
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234302e302f32322d3232203d3e20313331363434.roa
File: 3131392e37352e3234302e302f32322d3232203d3e20313331363434.roa (raw, json)
Hash identifier: lJhqw71bdPk8VaBPdzCBtBxk2qaQvxtwE1+i+VWYZcE=
Subject key identifier: 67:5C:5A:8D:08:F9:F5:5E:96:28:FC:47:1A:30:D0:B5:C4:86:D1:31
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 65EF5877BF617B5CF7B433DFE11EA514F1D5B8AB
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234302e302f32322d3232203d3e20313331363434.roa
Signing time: Mon 11 May 2026 17:33:02 +0000
ROA not before: Mon 11 May 2026 17:28:02 +0000
ROA not after: Mon 10 May 2027 17:33:02 +0000
asID: 131644
IP address blocks: 119.75.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ef:58:77:bf:61:7b:5c:f7:b4:33:df:e1:1e:a5:14:f1:d5:b8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:28:02 2026 GMT
Not After : May 10 17:33:02 2027 GMT
Subject: CN=675C5A8D08F9F55E9628FC471A30D0B5C486D131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:9e:b0:12:9c:a8:81:ce:34:4d:fb:e5:f6:
9a:2e:ae:c8:24:c6:f7:29:d3:24:71:03:31:eb:58:
d3:d0:c0:5e:18:7e:d2:4d:48:50:2b:93:66:a8:69:
09:77:d6:94:cd:ea:92:74:29:16:e6:28:ca:a7:ab:
bb:a7:9b:76:44:d9:fc:8e:b1:a9:2e:c2:0e:6c:5c:
76:d0:90:db:62:fa:db:42:92:96:d4:30:62:32:ad:
fc:9c:1f:95:9d:0f:b8:dc:59:af:c8:7b:de:7d:fd:
7a:c9:a4:88:d6:d2:84:ee:c4:e1:74:d1:89:a1:98:
d5:55:46:93:00:9a:64:b3:fb:b2:18:a9:37:ee:6d:
6d:7d:f0:52:aa:ee:7d:11:38:bd:8d:df:48:1e:9e:
a4:fd:07:31:41:14:91:6b:5a:08:f2:a6:55:c0:07:
67:6f:aa:c7:32:b0:ca:e6:96:60:98:08:62:72:18:
80:94:d5:a5:d8:42:b6:d0:a5:6b:7b:a7:56:d6:c3:
d3:7e:7e:42:08:4e:21:49:da:16:26:0d:6a:88:f7:
05:93:1b:8e:e6:1d:b9:27:7a:1a:38:7d:7e:31:e1:
08:d8:f5:b3:88:1a:5a:9a:ae:4c:e5:34:59:eb:8b:
eb:a1:fc:c6:c6:7f:e3:47:a8:98:97:3a:98:05:45:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:5A:8D:08:F9:F5:5E:96:28:FC:47:1A:30:D0:B5:C4:86:D1:31
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234302e302f32322d3232203d3e20313331363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.75.240.0/22
Signature Algorithm: sha256WithRSAEncryption
03:a7:c9:dd:22:a7:e0:a6:7e:99:f0:d4:99:09:d6:92:05:5c:
a2:d5:8d:5f:96:33:aa:7e:00:30:7c:34:42:41:26:37:d2:bd:
a1:86:3a:6f:a0:d8:69:34:75:d8:e0:02:a9:f3:69:28:65:32:
51:d4:5e:45:2d:73:87:ab:ed:e6:74:dc:e4:61:31:33:1d:2b:
5a:37:ba:1a:50:c4:71:d2:e3:77:d0:fd:15:88:56:a8:54:2c:
b2:99:a8:e9:0e:dd:f4:74:64:2b:9a:76:d4:4b:3e:1b:a5:c3:
5d:7c:88:90:f6:2f:5b:27:5e:80:6a:3d:41:00:2b:3e:9a:f0:
cd:3e:fd:ba:bd:0f:78:73:20:0f:d9:db:78:91:05:50:e9:a9:
00:cb:f5:21:ca:35:3f:db:a9:f2:7e:8f:e9:f4:15:c7:2a:5a:
0d:9c:e0:dc:b4:d2:9c:87:e8:a4:77:4a:3d:07:ea:34:8f:06:
f5:62:7f:90:cd:16:0c:00:51:f3:ff:fd:6a:18:46:b8:5c:c7:
46:5a:3b:23:13:c5:ff:de:52:44:c9:da:34:e3:7d:82:cb:d9:
1a:5a:25:a0:38:51:7a:da:44:76:2f:d9:fd:96:7f:78:23:e8:
4e:92:46:85:61:72:ed:86:a6:b0:cb:c6:05:bb:cb:b8:41:62:
f9:77:cf:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:23 2026 by rpki-client