
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313534383633.roa
File: 3136332e35322e34382e302f32332d3233203d3e20313534383633.roa (raw, json)
Hash identifier: shEV5P1Z7iR1epgz7W9iSMPfO0+iLMmq/ivWmOEe9oc=
Subject key identifier: 30:BE:AA:B9:79:BA:38:0C:1C:F2:35:0D:89:FF:0E:D8:52:D2:96:BB
Certificate issuer: /CN=66D96CED70B44D758AE1282092DC175FEFC03195
Certificate serial: 5E01E19C6F160B38BBD061B77FCC1549C6D43A83
Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313534383633.roa
Signing time: Mon 19 Oct 2026 10:04:04 +0000
ROA not before: Mon 19 Oct 2026 09:59:04 +0000
ROA not after: Mon 18 Oct 2027 10:04:04 +0000
asID: 154863
IP address blocks: 163.52.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 22:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:01:e1:9c:6f:16:0b:38:bb:d0:61:b7:7f:cc:15:49:c6:d4:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195
Validity
Not Before: Oct 19 09:59:04 2026 GMT
Not After : Oct 18 10:04:04 2027 GMT
Subject: CN=30BEAAB979BA380C1CF2350D89FF0ED852D296BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:5f:ba:af:4e:61:f3:64:85:0c:cd:d6:eb:
8b:59:51:7d:ac:60:95:92:5e:99:19:d2:58:90:ee:
1d:6c:ba:ff:16:d4:b0:e0:22:20:2c:45:9b:12:23:
a1:9f:16:40:e0:a7:4d:51:41:07:0b:2d:0c:f9:14:
2f:0d:21:43:f7:01:f7:50:5a:d0:e0:0d:ec:7b:28:
16:96:fa:7f:85:9f:8a:f8:b5:5e:94:e8:64:05:4c:
4a:ca:a7:54:4d:9f:36:bf:0c:b5:92:24:63:17:04:
47:78:77:b6:f4:35:98:4f:85:70:e8:8d:d6:64:8f:
e9:5d:43:08:b8:d8:94:6a:96:85:e7:9e:0b:21:12:
26:e9:96:11:5e:fc:ba:2d:a4:e6:a6:df:d5:99:5f:
3a:8e:fa:69:b9:01:45:cf:a4:6f:f3:8e:02:98:92:
9b:e9:0b:0f:40:2a:cc:27:ae:3c:55:68:c9:fb:1e:
21:44:b4:d9:f2:fb:46:72:b6:df:d2:a4:37:f2:41:
56:c9:4a:bd:9d:d4:56:8f:57:3d:b6:1f:bb:83:75:
0b:ff:d9:9d:44:33:6f:8d:97:0f:fd:99:4a:75:ff:
57:11:35:8d:ca:69:eb:83:d1:d5:7d:70:93:e2:a8:
94:fb:27:65:d6:c4:03:18:6f:79:03:29:ed:7a:e5:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:AA:B9:79:BA:38:0C:1C:F2:35:0D:89:FF:0E:D8:52:D2:96:BB
X509v3 Authority Key Identifier:
keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313534383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.48.0/23
Signature Algorithm: sha256WithRSAEncryption
31:28:86:7f:57:eb:48:f0:04:b6:22:b5:a3:54:c5:d5:0e:e6:
23:ac:74:70:d6:52:a4:41:6b:17:81:7f:04:2f:21:02:98:37:
20:c5:9d:14:88:d7:43:30:2e:1b:19:0d:a8:35:f5:14:c2:b8:
f6:90:93:d2:4e:eb:22:85:76:30:ab:7a:65:d3:85:84:1e:9b:
0f:26:b1:35:81:f1:17:09:a6:c5:53:53:e1:e7:1b:8f:a9:ae:
17:90:6a:bd:75:97:c3:d9:aa:9f:ea:ed:ef:30:51:0f:03:59:
07:b8:7d:cd:54:9f:3e:f2:90:44:09:90:4e:0d:c8:86:74:f7:
20:e6:14:a0:09:2a:cd:49:16:3a:d3:66:e0:c8:98:7b:f6:3d:
a8:36:e5:5b:fa:9b:db:6b:3e:cf:31:1d:6b:d1:f0:fc:63:59:
63:c4:9f:c3:23:82:a2:64:b7:92:80:f2:59:e7:5c:28:ef:1d:
9a:e8:16:2b:b3:a4:7d:e9:8b:c9:86:be:e5:d1:9d:09:73:3a:
32:3f:1f:9d:4c:48:3f:f5:6b:82:0c:86:70:81:1d:5c:c7:0f:
4f:93:a6:14:e0:54:16:a2:31:24:4b:2b:5d:84:a5:fb:05:e4:
97:61:66:ae:26:d2:94:cb:06:5f:47:cc:bd:93:3c:3a:67:1c:
32:fa:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:13:27 2026 by rpki-client