
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa
File: 323030313a6463313a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier: EMI6/roMf+dMJF1r7Wze5lsCPP71iUuBYgzSBOWLLgc=
Subject key identifier: 58:9B:D6:76:DC:D5:31:3E:C9:C9:8E:64:C2:E1:B5:47:36:52:95:48
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 0835561D1F579CD6F3E8F121EAB7188EC641DA27
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa
Signing time: Mon 11 May 2026 17:20:08 +0000
ROA not before: Mon 11 May 2026 17:15:08 +0000
ROA not after: Mon 10 May 2027 17:20:08 +0000
asID: 14618
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:35:56:1d:1f:57:9c:d6:f3:e8:f1:21:ea:b7:18:8e:c6:41:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:15:08 2026 GMT
Not After : May 10 17:20:08 2027 GMT
Subject: CN=589BD676DCD5313EC9C98E64C2E1B54736529548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:10:a2:bc:86:fd:20:80:77:8e:0e:3d:b8:
ba:c5:9b:54:99:f7:fe:b8:69:fc:ad:49:b9:e6:8b:
52:64:8f:a3:c8:0b:35:c1:90:a2:f9:8d:98:73:56:
53:c0:08:d5:a9:53:89:31:d4:3b:6c:31:1b:2c:1a:
59:21:b5:c6:41:6c:ce:05:1c:2a:36:99:07:e9:56:
df:f0:cf:91:ac:b5:05:43:ec:64:38:3c:45:34:0b:
54:0c:0f:0f:ae:b1:d6:35:be:22:78:fb:f9:fc:4f:
d8:be:b1:ab:91:de:df:aa:1a:b1:69:b3:0a:f7:a7:
52:45:af:c1:4f:68:34:bc:df:d9:b0:6d:1f:c2:5a:
8f:30:3d:28:8e:19:93:0a:98:ad:6d:eb:02:b6:6a:
07:3c:25:97:06:5f:37:b1:14:31:65:21:4e:55:f0:
8e:89:8a:cd:7b:bd:38:3f:81:15:1e:b9:1c:67:61:
c9:6b:e0:55:a8:f9:c6:d2:91:b4:41:20:f8:8c:52:
53:d2:09:2c:85:7b:11:cd:4e:67:ea:9e:10:e3:71:
27:0f:a0:9f:8f:76:ee:44:d8:59:6a:ee:c9:fb:47:
e6:75:6d:3b:3f:5f:ac:bb:92:3d:f1:e2:ac:9d:18:
c4:18:5f:3a:1d:36:fa:1e:6b:d8:49:d0:1f:9c:79:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:D6:76:DC:D5:31:3E:C9:C9:8E:64:C2:E1:B5:47:36:52:95:48
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
65:df:7c:d8:d8:66:44:50:4c:05:5d:0e:2c:64:a9:52:99:6a:
5f:c1:4a:2e:52:a2:73:b3:85:06:38:7b:ee:87:14:d7:24:fc:
ee:19:47:8c:f2:55:bb:e3:20:35:08:95:04:8d:27:bc:c7:7b:
ee:04:81:f9:50:65:86:d2:12:13:c8:91:38:29:b2:af:e0:77:
0a:14:5f:63:c2:13:bd:ed:61:3b:f4:8f:8f:0c:02:d2:79:63:
b0:83:ee:59:57:a9:8b:15:67:93:4f:eb:10:d2:c8:ba:8d:aa:
30:0a:2a:ef:a8:77:db:1b:ca:d5:bf:de:14:8a:e6:89:bb:c2:
b1:d6:fa:02:52:26:bc:76:75:72:70:30:d3:9d:9c:01:15:49:
21:ef:cc:4d:49:9a:ed:ab:92:af:0c:63:1b:ff:e8:fe:29:96:
e8:7b:42:3a:e2:fe:3a:91:63:8c:02:06:46:c1:1d:95:bd:42:
b3:52:bc:ca:83:af:65:aa:31:d4:11:fc:82:0b:1b:df:7e:31:
f4:8b:73:ec:23:91:ad:a8:ea:7d:ed:0d:79:09:11:bf:0e:2e:
87:9a:bd:63:8d:96:87:3b:a4:f9:f6:b0:fa:a6:08:c3:77:f9:
1c:3d:ea:9e:61:c4:56:ab:af:87:cd:4b:29:60:34:bc:40:3e:
f2:3f:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:24 2026 by rpki-client