
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/36312e35382e34312e3137362f32382d3238203d3e2033393439.roa
File: 36312e35382e34312e3137362f32382d3238203d3e2033393439.roa (raw, json)
Hash identifier: 8+1bqHrAQFD10kktfKxge62Vv7sjt8foTbNXn1au08A=
Subject key identifier: 9B:BE:C8:40:08:F1:88:6C:3F:BE:AC:14:6A:67:5D:39:89:44:29:7E
Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial: 289C977B8E5FA519FAC3C46280A64E17C429D81B
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/36312e35382e34312e3137362f32382d3238203d3e2033393439.roa
Signing time: Mon 11 May 2026 17:10:53 +0000
ROA not before: Mon 11 May 2026 17:05:53 +0000
ROA not after: Mon 10 May 2027 17:10:53 +0000
asID: 3949
IP address blocks: 61.58.41.176/28 maxlen: 28
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:9c:97:7b:8e:5f:a5:19:fa:c3:c4:62:80:a6:4e:17:c4:29:d8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Validity
Not Before: May 11 17:05:53 2026 GMT
Not After : May 10 17:10:53 2027 GMT
Subject: CN=9BBEC84008F1886C3FBEAC146A675D398944297E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:54:d9:b4:d5:c5:d7:98:8a:c7:27:d5:b6:
e9:53:1f:9c:14:2a:9c:73:b1:b8:78:81:ad:67:28:
2f:76:56:dd:ef:b6:5d:e6:d5:71:b9:45:18:a0:38:
ad:01:dd:db:43:a7:60:e6:58:e9:86:bc:a8:1e:b8:
7d:f8:87:d9:e5:11:44:71:f4:26:f9:84:26:50:af:
3b:f9:79:3e:02:fa:35:b6:f6:0c:f0:06:78:86:59:
c5:13:f6:4c:7a:35:9d:b3:bb:b5:e0:14:94:05:41:
8f:2d:61:51:00:c9:54:5e:b6:e2:b7:bb:58:4b:22:
1e:83:5f:94:54:ab:0d:50:df:9f:c9:90:a9:71:78:
3b:3c:d5:e9:05:af:fb:ce:1f:5f:0c:ec:f9:59:9a:
75:58:58:b0:1c:7a:d4:b4:51:29:72:0a:ef:56:ea:
1f:b1:66:07:7d:7f:a2:0a:1f:c6:23:6e:24:df:c5:
5f:6b:ac:43:39:82:71:77:f6:d4:a7:02:b2:65:a0:
16:df:08:72:ef:d7:08:16:33:32:01:74:ac:72:62:
85:bc:d3:80:3a:c4:47:fe:58:ea:d2:94:10:ab:70:
da:7f:69:0f:e2:53:18:0e:99:0e:e5:61:9e:6c:2c:
a7:71:41:95:a5:25:77:ae:74:75:25:8b:7c:2a:cd:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BE:C8:40:08:F1:88:6C:3F:BE:AC:14:6A:67:5D:39:89:44:29:7E
X509v3 Authority Key Identifier:
keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/36312e35382e34312e3137362f32382d3238203d3e2033393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.58.41.176/28
Signature Algorithm: sha256WithRSAEncryption
6b:d6:e6:a1:dc:9a:ad:46:3f:6b:1f:90:92:d2:a0:98:4c:68:
9f:f0:2a:19:0a:f5:b0:2c:70:a8:cb:8b:47:d4:90:a6:21:f3:
4c:af:8b:7a:0e:e0:35:41:43:44:94:c3:12:cb:6b:e7:84:93:
d6:d8:ff:d1:72:00:3f:2c:66:b0:07:41:11:e0:13:b5:9f:b6:
a8:02:89:d8:42:4d:3a:1a:e8:e9:10:fa:de:a2:25:0d:50:0a:
97:46:df:d7:1f:45:cb:76:e5:1d:16:9b:29:d8:1a:48:69:74:
be:f5:34:09:4b:1b:75:65:72:4f:df:38:d7:37:94:17:38:64:
12:0d:49:0a:92:a3:36:8b:bc:11:af:f8:36:6b:36:e7:8b:c7:
1a:77:1c:58:98:d7:e0:e4:87:15:ca:2c:85:1e:64:47:20:26:
a1:ed:a0:dc:a4:7a:33:68:e8:b6:d7:b2:5a:c5:33:52:18:5c:
e6:37:22:f1:96:fc:8b:34:81:9c:7b:44:c3:e5:16:d7:d9:5a:
e9:3a:5f:18:87:91:e2:fd:9c:32:87:37:8f:69:04:5a:de:59:
1b:4c:b1:c9:2d:9c:52:f5:94:56:fc:75:19:13:3c:5c:2c:54:
df:fc:07:b4:e0:91:ca:f1:30:44:32:80:72:ab:5d:b5:82:90:
e6:df:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:08 2026 by rpki-client