
$ rpki-client -vvf rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa
File: 3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa (raw, json)
Hash identifier: De1HIXtsANXzLfuAQRrXgqC4plFB3ZURvmTwZ7qHlC8=
Subject key identifier: 8F:F7:B7:DF:85:A6:58:E6:8F:A3:3F:34:17:1A:B3:59:1C:E5:FC:F3
Certificate issuer: /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Certificate serial: 1A9C24771D9EA5DC53BA95683697571F5E97ECB2
Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa
Signing time: Mon 11 May 2026 17:04:46 +0000
ROA not before: Mon 11 May 2026 16:59:46 +0000
ROA not after: Mon 10 May 2027 17:04:46 +0000
asID: 17408
IP address blocks: 103.138.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9c:24:77:1d:9e:a5:dc:53:ba:95:68:36:97:57:1f:5e:97:ec:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Validity
Not Before: May 11 16:59:46 2026 GMT
Not After : May 10 17:04:46 2027 GMT
Subject: CN=8FF7B7DF85A658E68FA33F34171AB3591CE5FCF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:e9:9b:a4:44:6a:ff:fc:b6:b1:2d:d1:7c:
74:92:d9:9e:aa:d5:1b:45:c3:7e:9c:93:99:46:dc:
a8:e5:30:fc:40:38:9a:ca:da:9f:50:47:40:5d:80:
c0:f5:f0:32:96:db:6c:2f:ff:78:ce:35:a8:28:c3:
e3:29:3e:87:2c:ff:da:f7:13:62:75:52:6f:32:66:
99:15:85:de:e1:ee:3b:4c:4f:f2:7d:a4:52:a2:b0:
8f:d9:8c:a0:73:45:3e:61:03:8c:b1:3e:77:46:b0:
12:8b:5f:b3:f7:15:6a:5c:14:b5:ff:8c:15:60:7f:
80:27:92:0d:a5:36:9d:31:c5:ef:63:65:0e:ae:ec:
83:64:4d:86:df:1e:1e:2c:fb:fb:5c:ed:a5:58:8e:
bd:9a:e8:a7:94:f9:20:03:2d:2a:b7:2c:d0:76:39:
ce:7d:96:5c:61:f6:95:82:a3:9c:91:43:8c:7f:5d:
6c:f9:c9:a8:d4:3d:27:31:a4:5f:9e:e9:f8:d7:0d:
ed:31:26:1e:a9:52:40:a1:51:b8:e2:0a:4c:6c:70:
5a:79:99:93:79:89:48:5d:5d:fe:f5:c8:96:6a:d3:
95:3e:d9:4f:98:5c:ef:da:2a:eb:fb:3a:9c:04:8e:
2f:a5:f1:97:21:91:a4:1e:b7:4e:47:f1:ff:90:d3:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F7:B7:DF:85:A6:58:E6:8F:A3:3F:34:17:1A:B3:59:1C:E5:FC:F3
X509v3 Authority Key Identifier:
keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130372e302f32342d3234203d3e203137343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:5b:fa:64:24:51:aa:a5:e7:84:96:f6:f9:a1:e0:d7:1d:d0:
07:b2:b6:2f:97:5d:d0:d9:d2:04:aa:6f:b4:25:51:29:e3:d3:
37:f7:77:04:0a:d6:67:e8:7c:9c:a5:32:89:bd:b0:ff:65:d9:
0a:0d:fb:68:bb:fd:f4:41:79:93:9e:93:8b:a3:c6:cd:74:1f:
e5:22:34:16:a8:ea:7f:40:de:c6:4c:6d:60:84:0c:96:21:a4:
e6:4b:75:24:5f:ad:03:16:13:0d:a7:0b:a9:3a:85:59:9f:99:
87:5c:90:9c:56:1e:eb:c7:22:cf:8d:e9:1e:90:07:e3:d8:41:
bb:a6:69:46:12:87:ff:e4:79:d3:b6:06:71:7d:b8:f1:e7:53:
71:a7:61:c0:04:b1:27:ff:89:90:5c:ab:76:2d:17:54:d6:99:
11:85:b6:02:9c:a9:f9:b5:17:53:65:24:0a:1d:df:8e:6f:e6:
ec:91:bb:4f:1d:87:86:63:9e:77:87:91:63:43:05:7f:13:8f:
4b:dd:16:7f:5e:25:a8:7a:14:ba:a7:be:f2:fd:88:cd:b2:64:
0c:8c:f4:a5:a8:15:8e:8e:ea:8d:fd:64:84:3a:e9:ee:96:10:
16:85:94:38:b8:51:8f:49:65:83:c5:68:af:91:b5:ca:6f:df:
51:4a:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:23 2026 by rpki-client