
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa
File: 3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier: 1subxVblRJYfLj7+ETzdhL0Jbf7v/OU0kXnuwp5/gAE=
Subject key identifier: A2:C9:C3:10:0D:0C:95:68:61:2E:B2:2A:D0:AA:A1:39:16:D6:EF:28
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 4648663B211362F3DEE9DEE172182DCB0D266873
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa
Signing time: Mon 11 May 2026 17:55:21 +0000
ROA not before: Mon 11 May 2026 17:50:21 +0000
ROA not after: Mon 10 May 2027 17:55:21 +0000
asID: 1659
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:48:66:3b:21:13:62:f3:de:e9:de:e1:72:18:2d:cb:0d:26:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:50:21 2026 GMT
Not After : May 10 17:55:21 2027 GMT
Subject: CN=A2C9C3100D0C9568612EB22AD0AAA13916D6EF28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:37:ec:ab:91:f2:71:94:e4:ec:b1:64:f1:
20:04:aa:c7:ff:1c:27:76:14:4e:d1:ee:81:56:f9:
f3:3b:20:7d:38:52:32:69:f9:66:d7:99:0f:bd:2d:
6b:e1:09:80:3a:d6:ce:36:1c:6a:45:8b:43:a1:aa:
74:34:e9:91:04:df:16:51:0a:ee:31:9a:30:52:58:
97:d4:3b:7d:24:9e:76:bd:d0:32:1d:a0:11:aa:7f:
1c:c6:ec:ad:59:5f:a2:ba:89:ec:af:74:7a:25:1d:
08:01:26:c3:da:49:8f:d6:d2:7c:21:da:6d:e9:28:
b3:56:4e:db:3f:db:7a:25:a7:b6:d1:26:4c:9a:37:
6a:b8:ea:24:f8:89:7f:ef:36:98:26:24:bb:21:c5:
c7:98:a8:21:6f:97:b9:cb:c9:e0:c9:3e:17:73:37:
1c:02:83:fe:05:ac:64:0f:09:d5:bc:e7:d4:58:17:
b8:8a:e1:7e:b4:59:15:5c:cb:a1:ed:f5:55:c5:43:
b7:26:51:e8:8d:ed:32:3c:01:1f:d4:81:68:82:76:
41:69:47:e4:0a:9f:be:f3:bc:e4:a6:40:90:f7:ae:
b0:73:6d:c3:d1:4e:ed:f6:3a:a1:84:f8:fd:68:0b:
57:a7:c4:b2:c5:ca:8e:8f:d1:b0:0a:b5:69:ce:eb:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:C3:10:0D:0C:95:68:61:2E:B2:2A:D0:AA:A1:39:16:D6:EF:28
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4d:2b:58:bc:03:27:fb:4c:0f:9e:be:66:d4:78:e0:d9:01:
13:d9:1c:ce:14:c3:7d:47:c3:0d:9d:e0:f2:4f:a6:8f:d3:f4:
99:be:b4:27:0f:62:f2:c9:6e:75:64:d4:a5:a9:55:f6:d2:83:
24:47:01:e2:ed:49:5a:59:29:77:77:10:17:8d:9f:d3:b8:8b:
e5:e8:ee:85:d4:16:0c:5a:35:d0:3d:38:f5:c9:4b:be:22:d6:
18:29:7a:0b:c0:9c:f0:5f:a9:9b:9c:8e:64:5e:f3:19:b4:8c:
6f:5c:df:ec:17:57:ee:2b:13:e5:ad:f7:e0:47:d4:5f:bf:12:
0a:30:37:58:e8:fe:e7:7e:db:c6:82:5e:c8:5c:40:8a:5d:88:
2d:72:a0:31:dd:18:23:77:0c:e2:54:ee:cf:cc:2a:7a:3e:91:
14:f6:28:8a:27:da:17:dc:94:1b:7c:3d:28:84:55:44:47:a4:
a2:d9:9e:95:90:85:2b:50:8b:47:3a:a5:a3:f9:be:d4:2a:e7:
43:65:1f:7b:ea:b0:2a:df:93:82:85:fe:67:79:7c:d6:9f:a8:
e6:b6:e4:ca:0f:b3:ce:78:20:c7:52:52:86:fa:ab:f1:ba:8a:
ad:f2:6e:81:8e:c8:a6:b7:e4:78:89:6f:a8:58:13:8b:6c:30:
3a:17:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:33 2026 by rpki-client