
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203136353039.roa
File: 323030313a6463313a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier: Q3/8Zq4ssaFDKNNjZ/5oCP6yCSanZu9DEb+WjJ8YXIU=
Subject key identifier: F6:FD:50:23:F5:92:C3:B3:EE:A5:E9:0E:B4:31:F8:5A:DA:04:8D:5C
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 540E77982CA13860B5065AD85BA2F54B7028CE3C
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203136353039.roa
Signing time: Mon 11 May 2026 17:20:08 +0000
ROA not before: Mon 11 May 2026 17:15:08 +0000
ROA not after: Mon 10 May 2027 17:20:08 +0000
asID: 16509
IP address blocks: 2001:dc1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0e:77:98:2c:a1:38:60:b5:06:5a:d8:5b:a2:f5:4b:70:28:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:15:08 2026 GMT
Not After : May 10 17:20:08 2027 GMT
Subject: CN=F6FD5023F592C3B3EEA5E90EB431F85ADA048D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:ad:9c:63:4c:0e:72:93:26:19:0f:7a:79:
7e:d2:93:3f:c1:c6:15:39:41:fa:44:89:c6:4e:2d:
0c:93:8d:04:c0:9a:b6:a1:60:ee:9c:f5:4c:f3:18:
84:74:5a:56:ec:b0:13:1c:d1:78:e1:3d:01:d6:ab:
05:61:1b:a0:1a:4f:26:cb:b7:b2:f6:99:2e:b1:12:
a0:28:73:e3:c3:78:1e:af:84:67:04:87:48:4f:78:
c9:5d:44:81:13:95:1f:20:e9:8b:54:e9:3b:db:4d:
b5:12:d1:f5:35:9c:40:b6:79:67:49:4e:ba:b7:69:
be:82:ec:37:2c:e4:5c:87:c8:e4:f1:24:93:ec:12:
f9:a9:b5:e4:11:7f:29:a4:70:42:76:7a:20:1a:99:
90:e9:16:c0:aa:a1:8e:87:16:1b:79:1c:56:f0:bc:
66:6d:5a:6e:59:91:84:32:e3:bf:d7:e0:91:21:d8:
9f:4b:cf:a4:11:2c:b8:19:ab:d8:62:20:31:57:d6:
40:f6:a8:da:f1:b0:fe:6c:33:1b:87:d5:1f:1e:a6:
0d:21:d9:8c:5d:63:ff:e9:b6:a9:1b:9f:3d:64:19:
29:63:2d:54:63:82:89:ca:05:e6:7b:6a:ed:b5:ec:
95:50:9a:5c:81:61:22:50:f4:79:76:00:b3:92:59:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:50:23:F5:92:C3:B3:EE:A5:E9:0E:B4:31:F8:5A:DA:04:8D:5C
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:dc1::/48
Signature Algorithm: sha256WithRSAEncryption
35:de:e8:71:d3:b5:bd:1a:a3:9f:68:08:7a:67:2e:de:8b:47:
73:06:5c:28:63:17:87:30:04:3c:33:90:90:0f:c1:b6:b1:75:
a0:66:7d:46:56:26:e8:2d:55:2c:c8:bc:5f:cd:9b:c8:03:b2:
de:2e:3f:ab:36:93:cb:40:3f:01:1c:ac:06:68:0d:91:1c:91:
22:18:01:f5:62:33:1c:10:79:bb:06:d7:52:cf:7d:c3:52:20:
c6:20:bc:f9:07:fe:58:46:58:85:1a:71:ed:b8:0a:d5:54:56:
71:06:06:26:ab:68:9e:48:02:74:ff:6b:28:93:89:57:d0:38:
21:c9:bb:4c:96:dd:b0:56:a7:5a:56:93:3e:f2:58:10:af:46:
a1:90:d7:2f:3c:ff:ed:e7:58:da:76:8a:9c:00:f0:e1:6b:20:
94:90:07:9b:dd:8a:0f:82:22:a1:53:d2:c0:2e:66:c3:b3:ae:
61:cf:95:3d:99:62:93:c0:d7:97:00:9e:06:56:9e:86:96:5d:
61:f5:a9:93:28:e0:fe:58:e3:31:04:42:0d:53:bd:8c:db:13:
f3:70:04:41:a1:35:7e:05:a1:2a:a1:7e:86:be:27:0e:3b:81:
ab:35:a8:24:e2:c2:2e:1e:f6:ca:7c:25:77:cb:a4:9e:c8:f3:
4a:e7:75:47
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIUVA53mCyhOGC1BlrYW6L1S3AozjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1NzQ2QkIxMzdDRTczMEZCMENBQTI4QUFFNTdENEVE
RTBBMUU5OTAeFw0yNjA1MTExNzE1MDhaFw0yNzA1MTAxNzIwMDhaMDMxMTAvBgNV
BAMTKEY2RkQ1MDIzRjU5MkMzQjNFRUE1RTkwRUI0MzFGODVBREEwNDhENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71K2cY0wOcpMmGQ96eX7Skz/B
xhU5QfpEicZOLQyTjQTAmrahYO6c9UzzGIR0WlbssBMc0XjhPQHWqwVhG6AaTybL
t7L2mS6xEqAoc+PDeB6vhGcEh0hPeMldRIETlR8g6YtU6TvbTbUS0fU1nEC2eWdJ
Trq3ab6C7Dcs5FyHyOTxJJPsEvmpteQRfymkcEJ2eiAamZDpFsCqoY6HFht5HFbw
vGZtWm5ZkYQy47/X4JEh2J9Lz6QRLLgZq9hiIDFX1kD2qNrxsP5sMxuH1R8epg0h
2YxdY//ptqkbnz1kGSljLVRjgonKBeZ7au217JVQmlyBYSJQ9Hl2ALOSWUI5AgMB
AAGjggHgMIIB3DAdBgNVHQ4EFgQU9v1QI/WSw7PupekOtDH4WtoEjVwwHwYDVR0j
BBgwFoAUJ1dGuxN85zD7DKooquV9Tt4KHpkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUMv
MC8yNzU3NDZCQjEzN0NFNzMwRkIwQ0FBMjhBQUU1N0Q0RURFMEExRTk5LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzI3NTc0NkJCMTM3Q0U3MzBGQjBDQUEyOEFBRTU3
RDRFREUwQTFFOTkuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQy8wLzMyMzAzMDMxM2E2NDYz
MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
IAENwQAAMA0GCSqGSIb3DQEBCwUAA4IBAQA13uhx07W9GqOfaAh6Zy7ei0dzBlwo
YxeHMAQ8M5CQD8G2sXWgZn1GViboLVUsyLxfzZvIA7LeLj+rNpPLQD8BHKwGaA2R
HJEiGAH1YjMcEHm7BtdSz33DUiDGILz5B/5YRliFGnHtuArVVFZxBgYmq2ieSAJ0
/2sok4lX0DghybtMlt2wVqdaVpM+8lgQr0ahkNcvPP/t51jadoqcAPDhayCUkAeb
3YoPgiKhU9LALmbDs65hz5U9mWKTwNeXAJ4GVp6Gll1h9amTKOD+WOMxBEINU72M
2xPzcARBoTV+BaEqoX6GvicOO4GrNagk4sIuHvbKfCV3y6SeyPNK53VH
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:26 2026 by rpki-client