
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa
File: 3230332e3131392e332e302f32342d3234203d3e203137343038.roa (raw, json)
Hash identifier: 2q0kKAGoU8dEn4SK6b6IYfb8U1QD+nFP46w6BGL91ug=
Subject key identifier: 97:97:8D:D2:09:C7:2C:BD:F7:A6:64:22:F2:EF:CB:6B:AC:B3:DB:81
Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial: 6D7CBB5BAB4A22ED8147FD0330D79DD1E792A28B
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa
Signing time: Mon 11 May 2026 17:20:10 +0000
ROA not before: Mon 11 May 2026 17:15:10 +0000
ROA not after: Mon 10 May 2027 17:20:10 +0000
asID: 17408
IP address blocks: 203.119.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7c:bb:5b:ab:4a:22:ed:81:47:fd:03:30:d7:9d:d1:e7:92:a2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Validity
Not Before: May 11 17:15:10 2026 GMT
Not After : May 10 17:20:10 2027 GMT
Subject: CN=97978DD209C72CBDF7A66422F2EFCB6BACB3DB81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:b2:f0:97:8a:88:a5:75:f2:14:fb:9d:be:
49:38:a4:d1:0c:cf:16:c1:18:13:41:c8:c2:73:4e:
81:04:64:61:d4:3b:30:8b:68:05:62:ba:6d:20:d3:
c7:9a:35:78:0c:9c:dd:ca:0e:6d:69:e9:28:4a:69:
fd:36:69:16:90:b1:70:16:20:ba:ee:02:5e:d2:2d:
ce:6d:23:5a:fd:b6:7f:e9:c1:19:e3:f7:5a:e7:c7:
dc:b3:dc:25:1a:95:ca:60:92:79:3e:02:db:10:11:
28:40:25:bd:23:21:cf:53:35:f2:e4:7a:7a:52:03:
0d:ed:a7:07:d6:82:1d:ba:96:ae:36:4e:11:db:8b:
39:01:fe:74:a6:06:0b:3c:b8:62:97:33:cc:a9:f4:
c7:46:61:3f:db:29:6e:95:69:2d:fc:72:d7:6b:a8:
50:ac:de:54:7b:ac:d5:a6:7b:e6:33:7d:48:27:4e:
75:07:c5:41:ef:65:7a:be:b0:6d:f4:10:9d:8f:fe:
bd:2a:86:83:31:1e:ed:48:91:c3:52:b8:fa:8b:62:
4a:28:4a:1a:33:f1:9e:a5:fd:2d:ae:68:69:bf:2b:
5b:8c:94:61:24:25:2d:a0:ab:05:16:45:e6:df:59:
dc:1b:bf:1c:1e:ab:38:29:43:dc:a4:45:53:fc:ff:
68:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:8D:D2:09:C7:2C:BD:F7:A6:64:22:F2:EF:CB:6B:AC:B3:DB:81
X509v3 Authority Key Identifier:
keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.119.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6a:0a:2b:b5:75:33:d5:09:57:d5:b1:dc:b3:f6:47:2e:2e:
55:f7:b9:89:17:5f:f1:eb:f7:67:09:40:89:0d:04:9c:c4:d1:
1b:dc:3c:74:6d:7b:b9:09:c3:b1:a9:ed:15:94:4b:bb:e3:e9:
6c:97:c9:9d:cb:5c:1b:88:21:54:fd:94:86:06:e7:31:f1:e3:
89:48:52:ff:60:84:05:e3:eb:0d:dc:84:c7:ef:b5:24:93:55:
4f:1f:b0:bf:30:d4:3a:10:b3:70:42:c0:48:14:fb:97:fd:0c:
18:a5:95:94:c3:b8:6f:9f:50:39:d7:80:46:53:f3:20:68:1a:
b2:c5:14:10:c2:a2:7a:5e:10:cb:b2:ca:b6:ff:3a:14:0c:57:
89:e1:12:9d:1b:b2:34:00:b8:45:7f:2e:ad:dd:47:ac:3e:e7:
05:6a:72:40:fb:a6:6c:68:96:17:86:01:03:b0:a3:da:a6:bd:
2a:da:43:3a:05:34:a4:4b:c1:1a:cc:42:1e:d7:f1:01:ed:7b:
dc:1b:fb:cc:22:88:f2:37:c1:55:0c:7c:90:56:16:b5:3e:ff:
2a:39:d5:49:54:79:d8:31:cb:d4:01:4c:b2:23:c9:a5:fa:c2:
60:bf:5f:b4:44:03:ff:6c:cf:0c:46:8c:c0:92:75:86:41:ad:
59:c3:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:26 2026 by rpki-client