
$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa
File: 3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (raw, json)
Hash identifier: WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=
Subject key identifier: DF:76:B6:3B:0D:16:6C:2D:DA:BC:55:6D:B7:68:B6:FF:0A:B2:F3:0D
Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial: 474FC66AEEA86CD5EFB8F4F64F53F2EDAF808BE9
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa
Signing time: Wed 09 Sep 2026 06:24:01 +0000
ROA not before: Wed 09 Sep 2026 06:19:01 +0000
ROA not after: Wed 08 Sep 2027 06:24:01 +0000
asID: 132369
IP address blocks: 211.73.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4f:c6:6a:ee:a8:6c:d5:ef:b8:f4:f6:4f:53:f2:ed:af:80:8b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Validity
Not Before: Sep 9 06:19:01 2026 GMT
Not After : Sep 8 06:24:01 2027 GMT
Subject: CN=DF76B63B0D166C2DDABC556DB768B6FF0AB2F30D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:1d:da:1f:5d:2c:d3:1b:ba:9a:1f:d5:4f:
0c:47:ef:6c:46:19:70:92:86:6f:7d:2f:88:34:bc:
15:45:e1:55:de:a5:a5:7b:6e:72:b7:ed:3c:93:5c:
37:b8:86:17:bb:5d:2c:2e:63:3f:f7:c2:98:8c:83:
f3:5a:e6:a5:83:e2:7c:71:e5:3d:26:df:e4:a4:d5:
76:bf:8c:08:04:97:91:ed:f4:45:3c:f7:7b:ef:96:
95:5c:29:bc:6f:0e:c3:e0:80:2a:6e:06:1c:a6:a9:
82:d3:e4:fe:5d:21:80:ff:4a:01:73:81:d4:42:b8:
74:c1:2c:8e:4e:13:1b:cd:a1:b7:38:9c:fc:bd:37:
99:7f:c0:64:b1:d9:8c:87:cb:b0:f3:4c:61:f5:a1:
d2:19:c2:10:30:02:d2:5f:a8:7a:df:69:a9:c4:f4:
5d:ac:6e:da:bf:77:32:fc:8d:40:0e:00:64:d5:b0:
c8:5f:6b:67:10:b5:77:f1:1f:d6:11:e9:fb:30:64:
0b:6a:42:47:26:fa:b5:0d:98:a8:c5:fc:f8:2a:80:
e9:44:33:7b:24:f1:30:5e:53:e4:1f:98:56:8d:89:
a6:a2:78:d4:a4:84:21:cb:ef:b8:1c:55:7d:97:10:
fa:a8:6a:d7:70:e6:92:db:7d:06:28:10:3d:4c:87:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:B6:3B:0D:16:6C:2D:DA:BC:55:6D:B7:68:B6:FF:0A:B2:F3:0D
X509v3 Authority Key Identifier:
keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.73.102.0/23
Signature Algorithm: sha256WithRSAEncryption
82:04:5a:70:ac:42:05:02:79:dd:b1:58:d0:78:b4:5b:5f:b7:
26:01:ab:ca:2e:8c:8a:65:2b:94:dc:f6:fe:90:91:7e:c0:91:
35:1b:5e:4a:5f:fc:26:f2:22:73:91:9c:17:97:e0:3e:be:b5:
75:7f:1b:e6:5d:72:32:ee:fb:98:23:f2:3a:ef:fe:d4:36:ab:
0c:66:ea:42:a5:74:e2:59:1c:03:db:07:4b:19:27:19:5e:0a:
93:12:59:db:3f:85:f2:38:ca:92:5d:79:fe:6a:0a:13:36:d7:
f3:fb:fb:97:61:6c:cf:70:1c:67:55:49:40:12:e8:0e:4f:40:
7c:da:72:66:31:4e:6e:a3:0d:4c:5b:60:ed:a4:84:c9:d6:72:
fb:06:1d:7e:b7:f7:85:89:bd:d8:f1:f2:bb:3e:6c:32:a3:63:
07:09:50:c6:0d:44:15:3b:09:c3:e5:f8:44:92:85:a4:83:04:
9a:17:ca:77:4e:66:b6:88:05:e7:c6:dd:e6:9f:5e:68:35:08:
f1:3d:7a:ca:54:55:c1:ab:f5:8e:a3:c3:8d:50:b0:de:04:f6:
80:9e:4a:b1:b2:56:92:27:80:8c:2c:72:e5:e9:77:dc:ae:da:
40:8f:5b:a1:d3:a2:16:25:c7:7c:6f:7a:b6:36:2d:56:b0:de:
86:a4:ea:7b
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUR0/Gau6obNXvuPT2T1Py7a+Ai+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE
QTVBRUI2ODAeFw0yNjA5MDkwNjE5MDFaFw0yNzA5MDgwNjI0MDFaMDMxMTAvBgNV
BAMTKERGNzZCNjNCMEQxNjZDMkREQUJDNTU2REI3NjhCNkZGMEFCMkYzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiSB3aH10s0xu6mh/VTwxH72xG
GXCShm99L4g0vBVF4VXepaV7bnK37TyTXDe4hhe7XSwuYz/3wpiMg/Na5qWD4nxx
5T0m3+Sk1Xa/jAgEl5Ht9EU893vvlpVcKbxvDsPggCpuBhymqYLT5P5dIYD/SgFz
gdRCuHTBLI5OExvNobc4nPy9N5l/wGSx2YyHy7DzTGH1odIZwhAwAtJfqHrfaanE
9F2sbtq/dzL8jUAOAGTVsMhfa2cQtXfxH9YR6fswZAtqQkcm+rUNmKjF/PgqgOlE
M3sk8TBeU+QfmFaNiaaieNSkhCHL77gcVX2XEPqoatdw5pLbfQYoED1Mh4orAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU33a2Ow0WbC3avFVtt2i2/wqy8w0wHwYDVR0j
BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT
Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF
NDg4NUY2QkRBNUFFQjY4LmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05JTUJVU0NPTS8wLzMyMzEz
MTJlMzczMzJlMzEzMDMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMyMzMz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQB00lmMA0GCSqGSIb3DQEBCwUAA4IBAQCCBFpwrEIFAnnd
sVjQeLRbX7cmAavKLoyKZSuU3Pb+kJF+wJE1G15KX/wm8iJzkZwXl+A+vrV1fxvm
XXIy7vuYI/I67/7UNqsMZupCpXTiWRwD2wdLGScZXgqTElnbP4XyOMqSXXn+agoT
Ntfz+/uXYWzPcBxnVUlAEugOT0B82nJmMU5uow1MW2DtpITJ1nL7Bh1+t/eFib3Y
8fK7Pmwyo2MHCVDGDUQVOwnD5fhEkoWkgwSaF8p3Tma2iAXnxt3mn15oNQjxPXrK
VFXBq/WOo8ONULDeBPaAnkqxslaSJ4CMLHLl6XfcrtpAj1uh06IWJcd8b3q2Ni1W
sN6GpOp7
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:17 2026 by rpki-client