
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa
File: 3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=
Subject key identifier: 60:50:10:48:F2:4C:36:A1:E5:E5:25:88:A3:0A:CA:86:66:66:F5:A4
Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial: 493D7A5B0D56994AB0A9534A64BEA60719C4D893
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa
Signing time: Thu 30 Jul 2026 06:24:00 +0000
ROA not before: Thu 30 Jul 2026 06:19:00 +0000
ROA not after: Thu 29 Jul 2027 06:24:00 +0000
asID: 9678
IP address blocks: 211.76.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 02:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3d:7a:5b:0d:56:99:4a:b0:a9:53:4a:64:be:a6:07:19:c4:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Validity
Not Before: Jul 30 06:19:00 2026 GMT
Not After : Jul 29 06:24:00 2027 GMT
Subject: CN=60501048F24C36A1E5E52588A30ACA866666F5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:ed:2b:ab:66:72:b0:53:c0:34:83:58:40:
d3:1f:1f:b6:ad:e3:fe:e1:33:28:62:82:a3:33:80:
1d:8f:cd:f2:6d:74:bb:ca:66:27:cc:63:2e:47:87:
9d:9e:3d:ae:3c:1c:9e:1c:4a:ce:a1:72:fe:cb:b6:
58:df:cc:3b:ac:35:0c:6f:eb:ca:1b:7d:39:de:26:
84:5c:6f:c6:29:8b:46:8a:41:04:d7:b1:8c:5e:ba:
95:8c:63:80:74:c1:22:02:15:c4:29:81:f3:d3:bb:
b4:ce:44:49:3b:c2:cd:84:82:c5:25:0b:cd:d2:4f:
b8:ea:74:a1:51:42:8b:39:fe:24:72:29:74:39:94:
e8:46:bc:67:6f:d9:f1:8c:3d:ae:c4:70:0b:0e:e1:
f1:02:67:db:c8:45:1f:d5:f4:fb:bb:7b:c7:af:f3:
88:38:cd:28:a4:2f:50:b3:7a:8b:26:cd:ff:9b:54:
5b:a6:b7:5d:45:b0:91:a2:c0:dd:1d:36:c4:70:36:
14:63:64:7b:3c:c5:c7:fb:cf:91:72:e6:89:f7:9f:
c1:d4:4f:94:40:86:f8:a5:07:0e:1b:b7:b7:62:57:
6b:1c:f7:bc:cf:7e:03:b4:71:d5:37:08:52:d3:6f:
05:0e:c1:38:86:24:44:01:30:de:2e:eb:5b:74:71:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:10:48:F2:4C:36:A1:E5:E5:25:88:A3:0A:CA:86:66:66:F5:A4
X509v3 Authority Key Identifier:
keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.182.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cf:b9:e2:da:f5:21:7b:5c:1f:75:e5:34:1a:2c:1c:f3:c0:
c7:83:5b:83:00:8a:b0:87:2b:78:14:77:e5:85:d7:dc:b1:7f:
2e:2d:d7:38:c9:75:a6:ee:4c:f9:27:a2:20:3e:51:7e:ea:ec:
f5:9e:bb:5d:4b:1b:dc:17:57:31:2c:0a:f8:14:55:28:56:eb:
5d:83:47:e2:a9:48:b1:73:39:13:b4:0b:92:01:8a:1d:79:05:
20:8e:5f:a5:20:ba:d5:d2:23:88:4c:d2:99:48:6e:77:08:ce:
a5:30:66:69:be:25:07:1f:5d:3c:47:2d:9b:57:b1:ac:98:0d:
9f:ad:f0:1d:6d:1c:21:c6:b0:10:af:28:ac:2a:f5:67:3a:05:
f0:c4:94:ba:de:84:a2:fb:d7:e7:0b:fe:ec:53:8a:90:d3:c6:
c0:1a:9d:2b:1e:8c:b2:e8:72:8c:92:91:e8:57:a0:06:6a:d8:
00:34:2b:17:ff:b3:e4:3b:2d:49:6a:32:ab:2d:ec:93:34:a5:
67:a4:0f:4e:2c:3c:70:7a:70:5a:7d:c8:00:3b:fe:34:e1:98:
94:64:25:ad:91:8b:8f:75:6c:c0:fb:ed:91:a3:6c:44:34:f5:
90:10:a9:aa:9b:b3:ca:6f:1f:46:98:1a:84:5f:32:ba:a6:b5:
ba:d2:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 14:03:43 2026 by rpki-client