
$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f34382d3438203d3e20313331363338.roa
File: 323430323a333065303a3a2f34382d3438203d3e20313331363338.roa (raw, json)
Hash identifier: 5S/0+5kTJSCJtjY+G5g70pY/TEYg4PSwgmkuSXQz62g=
Subject key identifier: D0:58:A9:9B:19:EE:C7:7B:56:D6:51:4B:BD:30:DE:11:84:B2:6A:42
Certificate issuer: /CN=0273304A820906A512D2F0D86CA293A77222962C
Certificate serial: 07EF9944116FF2442C2C64A68351362F7C3665B8
Authority key identifier: 02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f34382d3438203d3e20313331363338.roa
Signing time: Mon 11 May 2026 17:57:55 +0000
ROA not before: Mon 11 May 2026 17:52:55 +0000
ROA not after: Mon 10 May 2027 17:57:55 +0000
asID: 131638
IP address blocks: 2402:30e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl
rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ef:99:44:11:6f:f2:44:2c:2c:64:a6:83:51:36:2f:7c:36:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0273304A820906A512D2F0D86CA293A77222962C
Validity
Not Before: May 11 17:52:55 2026 GMT
Not After : May 10 17:57:55 2027 GMT
Subject: CN=D058A99B19EEC77B56D6514BBD30DE1184B26A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:5c:9b:9c:7e:a3:3f:0e:cf:15:4b:a2:db:
8a:1b:21:93:8c:3f:b1:5c:43:e2:fa:28:34:94:b4:
b0:91:2d:bf:56:71:ce:0e:ab:91:34:83:58:32:17:
f9:d1:1d:3e:08:5d:21:08:0f:5e:88:16:f8:4f:9c:
b6:05:b5:11:2d:26:d6:d7:5b:e2:0a:c1:28:40:22:
91:13:f4:26:d4:a4:fd:4a:be:3b:c2:92:1b:9a:21:
55:cf:f7:96:57:b2:ea:c6:17:36:89:bf:92:a4:b8:
e7:5d:48:be:ac:40:5c:cc:5d:6d:b2:36:25:5c:cc:
a6:b8:98:98:91:9d:ea:49:64:a6:23:4d:ff:ca:f8:
14:45:ae:e7:09:f6:3b:e2:31:8a:59:71:43:44:e9:
8b:f2:5c:98:6a:9a:a8:8e:d2:71:95:65:0b:3a:41:
ba:80:62:3f:4c:e7:6f:0d:6d:df:10:be:8b:40:30:
de:ed:33:96:ed:6e:e3:6c:84:0f:56:5c:53:fb:a9:
38:9e:45:b6:08:ef:f3:6f:d8:de:1b:ec:34:43:77:
e0:9c:3e:68:0b:8b:6a:e7:84:e5:d9:fc:1e:58:64:
da:26:4c:24:0d:28:b2:06:16:a1:d8:c9:89:42:aa:
3e:b1:5e:2f:ff:c4:d5:6d:20:be:3e:06:5b:a5:ab:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:A9:9B:19:EE:C7:7B:56:D6:51:4B:BD:30:DE:11:84:B2:6A:42
X509v3 Authority Key Identifier:
keyid:02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f34382d3438203d3e20313331363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:30e0::/48
Signature Algorithm: sha256WithRSAEncryption
80:07:d1:e7:0e:20:d5:57:61:03:6a:bc:b8:6d:95:5f:d6:9d:
3b:42:a5:e8:02:f1:5a:46:a4:85:58:78:20:9c:48:88:20:88:
f7:04:a6:56:ee:d5:a2:3a:71:6e:b3:74:fe:3f:0e:32:78:71:
00:fe:fb:46:36:8c:01:f1:dc:9f:d5:b8:b9:83:ec:86:b2:b7:
ae:d4:06:c8:6c:40:9a:92:0d:ed:6b:ce:03:d1:01:a2:12:94:
0b:ea:69:3f:60:e0:73:97:74:dd:72:27:1e:75:7a:6f:67:e3:
33:e9:66:ca:7f:f6:ea:fe:64:6f:08:53:b6:b1:4a:7f:d4:e0:
09:67:bf:0d:9d:63:d5:d0:82:aa:3b:46:d1:78:4f:5b:fc:b1:
20:da:72:95:d8:a6:87:78:3d:48:3e:46:e6:08:08:33:70:07:
ae:d7:37:e3:6e:1f:59:3b:46:fe:8d:93:46:6e:73:c0:11:e2:
dd:cd:27:d6:b0:82:76:93:ed:f5:2c:59:1d:e6:b2:f9:7a:0c:
ab:3e:f6:a4:ee:43:9b:03:d4:45:e7:ac:e8:a7:29:e7:01:3f:
88:b2:1f:36:2f:0f:a3:a9:3c:70:73:36:68:9a:d4:d8:4c:48:
05:66:85:e6:51:68:a7:d2:e2:bb:b4:a4:7d:ea:33:04:6e:5d:
9c:ba:ce:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:35 2026 by rpki-client