
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
File: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=
Subject key identifier: 58:7F:0A:C3:C7:31:F6:30:69:18:13:9D:AB:83:52:F7:E8:6E:32:D2
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 1F1A31CC05339E6B1DB23FFC4F5092671EF134DA
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
Signing time: Tue 08 Sep 2026 07:44:07 +0000
ROA not before: Tue 08 Sep 2026 07:39:07 +0000
ROA not after: Tue 07 Sep 2027 07:44:07 +0000
asID: 4780
IP address blocks: 103.234.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1a:31:cc:05:33:9e:6b:1d:b2:3f:fc:4f:50:92:67:1e:f1:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:07 2026 GMT
Not After : Sep 7 07:44:07 2027 GMT
Subject: CN=587F0AC3C731F6306918139DAB8352F7E86E32D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:ea:1d:83:ca:b4:a6:6f:07:44:e1:e8:ba:
d9:2a:50:68:17:a8:9d:61:34:25:0e:27:db:21:02:
5e:b8:f6:f3:1a:0c:a3:d5:98:22:b4:6c:6e:d1:2d:
ca:04:22:0a:87:3f:d2:c1:dd:c4:bd:f5:25:55:af:
2c:84:9c:97:1d:93:4a:54:30:8f:3b:ac:88:ca:ed:
82:af:00:40:db:ed:2e:b9:5d:56:c0:1f:24:09:fc:
de:85:dd:29:4d:99:e5:07:85:64:e4:e1:66:46:50:
c9:07:e7:f2:f8:6a:73:63:17:d3:c5:ef:5b:a1:8c:
02:32:18:f2:f0:fb:55:be:a9:3b:ff:f2:89:74:0b:
6c:57:11:e0:93:44:95:a6:35:ec:40:47:64:dc:62:
4d:28:39:c3:9b:f4:ba:58:85:3a:6f:9e:49:fb:13:
4e:34:28:28:6e:7c:60:69:c4:95:1e:cf:2b:62:f9:
b0:03:71:ea:a0:2c:65:5b:93:b6:af:61:a6:ef:22:
1d:1f:51:8b:14:4e:d4:d3:3a:0d:28:68:dc:9e:bf:
47:86:a7:f0:95:b2:64:dd:34:9a:cb:14:cf:be:cd:
f8:fb:43:01:32:d2:69:82:37:c7:09:b2:59:16:28:
c0:36:5c:01:5d:0c:21:c7:56:fa:72:a4:61:f7:84:
1d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:0A:C3:C7:31:F6:30:69:18:13:9D:AB:83:52:F7:E8:6E:32:D2
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.234.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:22:72:8d:f5:05:c1:44:a9:75:93:fa:8a:64:bb:38:91:ad:
c3:e8:42:95:17:6b:07:37:32:05:18:b1:43:0e:89:4a:bd:d4:
b0:d5:a8:63:42:3a:6e:f0:0c:2a:f5:f0:42:f5:65:3a:0f:ba:
cf:28:b7:e9:33:5d:54:11:cc:49:4d:e2:c4:10:aa:86:fd:aa:
e7:17:9b:f2:1a:06:aa:b6:a5:16:5e:6f:cc:33:aa:fb:13:fd:
13:75:e5:b7:db:6f:8a:6e:4a:ab:bd:31:d8:79:b7:ad:14:ee:
5c:6b:c9:c9:c4:78:5f:43:73:f4:98:d6:32:21:c8:e3:7d:35:
b2:80:47:6f:ce:35:15:10:90:d6:1d:32:32:71:fe:14:b0:fb:
a5:be:d9:e8:4d:42:55:25:3a:59:db:01:d3:56:d6:05:f1:4f:
f5:ef:2f:1c:a4:2e:49:f2:a4:1d:d2:21:08:24:2f:d5:98:78:
89:ae:98:7f:f9:ff:98:2a:d8:39:cd:de:02:5d:86:3b:cd:18:
c7:55:ca:6d:de:db:b5:39:42:f5:a5:c7:ed:e6:a9:29:e7:ed:
ee:2d:8c:af:70:de:ca:f9:42:24:6e:0c:d4:0e:c9:c8:82:36:
8a:97:a3:02:57:f3:94:98:27:0d:83:6c:c1:1c:39:8e:11:d0:
40:33:b2:5a
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUHxoxzAUznmsdsj/8T1CSZx7xNNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx
ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDdaFw0yNzA5MDcwNzQ0MDdaMDMxMTAvBgNV
BAMTKDU4N0YwQUMzQzczMUY2MzA2OTE4MTM5REFCODM1MkY3RTg2RTMyRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdW+odg8q0pm8HROHoutkqUGgX
qJ1hNCUOJ9shAl649vMaDKPVmCK0bG7RLcoEIgqHP9LB3cS99SVVryyEnJcdk0pU
MI87rIjK7YKvAEDb7S65XVbAHyQJ/N6F3SlNmeUHhWTk4WZGUMkH5/L4anNjF9PF
71uhjAIyGPLw+1W+qTv/8ol0C2xXEeCTRJWmNexAR2TcYk0oOcOb9LpYhTpvnkn7
E040KChufGBpxJUezyti+bADceqgLGVbk7avYabvIh0fUYsUTtTTOg0oaNyev0eG
p/CVsmTdNJrLFM++zfj7QwEy0mmCN8cJslkWKMA2XAFdDCHHVvpypGH3hB2xAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUWH8Kw8cx9jBpGBOdq4NS9+huMtIwHwYDVR0j
BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv
MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF
OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzAzMzJlMzIzMzM0
MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfq5DANBgkqhkiG9w0BAQsFAAOCAQEAfiJyjfUFwUSpdZP6imS7OJGtw+hC
lRdrBzcyBRixQw6JSr3UsNWoY0I6bvAMKvXwQvVlOg+6zyi36TNdVBHMSU3ixBCq
hv2q5xeb8hoGqralFl5vzDOq+xP9E3Xlt9tvim5Kq70x2Hm3rRTuXGvJycR4X0Nz
9JjWMiHI4301soBHb841FRCQ1h0yMnH+FLD7pb7Z6E1CVSU6WdsB01bWBfFP9e8v
HKQuSfKkHdIhCCQv1Zh4ia6Yf/n/mCrYOc3eAl2GO80Yx1XKbd7btTlC9aXH7eap
Keft7i2Mr3DeyvlCJG4M1A7JyII2ipejAlfzlJgnDYNswRw5jhHQQDOyWg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:19:09 2026 by rpki-client