
$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/3230322e3132362e36342e302f32302d3234203d3e203233363735.roa
File: 3230322e3132362e36342e302f32302d3234203d3e203233363735.roa (raw, json)
Hash identifier: xFZEcb1Fw2/MAZxDxH/3wq6F1a0AY71y22CkSbZ45UA=
Subject key identifier: 09:B1:6F:5D:C6:4C:6D:AA:54:01:2E:EE:24:7B:56:34:52:E6:82:EB
Certificate issuer: /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial: 3FCDAF94B41F4770EB97810BC01C5634F5589B9A
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TSMC/0/3230322e3132362e36342e302f32302d3234203d3e203233363735.roa
Signing time: Mon 11 May 2026 17:27:35 +0000
ROA not before: Mon 11 May 2026 17:22:35 +0000
ROA not after: Mon 10 May 2027 17:27:35 +0000
asID: 23675
IP address blocks: 202.126.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cd:af:94:b4:1f:47:70:eb:97:81:0b:c0:1c:56:34:f5:58:9b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Validity
Not Before: May 11 17:22:35 2026 GMT
Not After : May 10 17:27:35 2027 GMT
Subject: CN=09B16F5DC64C6DAA54012EEE247B563452E682EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:04:6e:5d:b3:f1:f5:b9:41:ed:55:c6:88:
4d:c8:6c:b3:cf:19:af:e9:44:74:de:1d:5f:63:84:
f1:6e:15:1e:1f:53:65:9d:9a:73:71:6b:8e:26:f3:
0f:12:42:9a:1a:43:07:3e:06:3d:db:28:6f:8b:04:
26:e9:6b:d6:fe:b6:2c:9d:85:28:6d:dd:73:2f:79:
fd:7d:7d:85:31:57:dd:e2:b0:3b:fd:58:c6:9b:cd:
e0:bc:91:07:09:6f:dd:50:00:c1:91:45:5f:9e:ef:
23:8b:f5:79:37:57:05:3d:5d:93:de:6d:e0:60:80:
ba:27:13:66:49:d6:e8:b4:96:69:5f:63:cc:7c:a7:
79:e3:fb:22:74:6d:5e:e7:bb:24:4f:ae:54:0e:9b:
c3:ac:91:6f:c8:94:2b:f7:20:53:cd:27:6c:cd:d5:
64:ea:57:c0:9b:d8:f5:d6:1f:8a:24:33:d3:bc:8c:
fe:70:48:90:41:b7:db:f2:aa:a7:15:d8:8b:74:02:
88:86:e7:df:88:f6:b5:8b:88:06:cc:61:e9:e7:69:
49:3c:85:08:65:9e:46:3e:16:6a:38:d7:13:bc:e3:
7d:df:1e:15:cb:cd:a0:11:a8:3f:dc:81:9e:54:71:
e1:8f:f4:bb:38:3a:4c:6c:ff:e4:39:a3:25:f0:cb:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B1:6F:5D:C6:4C:6D:AA:54:01:2E:EE:24:7B:56:34:52:E6:82:EB
X509v3 Authority Key Identifier:
keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/3230322e3132362e36342e302f32302d3234203d3e203233363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.126.64.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:eb:9a:e2:a6:8a:5c:98:85:e0:a4:bc:e3:97:85:77:d9:07:
66:86:6e:36:70:21:c3:74:f8:38:df:18:b5:a0:6e:87:4e:51:
a1:9b:86:f8:2b:86:9c:b5:cc:88:ae:40:42:b5:51:ec:d3:7d:
bb:f8:c0:08:e6:c5:75:63:84:b0:20:8f:6b:23:df:c4:7d:0c:
73:04:f3:2d:b0:62:6c:43:03:72:02:a6:8d:3c:9b:0d:3e:29:
9a:d8:3d:bd:ab:7a:e7:94:b5:e5:f3:52:19:b9:60:a6:6d:a6:
05:58:72:bf:54:ed:b1:d6:5d:10:30:28:37:a8:a8:c4:5c:6a:
ee:68:d5:35:d3:27:c7:f2:2c:8e:82:28:97:58:93:ee:78:1a:
f3:0f:ce:cb:a5:6c:bf:e3:f2:04:c2:1b:0e:a2:25:56:83:bb:
e0:53:8e:75:ba:93:e1:48:0e:d2:be:a2:80:bc:96:00:cb:ac:
fb:4e:06:be:63:e8:0f:4b:42:a4:e9:f2:ff:b2:86:9a:91:b6:
2a:67:e6:6c:ea:9b:90:c6:e3:65:d3:63:85:1f:48:04:e5:57:
59:14:98:75:3a:59:88:66:3b:05:f6:bd:54:c4:f4:cd:f5:04:
7a:d9:04:f4:fc:e0:e6:70:9a:24:14:aa:59:36:20:57:27:b2:
17:77:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:24 2026 by rpki-client