
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa
File: 3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa (raw, json)
Hash identifier: jFOqKNSTBrTIV1xUzqrbetFhA6QtKyhxqkPiIbQ8Meo=
Subject key identifier: D4:AE:E8:B4:DE:2D:62:F6:32:6B:88:EC:DC:66:22:8F:08:A8:1E:F7
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 0F512A177C4C49CEEAA32F7BD1A6F048C9DDA1CF
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa
Signing time: Mon 11 May 2026 17:10:53 +0000
ROA not before: Mon 11 May 2026 17:05:53 +0000
ROA not after: Mon 10 May 2027 17:10:53 +0000
asID: 3949
IP address blocks: 122.255.94.16/28 maxlen: 28
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:51:2a:17:7c:4c:49:ce:ea:a3:2f:7b:d1:a6:f0:48:c9:dd:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: May 11 17:05:53 2026 GMT
Not After : May 10 17:10:53 2027 GMT
Subject: CN=D4AEE8B4DE2D62F6326B88ECDC66228F08A81EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:a3:0e:f7:a1:2c:11:78:5d:dd:2d:d0:81:
a4:8d:de:c3:c0:b2:d3:1f:d3:1e:4e:b9:85:f0:04:
ae:a3:6c:3c:80:ff:63:7d:d7:ff:12:47:04:b9:e3:
ff:43:de:91:52:d2:a9:83:44:b2:6c:c4:ae:e9:a4:
93:00:1d:e5:e9:eb:76:25:b4:1d:a0:2f:e2:dc:24:
f0:e4:c0:ca:b8:1b:97:72:74:0d:77:8b:a4:ba:b7:
13:ce:0c:b2:7e:05:ab:2f:77:e3:14:65:b2:65:1b:
fe:d1:78:b7:df:ff:52:1d:63:51:c9:25:90:d4:1f:
f4:fe:93:c1:51:b5:14:64:24:70:40:fc:94:2f:8a:
34:27:1c:b7:a8:5f:82:66:96:36:43:da:3e:b2:10:
62:d1:55:10:10:de:16:65:ce:be:75:89:8f:cb:5e:
78:ed:14:fa:6d:e2:8d:0d:f2:89:c9:06:6e:48:d5:
d1:79:d2:70:5b:6f:74:40:1f:2a:d8:ed:9c:fc:5f:
a3:d1:17:36:86:88:47:0a:6d:a4:1a:6d:e7:c7:5a:
99:c8:bd:c2:58:ba:a6:ca:bf:bc:f6:ee:8e:06:cc:
41:2f:aa:2c:a9:24:59:15:4e:ce:30:14:3e:12:90:
43:45:26:bf:8b:1e:4a:ef:78:88:86:da:f2:92:2c:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:E8:B4:DE:2D:62:F6:32:6B:88:EC:DC:66:22:8F:08:A8:1E:F7
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e31362f32382d3238203d3e2033393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.255.94.16/28
Signature Algorithm: sha256WithRSAEncryption
3f:8f:c0:8a:38:12:bd:3f:9c:4f:5d:01:4d:76:1f:4e:81:9c:
99:d8:32:a2:0b:eb:c3:44:e8:8e:b6:40:2a:d6:fc:b1:97:6e:
a1:98:2a:91:59:77:ce:c9:d4:9e:63:17:6e:27:2d:89:c3:ab:
03:0d:79:d4:1a:26:77:5f:bc:25:7e:7e:8b:4c:60:65:15:ff:
74:90:6d:8c:ea:34:e3:40:f8:c6:b5:d3:aa:bd:5f:21:0e:41:
67:74:2d:4d:7e:cf:59:04:ab:4a:9a:fc:4a:bd:d5:4f:b7:18:
f2:a1:2a:4c:d0:7b:7d:63:49:1d:65:a8:46:37:3d:ae:89:74:
fd:2d:8e:52:55:45:87:db:1c:eb:e5:9a:f4:d4:60:c2:7b:c2:
8d:17:ab:ae:a2:84:27:94:12:3a:5e:a3:09:99:86:04:85:b6:
a1:a8:c1:b5:fb:aa:52:b3:8c:fe:6d:cf:03:44:65:41:33:47:
c8:e6:7f:f3:14:61:88:d3:8c:c1:1b:f4:27:60:74:84:97:7b:
dd:f7:fc:f1:4a:ca:da:ef:15:31:81:67:00:81:30:09:26:a3:
3d:fd:9e:b2:69:d7:3b:10:b8:d6:02:f5:c6:a8:4d:ef:dd:00:
5d:05:da:cd:0b:4e:f5:b3:67:3e:6f:6c:a2:81:d6:71:dc:70:
07:41:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:05 2026 by rpki-client