
$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa
File: 3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa (raw, json)
Hash identifier: qifQcmP7aY3KYLY0YWbHCpcdmaz7oenQE0L1tQ92F24=
Subject key identifier: BF:24:73:68:CE:D5:12:13:CD:B5:55:CD:00:73:FA:54:B5:27:06:DE
Certificate issuer: /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial: 55E91D21301DE4979F7143D3A9D8F66381624E21
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa
Signing time: Mon 27 Jul 2026 01:24:01 +0000
ROA not before: Mon 27 Jul 2026 01:19:01 +0000
ROA not after: Mon 26 Jul 2027 01:24:01 +0000
asID: 203013
IP address blocks: 103.130.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e9:1d:21:30:1d:e4:97:9f:71:43:d3:a9:d8:f6:63:81:62:4e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Validity
Not Before: Jul 27 01:19:01 2026 GMT
Not After : Jul 26 01:24:01 2027 GMT
Subject: CN=BF247368CED51213CDB555CD0073FA54B52706DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:82:63:25:11:70:45:59:bf:88:ea:66:de:
20:24:52:02:8d:23:24:d8:c2:1a:9a:9e:9d:f6:f9:
99:1e:c6:6f:95:d2:dd:a2:21:4c:16:0d:82:62:a8:
a6:33:b3:99:2b:94:40:2a:cd:d2:ad:7e:86:79:5b:
c8:8c:b4:0b:15:cf:77:19:9e:75:d0:37:d4:7f:08:
4f:67:8d:67:c0:e7:56:a9:8e:7d:4c:6a:ad:79:1f:
97:b6:0b:b1:5a:b1:44:b5:cf:e3:b7:af:21:bc:f8:
06:d9:c0:5b:77:45:e6:98:99:34:27:68:c2:5c:2f:
ab:d2:72:1a:8e:c9:5e:d2:c4:3c:22:8d:84:30:b2:
db:58:39:46:85:9b:4e:83:07:db:97:8d:9f:00:00:
69:c3:51:48:42:74:53:2d:23:ee:13:2c:b0:89:17:
fb:e3:62:bf:2e:49:9c:7b:52:70:1c:73:42:af:b1:
1f:fd:a9:0c:69:1e:53:87:2f:ef:34:b6:82:49:68:
99:35:7d:26:ac:16:b3:b1:c9:a6:01:54:f2:6c:0c:
7b:14:8a:d7:c7:e0:44:f4:17:92:7e:2f:fa:d9:06:
0c:17:e2:dd:9b:10:ef:00:09:9c:90:95:26:d6:a4:
2d:bb:eb:a0:72:73:d1:13:e4:d8:bc:a6:bd:c9:48:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:73:68:CE:D5:12:13:CD:B5:55:CD:00:73:FA:54:B5:27:06:DE
X509v3 Authority Key Identifier:
keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32332d3234203d3e20323033303133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:4f:83:4d:89:72:36:e1:67:de:4d:1c:ad:58:9d:44:e3:05:
ec:c4:2f:0c:dc:e9:8f:58:d9:25:62:bc:1d:1a:55:0e:a7:4f:
2f:bb:42:1b:fd:19:ba:1f:e1:6c:39:39:50:96:3c:80:7c:eb:
dc:55:1e:4f:dd:33:27:e7:46:82:21:65:38:f0:95:26:c5:4b:
34:d5:42:3b:5e:e6:88:a6:83:77:0a:d0:da:e9:c3:e1:4c:ea:
44:bd:dc:43:c2:8a:ef:f8:8a:fe:7b:bd:2b:e8:4d:86:e0:13:
de:52:6a:ce:54:bb:88:7d:b0:4c:88:8a:c1:c7:7c:b1:af:85:
cc:9a:48:77:1d:a0:72:0e:ef:36:ee:c5:96:f5:4b:0b:16:f1:
0e:7c:f2:34:9c:03:34:98:56:cd:82:85:da:7a:d3:5c:60:a9:
e5:3a:60:b3:8c:5b:ce:f5:e4:70:0c:36:f3:5a:4f:41:e4:86:
f4:c4:e2:3d:55:c8:a0:2c:32:51:8e:86:0f:6b:b4:1f:aa:1c:
78:db:07:1e:e4:98:e4:1c:a8:97:e2:4d:0e:4c:f9:29:d4:3b:
40:87:9a:fd:8e:75:87:f2:8f:08:a0:00:d8:df:f3:f7:d2:7d:
df:d1:18:84:7a:1b:b7:bc:bc:16:a1:32:3c:10:b5:96:21:ab:
81:8f:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:19:38 2026 by rpki-client