:3d:7d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Validity
Not Before: May 11 17:04:45 2026 GMT
Not After : May 10 17:09:45 2027 GMT
Subject: CN=48E901E8A44452A367437AD1B4B9D3DBF288FE72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:ed:4a:63:01:e3:a2:46:fd:e9:34:70:eb:
08:20:d9:cf:df:77:ac:3b:ce:6a:fe:bd:d3:cf:78:
60:bd:0c:0f:da:94:de:5e:ea:46:ec:43:6b:29:e5:
99:2f:9d:9d:15:7c:05:9e:74:0c:51:7f:e4:fd:8a:
43:98:05:cf:77:c0:d1:12:42:ca:7e:3a:ae:58:62:
b5:4a:45:7b:61:ff:d0:e4:47:5a:12:57:c2:10:08:
21:79:bf:1a:e1:df:2e:e9:b5:ef:fa:6f:65:a2:94:
cf:ff:73:51:a4:09:c4:f5:38:5b:7e:c6:45:2d:5c:
1e:0f:3a:c3:fd:cb:49:cb:a4:28:90:fa:ec:2e:88:
8a:61:fd:0b:19:a7:62:7e:f9:ae:00:67:5f:31:0c:
4e:f5:1e:78:93:ef:38:8b:cb:76:43:eb:60:06:94:
14:44:f9:55:d3:db:a2:62:e1:f5:91:7f:1b:4f:f0:
08:d2:24:ee:53:7c:a3:38:3a:f4:7b:96:1b:ab:b5:
03:e3:f2:40:fd:10:9f:1d:93:42:2e:db:06:5c:c9:
be:45:2f:ee:18:e2:61:c1:7f:cd:32:79:f8:74:b9:
e0:44:14:6d:e7:da:82:02:8f:53:03:50:13:de:8d:
08:c6:5b:bc:01:80:ae:34:cf:f9:5a:73:06:92:ac:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E9:01:E8:A4:44:52:A3:67:43:7A:D1:B4:B9:D3:DB:F2:88:FE:72
X509v3 Authority Key Identifier:
keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.252.0/22
Signature Algorithm: sha256WithRSAEncryption
18:7d:e7:f2:f1:e6:76:da:95:da:b6:12:7b:ce:14:1c:e8:c5:
db:ca:2b:7d:a5:d4:8c:13:73:d0:09:71:ca:4d:3d:ab:26:55:
73:fd:d9:74:64:32:3f:77:52:f2:6c:ce:e1:75:64:25:00:ce:
43:3a:d5:bb:2b:bd:08:be:41:be:b0:5f:ab:9a:f5:a3:c5:74:
7f:e7:8a:85:7d:b3:6d:03:bd:7d:62:a9:fa:9a:90:48:c2:0e:
db:a1:7e:c3:29:40:f0:09:bb:01:04:ee:ec:80:c7:e6:00:15:
e1:b1:df:4d:24:8e:77:d9:ad:71:f7:85:0b:c8:5a:68:3a:8d:
c9:6c:bf:08:19:0b:61:9e:2d:dc:8f:1c:db:49:8c:02:91:55:
cd:db:ad:ab:81:4d:15:02:84:05:ce:80:5d:56:cd:0b:ef:a6:
3f:08:4c:25:8a:c5:96:f5:a5:a5:a0:10:7d:7b:8a:81:72:6b:
bf:7d:f2:ef:e3:c1:a3:68:01:de:01:6a:4f:23:73:e3:f6:7a:
bc:c1:11:16:2f:f4:e8:e4:06:d6:71:d5:61:98:46:60:76:37:
6b:03:6f:b9:75:3f:58:3d:89:35:0c:40:ad:1f:b9:0f:54:96:
21:73:f5:25:b9:73:e3:db:62:a5:34:ae:5a:e1:cb:a0:0a:3c:
b3:9b:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:45 2026 by rpki-client