
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
File: Im31FTFfq7IOcudn-2_HewXDFWk.roa (raw, json)
Hash identifier: zmCRMqPOYjEc5y0kRvM2blLF0CnRGLncQ1XjOYcj8Tw=
Subject key identifier: 22:6D:F5:15:31:5F:AB:B2:0E:72:E7:67:FB:6F:C7:7B:05:C3:15:69
Certificate issuer: /CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Certificate serial: 0571
Authority key identifier: B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
Signing time: Wed 05 Nov 2025 08:25:43 +0000
ROA not before: Wed 05 Nov 2025 08:25:43 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 14618
IP address blocks: 103.196.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Nov 2025 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6309F8375AC6D867CF14C95F27A74E4D2DF19BD
Validity
Not Before: Nov 5 08:25:43 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=226DF515315FABB20E72E767FB6FC77B05C31569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:65:0e:06:02:7f:63:63:15:35:4b:ee:4c:
7b:27:ed:dd:e2:a5:9f:32:7b:47:f3:6c:31:63:48:
61:cf:cc:8f:b6:33:af:5e:c8:a9:0c:ae:d0:2c:eb:
89:38:6c:47:d4:2f:d5:7b:35:b7:03:24:11:aa:54:
95:23:e6:6d:94:7c:2a:dd:00:3c:3d:ae:b3:e0:4e:
b6:b0:9c:c1:3f:ea:ec:75:5a:dd:0b:07:73:34:a0:
df:d1:b9:25:ff:53:b0:44:6c:2b:73:08:43:26:8e:
be:dd:d6:b4:bc:3e:40:da:cc:4a:32:09:b1:a1:b0:
a9:8f:9e:03:5d:59:7a:74:39:2b:05:8b:07:4f:ec:
ec:ca:21:5c:20:09:39:ac:fa:e4:a0:d8:a1:a4:93:
8c:38:99:96:e2:a5:03:e2:05:89:9b:62:3e:8e:34:
b2:e0:ae:f4:35:3d:d3:47:20:dd:e3:57:37:e9:7f:
2d:5d:7b:36:3c:b9:71:16:f1:39:87:6f:59:f5:6e:
ac:8d:7a:7d:19:34:97:ae:09:82:15:9d:7c:7d:74:
62:d5:12:19:92:1a:6d:db:7d:02:31:c0:ed:45:26:
22:85:44:8e:dc:34:b1:05:0f:bf:c3:12:c3:01:36:
14:d0:42:ea:cf:48:86:88:45:64:26:b3:64:6c:51:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:F5:15:31:5F:AB:B2:0E:72:E7:67:FB:6F:C7:7B:05:C3:15:69
X509v3 Authority Key Identifier:
keyid:B6:30:9F:83:75:AC:6D:86:7C:F1:4C:95:F2:7A:74:E4:D2:DF:19:BD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/tjCfg3WsbYZ88UyV8np05NLfGb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tjCfg3WsbYZ88UyV8np05NLfGb0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKIPTECH/Im31FTFfq7IOcudn-2_HewXDFWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.196.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:bc:7d:08:5a:22:71:f3:c0:e1:ad:59:43:12:83:56:ba:fb:
94:79:a2:0d:92:54:8e:e3:f4:24:ab:82:38:59:e9:5c:f6:9f:
9a:fd:a5:e0:9c:21:f6:d2:da:df:b6:f9:49:ff:d0:3f:f4:4a:
e4:2d:3d:cb:15:61:93:4b:79:6b:98:ef:fd:64:10:e6:d8:57:
cb:3e:20:01:e4:ba:f2:b0:07:96:87:e5:23:c5:83:16:c7:75:
21:6a:27:2c:8e:40:96:b4:7f:1a:34:28:6a:c6:3e:ad:e4:f3:
f0:55:e8:5b:1b:ac:49:7c:bd:8b:98:ab:87:9a:ee:8e:7d:29:
86:d5:7e:33:9f:36:c9:68:b1:e2:cf:07:42:75:70:03:fa:27:
e6:45:03:d3:85:8d:93:88:83:8f:fe:7f:b3:e3:b3:cd:22:b3:
00:ab:f3:2c:11:43:18:a2:5e:fc:82:df:73:f9:9d:42:a1:0f:
96:7f:fc:16:b3:09:79:45:38:79:af:47:4f:11:a7:34:47:26:
20:7b:63:03:cd:9e:75:48:83:3b:0d:95:1d:fb:59:8c:fe:00:
e5:90:b5:0e:28:21:d4:cb:33:d2:ec:7b:63:9c:ad:b8:ae:e8:
7a:8c:b0:7e:8d:be:e9:f6:f5:75:50:24:bb:ca:33:14:69:7f:
e7:10:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:09 2025 by rpki-client