
$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa
File: 323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa (raw, json)
Hash identifier: Za7J1hKjGlPncRTIVGAw4R5lobM168tANOUejMUtTGA=
Subject key identifier: F6:93:35:36:59:92:15:86:25:31:C7:56:DB:40:21:E3:78:72:E4:66
Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial: 478C176A565B4AE3025BF4C09483B8CDA558D491
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa
Signing time: Mon 17 Aug 2026 17:24:00 +0000
ROA not before: Mon 17 Aug 2026 17:19:00 +0000
ROA not after: Mon 16 Aug 2027 17:24:00 +0000
asID: 18040
IP address blocks: 2402:43e0:ace::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8c:17:6a:56:5b:4a:e3:02:5b:f4:c0:94:83:b8:cd:a5:58:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Validity
Not Before: Aug 17 17:19:00 2026 GMT
Not After : Aug 16 17:24:00 2027 GMT
Subject: CN=F6933536599215862531C756DB4021E37872E466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:a2:1f:74:7c:5b:bf:e2:57:64:1b:cc:81:
e4:f1:b8:84:ca:69:f0:c0:7b:ab:13:6d:a5:c9:f4:
fd:b1:02:a1:bb:fd:d0:40:3f:39:58:60:79:79:e9:
5c:ec:30:0d:fc:c9:17:90:f0:7f:a7:00:75:26:4a:
bf:be:bb:65:56:f5:f7:9a:71:10:c1:af:f1:8e:64:
6a:f3:0d:a1:8e:10:5d:ea:75:08:df:29:0c:de:af:
40:85:52:98:eb:8b:06:ce:e0:46:4e:d1:11:f7:de:
24:82:f8:7b:5f:13:8a:88:df:5a:78:37:52:01:02:
37:a3:d0:e7:7a:a5:4a:c4:df:e9:ec:36:81:02:76:
43:4d:89:9e:7a:f2:b8:45:f7:04:eb:33:78:a2:44:
1b:bc:6d:33:90:a7:24:e0:bd:c0:91:1b:2b:80:69:
bb:bf:b2:11:29:70:4d:f9:c7:a0:32:b8:88:75:05:
bc:3b:41:9b:9b:94:e8:0b:c4:b9:dd:f0:86:f2:0d:
a0:b2:c6:df:21:a3:45:0c:f9:fd:08:b3:d1:7c:c4:
19:60:4e:bf:90:ce:90:7f:e8:c0:df:3a:15:ec:40:
74:ec:37:de:0a:37:08:80:af:07:dd:96:0d:75:9a:
93:b1:ff:1b:11:9b:ac:12:4c:f6:41:96:95:ad:21:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:35:36:59:92:15:86:25:31:C7:56:DB:40:21:E3:78:72:E4:66
X509v3 Authority Key Identifier:
keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6163653a3a2f34382d3634203d3e203138303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:ace::/48
Signature Algorithm: sha256WithRSAEncryption
7a:c5:40:f7:80:7d:30:0e:16:b7:6e:1c:7f:4b:55:71:31:5a:
42:4f:e8:c3:bf:7c:b4:cb:05:94:a4:9b:86:37:63:ee:39:bf:
19:ad:01:09:13:f6:74:00:89:9a:00:a5:45:f6:66:ab:9e:47:
4c:66:f1:e8:c1:8a:0d:a5:98:bf:ae:67:91:a7:07:70:8c:28:
19:62:49:bd:a8:26:8a:13:d1:b8:9e:3a:aa:b0:62:d0:0e:25:
13:fc:07:ff:15:8c:95:6c:1f:d0:de:69:2b:36:03:e2:ec:7d:
71:e6:13:00:c3:37:e2:0b:8f:47:ed:49:71:b3:92:a7:00:ab:
be:00:f3:a4:2d:71:a6:ac:ea:55:89:c1:8d:80:f4:78:40:2a:
ee:97:44:50:bf:7b:b4:1a:ef:ad:9e:76:ee:21:d0:29:c7:02:
2b:a5:26:07:c1:3b:e8:ea:d9:1e:fb:86:9c:6c:70:51:84:21:
be:0d:43:65:11:1f:7e:63:8c:4a:2c:00:8a:68:43:92:e5:6d:
5d:f4:e4:f5:27:3c:7c:6f:05:a1:95:43:07:50:bf:a2:c7:28:
83:b2:22:57:db:72:19:54:65:59:36:0a:8a:42:10:e8:9f:d0:
da:79:42:48:73:5b:7c:a2:7b:3a:55:39:3f:56:eb:9c:92:4b:
97:94:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:17 2026 by rpki-client