
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa
File: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=
Subject key identifier: 83:21:4B:52:C2:DD:9B:18:6A:0D:AF:65:83:9B:31:E3:B4:2D:10:06
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 51E94B32DAA84E9B60BDED6E177399809A84A44C
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa
Signing time: Tue 08 Sep 2026 07:44:01 +0000
ROA not before: Tue 08 Sep 2026 07:39:01 +0000
ROA not after: Tue 07 Sep 2027 07:44:01 +0000
asID: 4780
IP address blocks: 150.129.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e9:4b:32:da:a8:4e:9b:60:bd:ed:6e:17:73:99:80:9a:84:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:01 2026 GMT
Not After : Sep 7 07:44:01 2027 GMT
Subject: CN=83214B52C2DD9B186A0DAF65839B31E3B42D1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:80:42:7a:48:d4:37:52:4d:d8:57:44:a3:
ff:df:38:72:11:29:c2:b4:70:0d:57:c9:27:8b:aa:
8b:bf:90:8f:b1:7d:77:4a:d1:d2:fa:d7:3e:08:31:
ac:36:06:fa:d6:c6:91:67:61:cc:28:68:4e:75:cc:
32:fc:fa:15:64:54:40:ea:5c:d5:51:a7:24:ea:ca:
30:7e:62:28:d0:75:58:a9:9f:ce:c3:dd:e9:be:54:
ca:a1:91:f7:2e:ca:38:df:c5:b5:3f:4e:7c:2a:8a:
0c:fe:b2:dc:51:bc:3e:4a:3e:68:dd:c8:cb:1f:fb:
be:92:6a:68:b9:e9:41:ab:4a:08:7c:a3:ec:ba:86:
82:cf:02:09:cd:6c:10:85:43:14:1d:31:c9:5e:17:
79:6e:a0:c8:f4:69:2b:e6:ff:54:80:b8:e3:30:af:
42:66:78:0c:5d:19:e6:81:f0:b2:7c:90:28:fc:e3:
6d:83:37:ff:da:ee:9f:3a:c9:b3:81:fa:4c:cc:6e:
ab:cb:97:63:64:c0:69:ff:d5:76:b8:26:f7:dd:e8:
e3:bf:48:04:15:78:c8:03:47:54:9a:00:db:d6:24:
18:4b:eb:42:8e:c3:a6:17:12:62:f1:77:b3:2f:8d:
94:fa:a8:ca:54:ea:be:bd:8b:6a:8a:fd:b8:f2:be:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:21:4B:52:C2:DD:9B:18:6A:0D:AF:65:83:9B:31:E3:B4:2D:10:06
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.72.0/22
Signature Algorithm: sha256WithRSAEncryption
13:92:bc:e2:f0:ad:89:ae:42:86:a8:c5:10:da:51:7d:22:75:
b8:ce:40:44:f9:71:8f:58:39:ad:7d:63:6c:33:5e:6b:dd:a9:
22:1f:14:0e:ab:72:7c:3a:c2:f6:cd:5c:f0:9d:b6:7e:e4:ba:
c6:42:fd:f7:a6:82:15:4e:a1:1a:84:f5:9a:7c:8a:2a:e4:b7:
3d:1c:3b:b8:fc:ff:f9:db:16:b9:fc:f7:a7:38:11:8f:9d:b1:
8a:47:df:c2:e1:26:aa:f4:c9:91:80:4f:9b:c1:78:d8:69:6a:
b2:86:9b:bc:54:4a:4e:d6:f5:40:72:c4:01:2b:28:aa:61:66:
21:9a:d8:7a:46:b8:30:9b:aa:88:2e:ed:13:a1:97:a1:83:72:
34:1f:e4:04:ce:3c:e4:36:53:a6:fc:40:18:38:84:a0:9f:2d:
7a:ff:54:91:f5:7b:19:56:83:2b:2e:df:9e:49:63:28:67:39:
69:9a:3d:33:87:e9:56:cb:f9:5a:b3:07:99:16:11:83:ff:d3:
d8:b7:02:29:7f:41:0f:2a:4e:47:27:e7:d9:f2:c9:e8:50:d3:
4a:31:2b:60:7a:4f:ab:4c:9e:60:86:5e:bf:0e:17:39:c8:a0:
59:27:59:97:d6:94:a8:e8:55:bb:8f:85:49:65:a7:50:3b:88:
41:c0:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:01:33 2026 by rpki-client