
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa
File: 3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier: WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=
Subject key identifier: C5:32:7B:DF:5C:54:D4:C0:75:99:D3:5B:35:C8:9C:B7:2A:14:54:1F
Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial: 31A9820355342F26F816D5527FB09D4B024F9D55
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:56:33 +0000
ROA not before: Mon 11 May 2026 17:51:33 +0000
ROA not after: Mon 10 May 2027 17:56:33 +0000
asID: 9678
IP address blocks: 211.76.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a9:82:03:55:34:2f:26:f8:16:d5:52:7f:b0:9d:4b:02:4f:9d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Validity
Not Before: May 11 17:51:33 2026 GMT
Not After : May 10 17:56:33 2027 GMT
Subject: CN=C5327BDF5C54D4C07599D35B35C89CB72A14541F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:37:c6:02:2d:53:46:74:77:4e:f6:83:9a:
03:1f:1b:f9:ec:38:95:65:b1:61:4b:27:72:45:3d:
cf:52:f6:71:7d:67:8c:10:f1:01:eb:7b:d5:c6:06:
63:6e:54:9b:c7:ae:12:ad:5c:0c:4d:d4:6a:bb:8b:
da:4d:37:59:4e:5d:77:89:99:68:34:d7:64:4e:7e:
0f:fa:e1:3b:9a:4b:25:6b:0d:d3:47:df:d0:bc:a2:
9f:ca:5e:da:09:07:3a:99:aa:a5:da:ab:9f:e8:62:
25:55:71:e5:7e:ff:e8:72:de:b1:03:eb:4b:a8:2c:
f0:bf:2e:21:69:44:f8:78:c2:67:68:ed:14:6a:91:
22:52:8e:db:5d:19:19:2d:a8:97:92:4d:ae:fb:72:
18:1e:7c:67:d7:b0:d1:9a:96:03:84:9e:23:3f:18:
40:37:83:0e:b0:d7:dc:55:29:e5:81:75:01:04:86:
5b:4d:81:d2:97:3a:64:56:34:fd:a0:a2:7f:e5:a3:
b4:a6:3b:89:51:b6:76:ea:a8:8c:53:1d:00:ff:dd:
77:fc:b2:53:1e:9c:df:d7:c5:bf:cc:b8:99:39:de:
6f:6e:6a:d6:a4:d9:c2:33:ff:19:a4:fc:37:8d:d5:
79:ea:df:72:09:f7:5c:f8:be:0b:ff:90:eb:89:6f:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:7B:DF:5C:54:D4:C0:75:99:D3:5B:35:C8:9C:B7:2A:14:54:1F
X509v3 Authority Key Identifier:
keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.76.183.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4f:3b:0b:99:ba:bb:ad:18:6d:ad:4f:af:7f:23:d1:cc:f7:
72:a2:06:0d:eb:10:43:0c:01:fc:00:0a:7e:1d:a2:b1:e6:35:
32:bd:5e:37:26:fc:c1:38:3d:9d:cd:b6:e1:19:2d:2d:b5:3f:
f9:3e:47:92:67:ab:72:c3:c7:e5:7e:0f:51:10:6e:04:86:c7:
50:8e:2c:d4:2a:72:43:c7:84:ef:f9:10:55:d1:fb:0b:ce:2d:
a8:9a:93:17:db:f1:72:75:cb:30:e1:62:8c:fe:a4:62:c4:59:
c2:86:97:b6:f5:ca:b0:fb:91:f1:99:4c:de:d2:a0:11:90:d5:
9c:da:f7:d5:4f:5c:a1:25:eb:d2:df:fe:67:61:bf:c6:4a:63:
0f:fb:62:d5:fa:54:db:9d:de:fc:35:18:ec:e7:65:dd:be:79:
62:24:5d:16:7e:d6:39:77:59:b6:fa:5a:ee:76:61:b3:4b:b1:
49:8a:93:64:52:bb:df:93:7c:c3:3e:39:57:4f:38:6c:88:ba:
00:f3:89:a9:51:aa:c6:b5:5e:53:f9:94:01:e9:d0:3a:bf:3f:
95:1a:12:7c:30:65:42:43:b2:10:ce:6d:57:2b:05:2f:b7:c6:
d0:57:b1:90:25:be:38:c8:23:6a:0f:2c:0c:ee:99:82:1f:2c:
a7:3a:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:14 2026 by rpki-client