
$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/323430373a373130303a3a2f33322d3438203d3e20313331313439.roa
File: 323430373a373130303a3a2f33322d3438203d3e20313331313439.roa (raw, json)
Hash identifier: ir+6BuRP4ipyEjzb583mBr5bzQkTrQiq6mOB7prVUOY=
Subject key identifier: 4A:59:46:60:4C:0C:95:5C:A0:52:65:3F:3B:63:5E:59:F9:80:C5:76
Certificate issuer: /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial: 35BF5CEB9476D04B5B4F74DCF15C8CA3333B1F45
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/323430373a373130303a3a2f33322d3438203d3e20313331313439.roa
Signing time: Mon 11 May 2026 16:13:12 +0000
ROA not before: Mon 11 May 2026 16:08:12 +0000
ROA not after: Mon 10 May 2027 16:13:12 +0000
asID: 131149
IP address blocks: 2407:7100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bf:5c:eb:94:76:d0:4b:5b:4f:74:dc:f1:5c:8c:a3:33:3b:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
Validity
Not Before: May 11 16:08:12 2026 GMT
Not After : May 10 16:13:12 2027 GMT
Subject: CN=4A5946604C0C955CA052653F3B635E59F980C576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:b2:84:b1:f3:29:40:a5:7b:a4:8d:09:82:
4d:4a:ea:13:8a:2f:c8:4b:6f:06:9b:9a:2a:42:aa:
95:65:28:51:50:90:16:ab:ca:9f:65:0e:d6:41:a5:
ba:1e:23:38:5f:b5:a3:73:d0:f3:5f:4e:6a:60:1b:
ab:b8:3d:d5:fd:47:17:23:e0:67:a6:2b:46:3f:71:
29:a5:0e:20:4a:36:c3:58:b3:d9:5e:47:98:aa:7d:
25:6f:d7:64:75:12:fc:a1:54:a7:0d:a8:f0:1c:3d:
fc:1b:42:e7:6e:cb:d5:04:17:5c:ce:94:19:05:b8:
f3:5f:fa:c5:7c:d2:17:de:18:eb:24:6e:38:34:0c:
c5:76:d7:31:b0:fc:2e:cd:29:8b:89:31:73:29:1c:
ab:89:7e:9c:fb:c7:b6:f1:ab:a8:0a:bf:ff:d8:da:
2f:41:b6:bd:3d:4d:2d:20:63:2f:32:d8:43:6e:87:
5b:ad:44:6c:c0:b5:04:2e:3f:77:d1:c7:47:b9:48:
47:38:10:2b:d0:f1:7f:96:17:52:27:d6:d1:29:ee:
e3:a3:c6:63:25:5a:6a:b7:3d:9c:3b:63:d7:81:b6:
9d:f5:5e:e2:c0:f9:98:39:87:c5:f1:21:7f:4b:a6:
d5:cf:bc:8c:4a:55:fd:1f:19:a3:32:7e:53:dc:d4:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:46:60:4C:0C:95:5C:A0:52:65:3F:3B:63:5E:59:F9:80:C5:76
X509v3 Authority Key Identifier:
keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/323430373a373130303a3a2f33322d3438203d3e20313331313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:7100::/32
Signature Algorithm: sha256WithRSAEncryption
20:b4:5d:fd:a0:a3:73:2b:d9:de:e3:43:e6:c2:9c:a5:a8:93:
7f:4b:8c:c1:38:eb:c6:74:23:00:67:25:2a:da:65:1f:1d:7d:
e1:7d:3e:f9:47:5e:b5:c6:f6:29:b9:b3:a2:f8:66:af:c2:32:
df:b5:02:7f:a9:0f:c3:ce:4f:23:38:8d:7e:63:04:3a:25:42:
6a:91:ab:f1:15:19:ac:dd:eb:05:bc:fb:30:ec:51:14:0e:53:
9d:d6:1f:b3:2c:d1:52:be:4d:24:34:39:df:a8:30:3d:50:8f:
0b:e1:5c:94:a1:ce:e2:cf:4e:ec:87:a0:b0:e7:d0:c9:f1:db:
e8:fa:22:f3:2d:92:f6:88:29:25:b8:92:c1:f8:9d:59:09:ec:
98:61:ac:b0:84:c8:c0:aa:5a:49:41:98:38:5f:b0:47:86:57:
a8:d3:3d:00:dc:1e:19:4d:79:b8:86:71:ee:80:54:07:87:54:
a7:3f:17:08:9d:59:ff:39:90:7a:c7:90:35:6b:ca:5d:f4:e9:
aa:f5:1d:67:84:76:78:11:68:1b:1c:4c:92:2b:82:d1:df:8b:
ab:f3:a4:e8:37:b2:81:3c:d3:61:3b:77:1a:a6:d7:de:b6:3a:
0c:8b:a7:8b:f9:52:15:73:72:51:79:30:c7:f4:51:10:91:33:
ad:53:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:13 2026 by rpki-client