
$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa
File: 3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier: R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=
Subject key identifier: 83:4B:82:FA:55:8A:9D:A4:D4:50:32:21:26:F9:55:34:86:E7:98:2D
Certificate issuer: /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial: 409B302576D280D02A86EBDC5402246D0A8D794F
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa
Signing time: Wed 27 May 2026 04:23:51 +0000
ROA not before: Wed 27 May 2026 04:18:51 +0000
ROA not after: Wed 26 May 2027 04:23:51 +0000
asID: 21859
IP address blocks: 165.101.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 19:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9b:30:25:76:d2:80:d0:2a:86:eb:dc:54:02:24:6d:0a:8d:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Validity
Not Before: May 27 04:18:51 2026 GMT
Not After : May 26 04:23:51 2027 GMT
Subject: CN=834B82FA558A9DA4D450322126F9553486E7982D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:ee:e5:f9:e3:06:29:3e:b4:a3:23:92:41:
9d:0d:f0:46:2c:42:73:b3:a8:04:bb:73:77:0c:3c:
59:58:b4:27:a1:73:2e:4d:a3:a6:ce:99:b9:66:c5:
c8:48:13:22:46:fd:06:85:19:a0:90:c6:11:51:3d:
d2:ce:65:b2:5d:d0:91:4d:1d:12:32:ff:dd:9c:10:
ea:3b:ab:b7:5b:3f:9a:f4:ea:e0:67:eb:f0:d2:73:
f7:60:eb:ec:ad:6f:2a:67:d9:5a:62:12:26:de:c8:
ed:ae:ad:b5:99:33:8a:ea:67:68:0a:f6:0a:49:e5:
a1:5a:c7:67:21:11:83:e4:e8:55:8d:d5:a1:9d:c2:
fb:cf:70:4f:67:43:c1:0c:db:2e:4e:f1:1f:41:d0:
be:ec:60:a1:fd:94:4b:d7:29:ce:c4:64:1b:59:ad:
8a:29:12:1a:bf:47:15:1d:14:23:6a:69:fe:af:a6:
d9:ef:02:91:10:fa:a8:f7:f4:f1:de:cb:df:8d:5c:
26:2f:1b:32:e4:6d:0b:5c:df:ba:63:78:22:38:e6:
eb:7d:19:d6:db:1e:2e:c8:af:aa:22:75:20:14:61:
9e:da:39:f8:d4:39:a0:cb:ee:0e:b3:5e:14:13:76:
98:09:31:64:17:76:61:74:80:09:9a:5d:5b:a8:85:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:82:FA:55:8A:9D:A4:D4:50:32:21:26:F9:55:34:86:E7:98:2D
X509v3 Authority Key Identifier:
keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.101.28.0/23
Signature Algorithm: sha256WithRSAEncryption
99:e2:21:2c:94:e3:7a:00:7b:47:49:fb:50:5f:08:98:4c:f0:
ad:b7:4b:01:3a:f2:0f:79:17:27:ad:d0:55:8b:6d:65:78:46:
2a:3e:f8:07:40:2d:aa:34:d3:76:ba:43:8e:0a:7c:f1:ed:e7:
2d:50:c4:bc:2e:b1:08:a3:df:dd:e0:5e:f2:25:34:91:26:fb:
ab:a8:1c:50:62:c5:50:56:cc:e0:30:cc:cd:95:e3:de:fc:e7:
fc:ce:bf:8d:a8:4f:b2:1c:4f:e0:7a:13:4e:9f:c5:ca:51:63:
fb:50:33:27:2b:51:70:86:96:de:c2:77:06:be:52:75:71:ab:
ca:6d:82:9d:49:2a:e6:4d:ac:01:b0:d4:cf:40:bc:87:e3:31:
8d:00:ac:33:b9:53:86:88:e7:5b:41:3b:da:77:7e:b6:1e:64:
09:99:95:9d:46:95:cd:0d:db:c2:35:10:7f:ad:8f:0d:39:a2:
1a:74:64:95:2f:9b:a0:70:0f:a4:d6:e5:4c:94:54:bd:9b:8b:
bb:91:5b:a3:ef:bc:a8:60:60:64:e5:8b:a8:39:27:82:31:63:
99:a8:13:05:5b:75:82:87:1e:31:28:f4:a0:b0:6f:3c:d2:4d:
04:b1:86:7b:63:3c:b6:d8:c5:36:35:f6:1d:63:a6:78:6e:d3:
e0:1f:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:35 2026 by rpki-client