
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa
File: 3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa (raw, json)
Hash identifier: KA0OUMP7ljY4AzOV5ZHcM5DuWTOfHvm6pZOogffe2ro=
Subject key identifier: 5E:7C:9C:54:27:BD:63:12:16:00:BA:63:C0:0D:45:37:B2:A2:9B:9A
Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial: 1374F3908613EC4AD262C7EAED34445DB0C7A84D
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa
Signing time: Wed 16 Sep 2026 06:44:00 +0000
ROA not before: Wed 16 Sep 2026 06:39:00 +0000
ROA not after: Wed 15 Sep 2027 06:44:00 +0000
asID: 207550
IP address blocks: 187.79.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:74:f3:90:86:13:ec:4a:d2:62:c7:ea:ed:34:44:5d:b0:c7:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Validity
Not Before: Sep 16 06:39:00 2026 GMT
Not After : Sep 15 06:44:00 2027 GMT
Subject: CN=5E7C9C5427BD63121600BA63C00D4537B2A29B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:6b:08:05:eb:b2:1b:7c:2a:a8:df:41:42:
16:15:c3:4d:60:70:56:fc:f9:7d:0a:90:75:84:3c:
2c:60:3b:da:36:18:a8:82:6a:0e:9b:f8:71:b5:3c:
5c:22:43:8f:a3:19:e4:8c:05:3b:c5:09:07:f0:be:
ce:1a:17:7d:cd:a0:28:a3:e9:47:41:2b:16:2e:26:
29:1e:68:9a:fb:37:3e:b5:cc:b4:49:f2:79:4d:86:
e9:22:b8:0d:52:30:e7:49:79:e6:27:13:c3:a4:eb:
8c:4f:a7:a9:10:90:16:dc:8a:c1:ed:d2:cc:9b:90:
7c:1d:0e:a2:6f:5d:fe:12:40:ed:4f:27:9a:32:9e:
6f:e3:94:ba:bc:f3:a8:d1:5b:3a:b1:fc:82:ff:5e:
4c:7a:09:9f:6d:d1:d5:dc:f9:35:9d:1c:4e:76:a5:
be:8d:96:11:b4:a2:1c:4e:57:64:20:4b:2b:f9:fe:
d4:fb:73:a0:c1:01:0a:4e:94:0f:b1:f6:0b:9c:65:
8c:1e:b5:c0:a5:a3:dd:fd:1d:9e:08:27:cc:2a:99:
f2:88:90:5b:93:09:4d:64:c0:5c:be:5e:c7:37:e2:
eb:f0:1c:32:ae:b4:3b:86:8c:44:ab:20:7a:01:1f:
ab:6e:17:d4:85:3b:60:76:f3:a4:71:47:82:e2:61:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:9C:54:27:BD:63:12:16:00:BA:63:C0:0D:45:37:B2:A2:9B:9A
X509v3 Authority Key Identifier:
keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230382e302f32312d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.79.208.0/21
Signature Algorithm: sha256WithRSAEncryption
83:a3:54:26:24:a7:54:57:d5:9c:8b:56:25:a1:bb:7d:96:30:
b6:c9:f0:4b:64:53:6a:0f:80:25:62:36:9d:06:1a:90:f3:87:
45:ed:8b:dc:43:e6:22:e1:37:64:bb:bc:7a:fb:7a:75:bf:35:
83:22:b6:72:5a:97:39:fc:7c:61:02:f2:24:41:9e:54:a0:2e:
1e:71:2c:91:75:1c:48:88:13:c7:33:89:93:64:02:58:eb:2e:
32:2f:81:46:21:2b:86:64:ba:7a:19:3a:d6:98:f1:91:68:fb:
3f:52:7f:9e:40:bd:21:a5:bf:c9:e0:d0:21:f7:5f:f7:dd:e7:
c2:40:3f:27:b8:a3:d2:95:8b:f0:ad:fd:94:22:4f:33:13:22:
61:6a:0a:6d:69:ae:0d:67:49:41:bb:74:fd:61:9a:d4:dd:d8:
05:f1:65:35:ea:16:c3:b6:66:6a:28:79:71:27:65:cf:d4:24:
2f:40:a7:d5:19:e0:2e:17:34:73:a1:8e:84:91:36:e5:62:d1:
8f:cd:98:ec:a8:d1:3a:f0:17:08:68:00:81:68:26:09:42:d0:
25:e4:91:a0:60:e7:57:a9:5c:f0:82:6d:3c:89:f1:1d:cd:e0:
55:8d:d6:a6:3c:ed:f0:45:5c:9e:05:8d:70:0d:3b:8c:43:8a:
df:57:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:01 2026 by rpki-client