
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
File: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=
Subject key identifier: C0:DB:B1:8E:D3:21:98:40:33:E8:D4:55:9F:B6:10:3F:13:A7:E6:DA
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 45B717FA88F7893A2C8AE01D0D7E028D9EBB3F42
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
Signing time: Tue 08 Sep 2026 07:44:02 +0000
ROA not before: Tue 08 Sep 2026 07:39:02 +0000
ROA not after: Tue 07 Sep 2027 07:44:02 +0000
asID: 4780
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b7:17:fa:88:f7:89:3a:2c:8a:e0:1d:0d:7e:02:8d:9e:bb:3f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Sep 8 07:39:02 2026 GMT
Not After : Sep 7 07:44:02 2027 GMT
Subject: CN=C0DBB18ED321984033E8D4559FB6103F13A7E6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:f3:07:cc:08:5e:2f:91:6e:71:18:73:7b:
a7:bf:53:ef:da:c8:e0:5a:4f:a0:c2:ba:8d:82:65:
b8:b4:65:b0:47:2f:48:fe:00:5d:35:08:e6:12:eb:
06:3e:0c:5d:d4:98:ec:fe:b3:dd:e1:76:d7:34:b7:
13:6b:ec:ef:96:f9:dc:ae:9e:fe:90:c6:67:e0:96:
6e:aa:88:f3:83:59:db:14:2e:6a:f2:a3:f1:ba:28:
a9:83:5f:e7:e9:4b:94:3d:69:1a:ff:91:f0:5d:49:
d5:9b:04:6e:31:9e:9a:84:32:77:22:51:f9:41:4f:
c2:4e:2f:f4:4f:83:7e:12:4e:9e:36:a0:ac:34:7e:
7a:29:6e:c1:e9:d6:3c:cc:a7:23:1d:1a:9e:d7:39:
f4:14:68:f8:d0:68:f2:e2:7f:37:db:fd:81:5f:bb:
b5:b0:00:f3:d2:ae:d5:84:a1:11:56:e4:cb:16:6b:
f6:eb:07:79:54:ae:18:b5:e6:95:f5:11:6a:71:46:
03:9b:f5:4b:65:76:4e:54:7e:12:44:a6:8d:3e:42:
43:93:e5:d6:3a:a4:4b:89:14:ad:d4:80:98:e6:c4:
00:f0:a6:21:14:be:37:cf:ee:f9:4d:ca:fe:33:9a:
12:46:ec:76:e1:92:45:75:eb:f9:bd:af:12:62:b6:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:B1:8E:D3:21:98:40:33:E8:D4:55:9F:B6:10:3F:13:A7:E6:DA
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e2034373830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
20:fc:b0:15:25:65:e7:c7:b5:9c:b0:e7:aa:5d:0b:40:e5:e2:
84:c3:de:4a:f5:81:3d:5c:81:6d:7e:fe:37:df:19:2f:65:2b:
65:2d:f1:a7:4a:e9:05:9b:a5:ab:c8:33:2f:ab:e8:10:29:82:
71:bb:6a:f0:f2:4b:62:0f:0c:9b:58:dd:03:1d:a0:35:fc:f8:
c7:cf:e0:d5:89:8c:fd:60:63:9f:07:e0:ec:e6:ff:a9:d4:a8:
24:98:bc:36:2a:c1:ea:41:c1:81:93:ec:cc:1d:4f:87:99:bf:
60:a8:ad:44:c9:6a:8c:3d:8e:8a:65:8f:fb:9d:e2:3a:c8:b8:
ac:ae:53:4f:0c:d2:f3:f1:65:a6:21:e5:5d:83:f9:86:c2:6f:
12:de:cc:9e:3d:e6:f7:c2:ce:ea:cc:c0:22:0b:0a:2b:f8:7a:
63:f3:6d:09:6d:ff:89:5c:0e:b6:66:38:e5:00:1d:b0:b9:0f:
ba:b2:0b:83:92:f4:5e:75:48:4e:d9:f7:f5:8e:3e:6a:ba:17:
c2:02:01:f7:f2:0e:e4:63:30:2f:74:4b:9e:ef:5a:92:4b:c9:
47:b1:11:5b:3f:96:1e:e9:46:df:b3:0f:d9:f8:00:df:cd:53:
23:95:d5:5f:16:5d:3c:15:28:bb:61:e5:94:c9:26:4a:ef:c0:
a3:3e:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:44:32 2026 by rpki-client