
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa
File: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (raw, json)
Hash identifier: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=
Subject key identifier: 83:50:38:00:B3:4F:26:52:2C:85:4E:91:EE:23:7A:14:B5:C0:7F:1A
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 6CBD790293C3797C3800F71FD4EBEA4213DC0B64
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa
Signing time: Tue 08 Sep 2026 07:44:07 +0000
ROA not before: Tue 08 Sep 2026 07:39:07 +0000
ROA not after: Tue 07 Sep 2027 07:44:07 +0000
asID: 18419
IP address blocks: 103.234.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bd:79:02:93:c3:79:7c:38:00:f7:1f:d4:eb:ea:42:13:dc:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:07 2026 GMT
Not After : Sep 7 07:44:07 2027 GMT
Subject: CN=83503800B34F26522C854E91EE237A14B5C07F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:6c:1b:a7:7d:36:33:a5:81:08:5e:fd:b4:
1d:14:a0:b4:7d:58:8b:de:56:34:0d:74:67:23:36:
c8:81:ca:bc:e2:5a:a5:20:07:fc:24:c1:ff:be:07:
1d:97:97:2c:ab:2f:46:b8:5e:3c:92:e3:94:f5:22:
92:64:b6:79:b5:1b:5e:59:2a:dc:15:29:e9:10:ea:
10:a8:2c:63:9b:76:6d:8f:7a:5d:e9:ea:20:fe:13:
52:bb:3e:d7:a7:00:a1:56:81:8d:86:5a:a1:95:7e:
75:81:d8:c4:49:a1:5b:7d:0e:07:93:5e:13:22:84:
ff:28:0d:1f:13:2e:a7:fa:46:d9:8d:44:23:c1:65:
e3:04:de:c7:f8:25:d0:62:85:fb:87:0f:4a:c5:78:
e3:f0:66:e1:a6:68:69:7c:ed:0f:c5:7a:ec:63:9d:
0d:1b:dc:30:92:ad:a9:d5:e7:5b:e5:5c:bd:b2:09:
13:1e:b3:2a:d7:22:98:fb:06:81:61:02:ef:fc:f7:
a5:1a:46:ee:c9:d0:ae:42:b4:5e:c3:fa:d8:35:1e:
4b:49:23:1e:a5:7d:6b:d3:92:33:b0:95:41:c2:98:
41:c2:1b:52:d3:05:11:59:92:f8:c9:69:82:b1:10:
17:c5:5c:6f:d0:71:4b:43:37:1a:c4:1c:ee:ba:00:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:38:00:B3:4F:26:52:2C:85:4E:91:EE:23:7A:14:B5:C0:7F:1A
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.204.0/22
Signature Algorithm: sha256WithRSAEncryption
45:85:2f:a7:0b:09:bf:39:3a:e7:a2:5c:b7:16:d7:37:0e:f1:
00:e3:08:f8:22:ec:ff:d5:39:98:9a:69:20:3e:e0:25:3b:c3:
f1:05:65:17:15:c1:5f:70:f5:80:9c:5a:c3:b5:45:00:86:28:
c7:17:10:ac:71:e9:cd:27:d5:32:dd:71:29:10:d5:24:82:5b:
50:4f:98:df:28:eb:25:6b:a1:ff:55:81:d0:5b:36:e4:0a:27:
6b:93:5c:38:f6:09:bd:a2:62:63:2c:66:74:aa:80:8a:db:fa:
a5:c1:b8:26:08:a5:7b:e2:3c:5d:e7:4c:25:05:39:76:20:28:
1a:fb:51:a3:8e:f1:47:f9:ab:23:94:22:73:fe:58:d8:cd:4a:
57:3f:55:a3:9c:a3:66:15:13:d4:2f:9d:c0:f9:b3:d4:29:d9:
82:61:50:8b:e2:ec:3b:4a:c8:23:20:35:ca:80:98:58:1a:6e:
2e:c2:30:60:5f:27:92:e4:09:54:8f:1a:72:8d:d4:6d:85:47:
d2:ed:77:a6:ae:d4:0c:6b:28:e1:7d:51:aa:b5:63:04:5f:84:
f4:76:67:a1:f6:92:3c:9d:64:87:de:dc:55:a7:7e:d7:33:24:
c5:cc:1c:58:81:2c:ee:87:5e:de:13:20:cc:fa:50:43:a4:53:
ca:88:81:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:14 2026 by rpki-client