
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa
File: 323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa (raw, json)
Hash identifier: +XlZWgPESh7T8dJ/d4hWdGkO/ZiiSBPRQBli6fBJ4eA=
Subject key identifier: 4F:FC:DA:F3:8C:81:54:86:95:02:A7:49:2E:17:3F:84:C7:0A:FC:35
Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial: 74380B450C894D81A447B285A527DEB4BCB1B7E2
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa
Signing time: Mon 11 May 2026 17:56:32 +0000
ROA not before: Mon 11 May 2026 17:51:32 +0000
ROA not after: Mon 10 May 2027 17:56:32 +0000
asID: 9678
IP address blocks: 2405:fbc0:112::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:38:0b:45:0c:89:4d:81:a4:47:b2:85:a5:27:de:b4:bc:b1:b7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Validity
Not Before: May 11 17:51:32 2026 GMT
Not After : May 10 17:56:32 2027 GMT
Subject: CN=4FFCDAF38C8154869502A7492E173F84C70AFC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:39:bc:dd:b0:77:77:f5:12:4e:51:e7:53:
56:12:55:79:cd:c0:38:73:99:23:db:a2:7a:61:88:
9a:28:02:35:cd:1b:0b:72:01:54:4c:fd:b8:7f:db:
51:72:8d:91:13:ad:a8:ea:76:58:a3:de:1f:22:dd:
72:01:73:d9:98:de:85:f9:6f:bc:91:8c:14:e9:73:
ce:1e:23:bc:bd:a1:77:bf:33:cf:17:bd:a9:94:e4:
f3:ab:ae:cb:05:4e:f5:4d:5c:19:f7:96:8f:7f:4e:
e9:aa:4b:dd:97:7a:e1:a6:c3:27:4b:4e:3c:24:b3:
f0:4c:f7:68:ca:d4:72:8d:d2:9b:5e:1f:1f:7f:9e:
d6:e3:6d:2f:16:47:90:ba:6c:b6:60:42:4f:fd:72:
07:ef:c4:73:b5:cc:8b:45:0f:df:87:3d:86:0b:a2:
db:d8:0d:2f:26:61:76:c3:67:de:1f:67:45:dc:00:
15:b7:9b:3c:6b:d5:d3:30:4b:3f:82:32:7a:21:4c:
8d:18:21:78:ac:2c:06:73:f6:fd:ed:8b:e7:5b:54:
2c:78:20:89:02:1c:21:31:4e:5d:76:cd:e4:b0:8b:
ca:2e:17:fc:3f:ab:1a:9d:d0:1f:93:ac:b4:1f:ba:
17:a5:4a:27:1c:93:1d:77:fe:01:c7:a4:da:75:0c:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FC:DA:F3:8C:81:54:86:95:02:A7:49:2E:17:3F:84:C7:0A:FC:35
X509v3 Authority Key Identifier:
keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/323430353a666263303a3131323a3a2f34382d3438203d3e2039363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:fbc0:112::/48
Signature Algorithm: sha256WithRSAEncryption
7d:3f:8d:00:57:43:9f:c6:2d:15:73:58:df:9b:36:1d:f8:a0:
d0:48:3a:2f:34:44:50:bd:b8:29:c7:e9:e7:04:2a:28:0e:22:
fc:e7:48:0e:4b:dc:f4:7e:eb:24:4f:1b:e1:76:83:e4:b1:82:
7c:ee:99:08:a3:cb:1d:81:46:6e:5c:12:3b:e9:89:2f:71:c6:
9f:47:f1:f0:6e:b9:50:d2:a5:c3:7a:76:50:2b:b4:82:8a:98:
48:07:2b:b6:df:b8:a0:31:d7:95:a1:c1:89:31:21:be:b7:79:
e3:1f:96:a7:ef:82:27:7e:c8:ca:ce:67:9d:8c:a9:10:5e:58:
df:d4:ab:73:42:b7:8c:a2:4d:6b:05:05:e6:77:1c:2b:0b:e4:
cd:4c:51:21:e2:a5:57:07:cc:cf:d2:76:60:bc:11:40:93:95:
4f:53:56:11:f8:20:d6:af:c6:a2:91:9b:44:91:f4:62:34:b8:
5a:50:61:83:1d:a7:07:8b:6e:d2:52:27:99:ed:86:8f:3a:cd:
a3:66:a6:9b:f7:8f:65:a3:31:75:a0:85:cb:6c:78:95:48:15:
04:34:c1:f0:b3:f1:2b:c5:7c:9e:58:ba:3a:c6:f5:e2:29:3e:
b3:c4:12:df:dc:17:b1:17:22:0b:66:57:0b:46:87:c2:8e:38:
da:38:c3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:22 2026 by rpki-client