
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa
File: 3136332e35322e34382e302f32332d3233203d3e203136353039.roa (raw, json)
Hash identifier: 05sw/iNxOjMToSHlWrP8oS+PndLKFpZVlB1gnJyBxxs=
Subject key identifier: CB:72:E9:19:82:2A:22:40:80:93:69:72:29:CE:63:66:08:AA:27:04
Certificate issuer: /CN=66D96CED70B44D758AE1282092DC175FEFC03195
Certificate serial: 38E0592250CC0B37FCB47A68FABC5DE387F94DC5
Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa
Signing time: Mon 19 Oct 2026 10:04:01 +0000
ROA not before: Mon 19 Oct 2026 09:59:01 +0000
ROA not after: Mon 18 Oct 2027 10:04:01 +0000
asID: 16509
IP address blocks: 163.52.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 22:15:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:e0:59:22:50:cc:0b:37:fc:b4:7a:68:fa:bc:5d:e3:87:f9:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195
Validity
Not Before: Oct 19 09:59:01 2026 GMT
Not After : Oct 18 10:04:01 2027 GMT
Subject: CN=CB72E919822A22408093697229CE636608AA2704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:06:35:cb:7f:4a:2b:3a:35:f1:a6:4f:19:
75:7f:d8:59:75:10:cd:ba:b1:b7:81:a2:89:fd:4c:
3a:67:23:3a:a8:44:95:03:31:79:c5:56:ac:b8:96:
89:73:bc:78:48:9f:28:9e:04:9b:e7:da:e5:11:f2:
35:39:18:38:85:97:97:31:a2:eb:55:91:27:19:f2:
1a:6f:95:67:2b:89:03:7f:76:62:b5:11:a2:ed:df:
cd:bb:78:87:5f:fb:f7:36:1f:cb:c1:fd:ac:3f:e1:
a6:b2:1d:d1:44:6e:a5:c6:d0:3e:cf:1a:13:f5:eb:
6a:f2:df:24:bf:c6:23:59:cd:a4:06:9d:17:52:65:
a6:1b:20:ae:76:53:1e:fd:85:aa:9d:3c:8a:73:35:
2c:df:ae:52:f8:52:a2:c7:36:7f:c2:2b:ed:bd:7e:
71:19:aa:a1:80:ed:fa:cf:4d:c2:04:16:ca:72:9c:
3f:5b:dc:a6:6d:eb:84:88:17:a5:2c:9e:2c:c4:96:
23:93:60:e8:73:1e:a0:b1:ff:5d:a2:12:59:8d:19:
2c:3b:9b:4f:50:fe:b0:e3:54:cf:93:92:3b:df:1d:
0d:fd:4d:92:0f:44:f5:7c:b3:66:f7:52:46:b8:32:
0a:25:6c:ea:dc:1a:ec:9e:d6:a8:ac:a0:01:cb:9e:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:E9:19:82:2A:22:40:80:93:69:72:29:CE:63:66:08:AA:27:04
X509v3 Authority Key Identifier:
keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.48.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:02:14:4c:dc:d0:44:f3:72:57:e8:89:69:7b:a2:5c:bf:00:
e5:e8:fb:d2:a6:11:65:a3:be:dd:84:4f:7f:fb:f7:d9:d2:6e:
89:c8:c0:ec:10:ca:e1:72:bf:82:7c:bf:20:93:18:8e:f3:a6:
67:94:bc:b3:27:9b:0d:dd:18:91:fe:9f:93:c7:5d:a6:88:20:
3a:55:38:ae:0b:55:25:85:b6:ba:da:85:59:55:b7:9e:1c:86:
33:b4:3f:01:7f:3a:a1:b7:c1:d8:82:c6:4c:8e:3d:b0:0f:41:
c8:55:2f:55:6a:0e:cb:ee:d6:8c:66:98:16:f5:bc:4a:16:f8:
40:88:85:67:38:c2:9c:e2:47:6e:fa:e6:3f:e2:03:e4:97:f5:
fa:fe:60:8d:1c:f7:dc:f5:09:15:f2:e5:d2:bd:61:4a:71:0f:
89:ae:6e:3f:98:7a:37:0f:66:2d:db:15:ce:14:6f:36:ed:f6:
3f:df:c2:c1:cc:70:ed:6d:96:e6:1d:20:bc:c6:1e:a7:c4:25:
cd:5c:99:3a:88:82:fc:09:44:53:72:d6:94:6a:27:d8:95:79:
5e:74:73:9a:19:be:9a:24:95:27:e2:09:ba:41:48:82:b1:93:
72:dc:dd:9a:86:de:39:89:cc:5b:ad:4e:77:32:d6:7f:c3:63:
58:f5:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:58:49 2026 by rpki-client