
$ rpki-client -vvf rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa
File: 3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier: 1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=
Subject key identifier: F1:40:C1:1B:00:0D:57:6C:C2:C9:B9:D3:56:18:36:E2:24:19:34:0F
Certificate issuer: /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial: 3210C53FF6EB7E607CE198695C4EB8DECDB96427
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa
Signing time: Mon 11 May 2026 17:37:55 +0000
ROA not before: Mon 11 May 2026 17:32:55 +0000
ROA not after: Mon 10 May 2027 17:37:55 +0000
asID: 131642
IP address blocks: 103.64.20.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:10:c5:3f:f6:eb:7e:60:7c:e1:98:69:5c:4e:b8:de:cd:b9:64:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Validity
Not Before: May 11 17:32:55 2026 GMT
Not After : May 10 17:37:55 2027 GMT
Subject: CN=F140C11B000D576CC2C9B9D3561836E22419340F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ab:c9:08:82:bd:f7:f9:1e:83:11:88:f0:ae:
0c:5d:f9:70:a2:e0:d5:6e:e5:f9:6e:b4:02:df:54:
e0:08:50:f4:02:2e:75:da:64:bf:e0:1f:dc:37:0d:
cb:3b:71:14:3d:da:d0:5b:cc:d0:55:96:02:ce:c8:
90:46:e1:c6:75:94:c8:70:7c:84:71:7c:da:f2:dc:
b5:4b:3d:7f:c8:3a:c7:5a:8a:8b:24:e7:36:b6:4a:
38:ba:b3:4f:6b:22:73:34:0c:45:2d:88:ae:e8:16:
1f:37:4f:f8:0e:96:e8:fb:e5:c9:6c:4b:41:ba:c8:
60:5e:6a:a3:e0:92:b8:e1:fc:5e:e9:b2:f0:c8:fa:
d7:5f:7d:ce:fd:17:95:3e:e8:fd:1d:62:9d:12:d4:
c5:ef:51:27:3e:7e:05:1f:0b:9d:98:fc:53:b1:c3:
b6:a3:fd:da:d2:11:15:a8:1b:b2:84:61:c0:52:72:
70:08:a7:55:e7:ed:0c:02:da:67:44:9a:39:ee:2d:
bd:7d:01:0b:f2:01:d5:cc:39:c2:4f:62:7b:cc:80:
bf:37:55:14:dc:92:56:9b:49:f0:40:af:f2:d2:5c:
be:03:45:85:61:f6:4d:b8:f9:9a:49:02:fd:a7:e9:
aa:9d:02:a1:b3:9b:8d:18:0c:46:9e:85:de:33:e3:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:40:C1:1B:00:0D:57:6C:C2:C9:B9:D3:56:18:36:E2:24:19:34:0F
X509v3 Authority Key Identifier:
keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.64.20.0/23
Signature Algorithm: sha256WithRSAEncryption
95:10:c3:d0:bf:b4:2b:94:c3:60:f7:51:d9:6b:cc:4d:1c:fc:
02:65:e8:56:43:8f:7e:8a:d3:4a:2d:a4:50:be:8b:d6:c3:e8:
fa:be:b7:4e:a6:c3:e4:4f:52:3f:4f:2f:79:03:05:a9:5a:e8:
b9:a1:02:98:32:94:03:4e:ad:77:d2:7d:59:4a:f1:77:15:bd:
f3:42:31:1b:66:f3:6f:5b:b6:57:2b:e7:8b:02:a8:bb:e0:21:
e5:06:64:f7:72:d6:d7:5f:db:30:3b:d7:0c:ba:0b:a7:f0:2a:
8f:1e:46:cb:7a:64:f6:73:bf:7f:7a:55:19:63:53:ae:14:45:
d6:80:d4:7f:e3:0c:f6:dd:fb:f5:2d:0b:68:6a:f0:08:3c:3d:
f2:e2:1f:de:0e:52:7c:1b:af:93:6f:be:f8:a1:c7:60:a3:9d:
8d:a6:16:52:00:07:ce:3d:af:bf:81:4d:77:e8:e8:e0:a4:5a:
9d:e3:4b:58:88:fe:37:9e:3a:1c:c3:54:4f:9a:78:bb:e6:27:
3c:40:aa:64:1b:f9:07:80:5a:0f:de:a7:9f:dc:22:bd:4f:66:
2a:5e:fb:21:68:cf:0e:1c:25:fc:83:a3:66:bb:a6:1c:05:2a:
b5:8f:35:40:13:e9:42:3a:be:de:99:ae:df:0b:bb:24:e4:a0:
a9:e1:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:46 2026 by rpki-client