
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ETIME/l5TsEiGTqU92TjMMAKojRRH-ek8.roa
File: l5TsEiGTqU92TjMMAKojRRH-ek8.roa (raw, json)
Hash identifier: n/7I7dQbVXuGXzHrlchjpaZqLnR2k/uMI3WSs9Kn0KQ=
Subject key identifier: 97:94:EC:12:21:93:A9:4F:76:4E:33:0C:00:AA:23:45:11:FE:7A:4F
Certificate issuer: /CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Certificate serial: 0539
Authority key identifier: E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/l5TsEiGTqU92TjMMAKojRRH-ek8.roa
Signing time: Wed 22 Oct 2025 10:03:27 +0000
ROA not before: Wed 22 Oct 2025 10:03:27 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 134823
IP address blocks: 103.227.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 12:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E0EA885A7E6971C99342777E7DDDBA65D0EB131F
Validity
Not Before: Oct 22 10:03:27 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9794EC122193A94F764E330C00AA234511FE7A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:c4:85:d7:ab:c0:75:3c:9f:c4:54:0a:72:
01:34:dc:1d:44:3b:cc:ba:f7:df:47:74:be:5c:71:
a7:a6:ca:1d:e7:9f:a7:1d:b5:05:3d:75:e6:a7:10:
9d:2e:1e:4d:6b:01:9f:0b:24:3a:20:11:05:c9:5a:
0a:a7:f5:63:c3:e4:58:c1:21:ec:5d:ed:7e:3f:75:
45:07:06:87:36:43:87:22:74:c6:46:6b:54:bb:a5:
44:49:c4:67:7e:1d:c9:15:bd:37:da:84:a1:6d:01:
7a:4c:ab:61:b0:39:35:b9:d1:7f:82:e1:59:c8:4e:
3b:41:9f:3c:79:7e:d7:38:be:b3:0a:eb:3c:d4:00:
60:71:1a:9a:af:ca:4e:85:48:ae:2a:80:01:d4:97:
eb:00:b1:d6:12:33:3e:a6:75:15:3a:61:31:18:fe:
17:2c:ae:59:94:5f:ed:9b:0d:69:bd:6f:7d:4e:e1:
f4:ac:c0:c0:cd:c5:ca:bb:5d:f4:4e:9c:f5:c1:e3:
cc:17:5d:fa:d7:a8:4c:74:9f:e1:20:ad:1e:03:9f:
d3:67:70:2d:59:a4:d7:49:06:f1:81:e4:4f:2e:d0:
50:ba:95:e2:f2:0f:1f:ce:7c:65:ea:7b:4d:b3:50:
28:50:22:75:84:44:7f:76:6b:d3:ab:28:56:56:ed:
87:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:94:EC:12:21:93:A9:4F:76:4E:33:0C:00:AA:23:45:11:FE:7A:4F
X509v3 Authority Key Identifier:
keyid:E0:EA:88:5A:7E:69:71:C9:93:42:77:7E:7D:DD:BA:65:D0:EB:13:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/4OqIWn5pccmTQnd-fd26ZdDrEx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4OqIWn5pccmTQnd-fd26ZdDrEx8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ETIME/l5TsEiGTqU92TjMMAKojRRH-ek8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.226.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:e9:60:24:1c:69:a9:16:c6:c6:be:aa:48:5a:48:ec:32:fd:
c4:bc:0f:4c:b8:ab:d5:f7:e8:70:df:c0:8b:dc:ad:05:4b:77:
b9:72:26:83:29:bb:02:6c:7e:30:ce:88:0c:81:df:07:07:ef:
44:34:f5:2f:de:e1:29:80:09:2d:f4:f0:00:6e:b0:31:8d:e5:
3d:ae:4a:2a:d1:bb:c4:76:e8:36:22:c9:ef:c0:28:c1:b5:c3:
8f:83:5f:e7:0a:e7:e6:99:41:e6:d8:3c:58:dd:5f:61:55:64:
99:d9:23:63:a9:07:a1:ad:5d:d7:5b:43:cd:bf:ae:37:05:fe:
97:b7:2a:f5:23:01:19:95:08:16:94:14:69:2f:e9:9d:b0:54:
37:03:05:58:74:56:27:44:9d:80:5f:59:0a:26:7d:65:b8:22:
21:f3:79:c3:f5:18:73:85:65:dc:13:1e:12:6b:8f:f6:d7:0b:
5d:35:0b:f9:7b:8e:8b:38:eb:68:97:4b:5a:33:3c:3e:a9:27:
ed:1d:9f:6b:d6:d6:8c:b6:08:26:0b:04:2f:80:18:c3:73:73:
b5:2b:e5:6c:98:29:29:50:23:a2:c6:f8:58:9a:b0:26:4b:2b:
ab:5a:50:de:01:2c:0b:0b:1c:c9:a5:fe:37:54:08:83:09:f7:
9d:1b:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:32:17 2025 by rpki-client