
$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa
File: 323430333a616434303a3a2f33322d3438203d3e203137343038.roa (raw, json)
Hash identifier: wJNtwVwWGV2Ew01tEuJttk+ffpjPnv9QiD0Qlhkb3gk=
Subject key identifier: D5:C5:25:A6:D3:90:28:C2:35:53:D1:B3:01:32:0A:AE:E8:3F:DB:22
Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial: 202ECEB2C9CFA9F367406231DD980E39450B2C44
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa
Signing time: Mon 11 May 2026 17:32:30 +0000
ROA not before: Mon 11 May 2026 17:27:30 +0000
ROA not after: Mon 10 May 2027 17:32:30 +0000
asID: 17408
IP address blocks: 2403:ad40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2e:ce:b2:c9:cf:a9:f3:67:40:62:31:dd:98:0e:39:45:0b:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Validity
Not Before: May 11 17:27:30 2026 GMT
Not After : May 10 17:32:30 2027 GMT
Subject: CN=D5C525A6D39028C23553D1B301320AAEE83FDB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:fd:72:01:8a:af:68:09:97:94:fa:81:77:
10:a9:02:f6:2a:ca:83:9d:a4:63:03:34:64:45:72:
f9:ee:54:f8:6d:28:13:29:aa:63:34:ab:8d:88:6e:
2a:c2:25:56:24:08:8d:b0:d6:07:f4:59:19:f5:2a:
e1:6b:a2:cb:fb:c4:40:ba:ee:cb:6e:c4:ea:95:9c:
1f:f9:88:11:78:db:33:10:81:cc:9f:0a:f2:2e:ed:
2d:5e:db:7a:2a:3c:46:cb:11:4d:e4:00:55:bd:62:
b9:2f:00:ce:23:2d:82:42:2c:37:4d:65:b5:53:4d:
52:a8:88:b7:5b:a4:5d:38:29:6b:3e:b7:9c:44:c3:
d2:7c:80:82:a0:cb:f8:52:e7:ed:70:95:e8:e9:33:
7c:5c:f0:86:6f:38:37:65:a3:5b:1a:86:e7:8c:44:
64:e1:21:62:67:07:e3:b5:50:f7:79:7d:ec:0a:84:
b5:04:16:5b:50:c5:6f:9b:3e:c7:9f:b7:f1:bd:05:
bf:07:32:da:15:28:cf:e2:bd:97:1d:5b:47:22:db:
3e:d0:b4:2c:8d:04:65:9a:b1:d9:78:67:bf:66:03:
62:6d:63:95:bc:96:97:c8:79:5b:ba:0d:e8:16:1f:
d1:ad:87:f6:34:0b:42:c7:0f:8a:ff:ac:45:12:2b:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:25:A6:D3:90:28:C2:35:53:D1:B3:01:32:0A:AE:E8:3F:DB:22
X509v3 Authority Key Identifier:
keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a616434303a3a2f33322d3438203d3e203137343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
bb:ef:75:ed:92:b0:55:c7:28:4d:38:58:90:19:a7:54:b0:1d:
c4:21:7f:bb:54:2b:7b:f7:42:c5:c1:26:5b:b7:29:8f:92:3e:
70:39:08:7e:17:00:9d:45:1a:18:6c:1d:7f:70:63:48:eb:d1:
98:8e:ed:82:d1:4c:d3:84:b3:82:02:2a:82:0d:2a:6c:a9:c5:
c2:50:d9:9f:fc:3a:29:05:d8:8d:5b:84:78:a7:0c:33:1a:bd:
c6:01:f5:68:d2:be:e9:7d:cc:2f:a6:cd:36:1b:25:88:8f:43:
fe:a9:b3:01:98:54:85:c3:88:33:47:2e:12:58:98:68:8f:9b:
97:50:29:20:26:e0:60:69:5c:fe:44:31:7c:1c:e2:da:cd:dc:
1e:69:66:b3:a0:58:bf:ca:8e:5a:c4:aa:67:7f:5d:ba:b4:1a:
ad:f4:af:6b:bf:2e:cf:82:43:88:4f:e9:3b:2e:f7:16:9a:54:
08:db:d7:bb:4d:d8:b7:93:b4:e7:26:e1:2b:7a:c8:c4:87:ce:
5b:c3:15:45:5c:f9:6c:48:7d:3c:3b:4a:1e:b2:c0:80:9c:f1:
8e:7c:76:6c:74:f6:13:c1:e2:c7:c2:6a:ca:c3:a5:5c:1d:5c:
a9:f1:32:93:fb:bf:db:bc:55:8f:e2:18:91:0d:b7:af:dc:85:
8b:4c:e1:69
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgIUIC7OssnPqfNnQGIx3ZgOOUULLEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE
MUY0QTlCRTAeFw0yNjA1MTExNzI3MzBaFw0yNzA1MTAxNzMyMzBaMDMxMTAvBgNV
BAMTKEQ1QzUyNUE2RDM5MDI4QzIzNTUzRDFCMzAxMzIwQUFFRTgzRkRCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Fv1yAYqvaAmXlPqBdxCpAvYq
yoOdpGMDNGRFcvnuVPhtKBMpqmM0q42IbirCJVYkCI2w1gf0WRn1KuFrosv7xEC6
7stuxOqVnB/5iBF42zMQgcyfCvIu7S1e23oqPEbLEU3kAFW9YrkvAM4jLYJCLDdN
ZbVTTVKoiLdbpF04KWs+t5xEw9J8gIKgy/hS5+1wlejpM3xc8IZvODdlo1sahueM
RGThIWJnB+O1UPd5fewKhLUEFltQxW+bPseft/G9Bb8HMtoVKM/ivZcdW0ci2z7Q
tCyNBGWasdl4Z79mA2JtY5W8lpfIeVu6DegWH9Gth/Y0C0LHD4r/rEUSK/TfAgMB
AAGjggHkMIIB4DAdBgNVHQ4EFgQU1cUlptOQKMI1U9GzATIKrug/2yIwHwYDVR0j
BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU
RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC
QUZDOUVEMUY0QTlCRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zMjM0MzAzMzNh
NjE2NDM0MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM3MzQzMDM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJAOtQDANBgkqhkiG9w0BAQsFAAOCAQEAu+917ZKwVccoTThYkBmnVLAd
xCF/u1Qre/dCxcEmW7cpj5I+cDkIfhcAnUUaGGwdf3BjSOvRmI7tgtFM04SzggIq
gg0qbKnFwlDZn/w6KQXYjVuEeKcMMxq9xgH1aNK+6X3ML6bNNhsliI9D/qmzAZhU
hcOIM0cuEliYaI+bl1ApICbgYGlc/kQxfBzi2s3cHmlms6BYv8qOWsSqZ39durQa
rfSva78uz4JDiE/pOy73FppUCNvXu03Yt5O05ybhK3rIxIfOW8MVRVz5bEh9PDtK
HrLAgJzxjnx2bHT2E8Hix8JqysOlXB1cqfEyk/u/27xVj+IYkQ23r9yFi0zhaQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:51 2026 by rpki-client