
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa
File: 3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa (raw, json)
Hash identifier: t8/BpAMVFsBsn3OxA1MFeyQj9kTRTLS2SXSc4toNDf8=
Subject key identifier: 11:03:BA:4C:66:8B:62:8E:A9:96:D1:61:3C:9E:22:CC:48:A3:30:06
Certificate issuer: /CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Certificate serial: 10BA8F75F90E827ACD89BE3E1D1D47F30609985F
Authority key identifier: E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa
Signing time: Mon 11 May 2026 17:37:46 +0000
ROA not before: Mon 11 May 2026 17:32:46 +0000
ROA not after: Mon 10 May 2027 17:37:46 +0000
asID: 38851
IP address blocks: 103.229.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ba:8f:75:f9:0e:82:7a:cd:89:be:3e:1d:1d:47:f3:06:09:98:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8B38FAD1BC9D7E426603F6C204566C4AF30938F
Validity
Not Before: May 11 17:32:46 2026 GMT
Not After : May 10 17:37:46 2027 GMT
Subject: CN=1103BA4C668B628EA996D1613C9E22CC48A33006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:db:02:de:71:1b:c0:e3:d3:2e:fd:77:66:4b:
81:5b:93:53:4e:51:6a:19:f4:6f:4b:d9:64:4d:f9:
52:c6:25:7f:0c:00:c2:19:3b:82:bd:59:00:7a:88:
6c:51:a9:d4:6f:16:2b:56:1e:f9:dd:3e:7e:bd:a3:
d9:09:02:8f:b1:f6:79:f3:9a:c0:51:0b:3a:ee:a9:
59:72:41:4d:7a:cb:d6:ad:d6:6b:68:ab:e2:62:65:
87:d5:76:93:74:51:1f:8a:1f:6a:4c:be:4d:2b:0a:
d5:df:67:27:9e:0b:7d:14:ff:98:3d:46:88:cb:a0:
91:14:c8:05:11:89:99:3a:f6:41:63:81:db:a5:15:
f5:23:f7:9f:87:53:d8:a8:77:e9:ea:72:f0:d8:e3:
48:6b:40:d8:d6:e7:1e:7b:5b:d0:3a:d4:25:7f:5b:
a6:b3:a0:6e:85:2d:0f:08:40:f7:81:cf:40:1e:ff:
c3:c5:2a:75:c6:7d:81:6e:b4:9d:d3:d3:c0:ec:e5:
60:f2:16:7c:a9:ab:2c:99:b2:ed:95:3c:e1:86:e6:
25:3c:ac:78:75:f2:c7:85:78:54:62:7d:1c:e6:be:
49:27:bc:67:15:76:26:94:45:be:8b:e1:69:7f:6a:
38:2c:37:c4:94:63:58:e8:ab:bc:2d:91:ca:35:8b:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:BA:4C:66:8B:62:8E:A9:96:D1:61:3C:9E:22:CC:48:A3:30:06
X509v3 Authority Key Identifier:
keyid:E8:B3:8F:AD:1B:C9:D7:E4:26:60:3F:6C:20:45:66:C4:AF:30:93:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWT/0/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E8B38FAD1BC9D7E426603F6C204566C4AF30938F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWT/0/3130332e3232392e3130322e302f32332d3233203d3e203338383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.229.102.0/23
Signature Algorithm: sha256WithRSAEncryption
25:48:fc:9c:01:72:66:b3:0f:50:d3:b7:68:09:e0:9f:08:8a:
78:b2:e5:c8:e9:04:f2:75:c8:78:67:07:a9:ad:83:b7:9f:1e:
72:ea:80:98:b9:9e:6c:7d:71:40:45:80:ac:17:27:9b:16:6e:
ca:7e:6b:c6:be:22:10:de:90:d9:76:66:7d:28:8a:3b:92:e6:
33:57:7c:eb:15:1f:42:03:7e:a2:0a:1c:b1:ef:08:c7:da:7f:
2c:44:be:a6:70:78:01:b5:5f:d8:54:e1:92:30:78:d5:3d:b2:
ee:1c:b8:25:6b:5b:b1:92:f7:06:43:a6:4c:18:5d:22:e0:5a:
f7:ee:bd:2c:8a:8c:48:29:c8:74:3e:df:ec:88:47:f0:5b:d6:
3e:3c:3d:6c:4f:68:3a:ac:f1:ef:e6:6b:3a:d1:92:c8:66:53:
66:bf:ce:71:9c:7e:2f:1b:9e:40:5c:33:de:2d:43:4f:7f:3c:
bc:46:ec:4e:35:e2:c4:d5:b0:99:0a:73:1a:75:98:d7:e0:ba:
28:6d:0e:e0:75:b4:8c:8c:8e:8f:d7:04:a7:16:c9:54:5a:56:
08:02:ef:28:49:12:a7:fe:9b:47:27:d1:cb:8f:1d:5c:22:1c:
06:1b:41:50:07:4f:d1:3b:30:d5:1d:bb:c6:44:95:68:f1:6e:
76:01:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:44 2026 by rpki-client