
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
File: nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa (raw, json)
Hash identifier: fclIkSTECSk8GNoe6PnsG3XKY/t9UJJdEsw0zNRyhbk=
Subject key identifier: 9E:C5:57:BE:56:99:0B:9B:23:3D:38:68:57:AF:FA:70:60:0F:7B:96
Certificate issuer: /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial: 0413
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
Signing time: Fri 22 Aug 2025 08:51:41 +0000
ROA not before: Fri 22 Aug 2025 08:51:41 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 213607
IP address blocks: 103.177.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1043 (0x413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Validity
Not Before: Aug 22 08:51:41 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=9EC557BE56990B9B233D386857AFFA70600F7B96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:a8:72:b8:49:b6:8e:3e:9e:d8:52:41:f2:
58:94:df:e5:dc:70:03:31:b4:cf:24:00:0f:b8:c0:
a8:ab:2d:ac:c1:04:fc:9f:7a:67:2f:42:ff:5e:5b:
85:a6:80:34:30:8d:1c:9c:96:3f:c3:7a:79:f4:20:
3b:38:f8:ea:63:0e:3b:54:c5:7c:ac:79:ce:5e:fb:
28:81:84:aa:b8:d8:55:bd:ee:f0:08:de:38:98:15:
5f:fc:64:e6:6d:77:ee:8f:66:85:fa:79:ac:c0:0b:
44:30:56:76:b9:fb:54:a2:d5:a2:d3:31:45:ac:0e:
d5:d0:6d:2d:51:5f:97:06:2f:8b:26:22:7d:ff:7d:
c1:f0:e1:d2:a7:ef:08:76:4e:8f:fc:c8:3c:c2:79:
fc:f1:df:78:55:5c:3d:d3:d4:d2:20:80:0d:4f:1b:
d6:66:46:63:a3:a0:a1:e5:ac:15:ce:30:9c:6d:9c:
b5:f9:85:2f:05:57:72:26:c4:e9:5e:9c:d8:8f:ca:
6d:77:2d:5b:d7:0f:14:29:c5:2a:76:f2:96:a4:af:
ba:5f:03:3f:30:9a:46:02:97:f0:d0:a3:48:d4:90:
d2:e1:c2:e6:f8:04:02:8b:64:af:62:f9:4f:1d:88:
71:b2:49:df:5d:ce:26:5e:2a:a5:84:50:48:c6:0e:
8a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:57:BE:56:99:0B:9B:23:3D:38:68:57:AF:FA:70:60:0F:7B:96
X509v3 Authority Key Identifier:
keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/nsVXvlaZC5sjPThoV6_6cGAPe5Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.32.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fb:09:02:b8:c2:df:a7:0d:dd:93:8a:c7:00:90:e3:1f:06:
0e:49:f5:e5:9d:98:5d:b3:f4:61:7a:8d:26:11:8b:51:44:7c:
39:61:9f:6d:4b:71:4d:65:cd:1d:d6:ce:28:3b:72:74:e4:ef:
da:9e:cb:22:49:7a:64:e1:bd:e7:63:19:f3:a7:df:b1:af:3e:
b8:c8:7c:c8:42:4f:9e:61:1f:e8:c5:9c:54:fe:80:5e:e2:bd:
dd:0b:de:a9:db:5f:8f:ea:3b:cb:3a:db:f9:2d:ed:1d:22:0b:
09:34:62:ca:26:4a:2d:98:13:33:e6:43:95:0f:29:2d:20:8f:
57:47:41:e7:1d:6d:4e:67:ca:8f:88:5b:e1:8f:2b:7a:67:c5:
f4:97:3a:2d:e6:2f:f5:12:fd:76:30:2e:fa:4e:f3:30:24:fe:
b8:d6:52:55:16:47:12:9f:f0:d3:eb:0e:0e:36:6b:d4:e5:c6:
cf:87:fb:dd:39:be:0c:ee:29:18:67:38:16:29:24:58:2c:43:
db:3f:87:85:a0:90:56:7a:0d:f9:b7:21:ec:a3:80:c4:b5:bd:
58:d0:85:b9:15:8c:19:f6:27:4a:4a:74:2d:71:1f:99:70:99:
2a:26:f3:49:ed:57:b3:f0:3f:8d:cf:93:4c:d7:d2:28:03:44:
32:7f:41:75
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjJD
NTEyOThEOTdBMTAyOTAyNzMxRkRDNDlCREZBQjM5RDUyQUIyQjAeFw0yNTA4MjIw
ODUxNDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFQzU1N0JFNTY5OTBC
OUIyMzNEMzg2ODU3QUZGQTcwNjAwRjdCOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDG7ahyuEm2jj6e2FJB8liU3+XccAMxtM8kAA+4wKirLazBBPyf
emcvQv9eW4WmgDQwjRyclj/Denn0IDs4+OpjDjtUxXysec5e+yiBhKq42FW97vAI
3jiYFV/8ZOZtd+6PZoX6eazAC0QwVna5+1Si1aLTMUWsDtXQbS1RX5cGL4smIn3/
fcHw4dKn7wh2To/8yDzCefzx33hVXD3T1NIggA1PG9ZmRmOjoKHlrBXOMJxtnLX5
hS8FV3ImxOlenNiPym13LVvXDxQpxSp28pakr7pfAz8wmkYCl/DQo0jUkNLhwub4
BAKLZK9i+U8diHGySd9dziZeKqWEUEjGDorRAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUnsVXvlaZC5sjPThoV6/6cGAPe5YwHwYDVR0jBBgwFoAUIsUSmNl6ECkCcx/c
Sb36s51SqyswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DUlMv
SXNVU21ObDZFQ2tDY3hfY1NiMzZzNTFTcXlzLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9Jc1VTbU5sNkVDa0NjeF9jU2IzNnM1MVNxeXMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JTUNSUy9uc1ZYdmxhWkM1c2pQVGhvVjZf
NmNHQVBlNVkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7Eg
MA0GCSqGSIb3DQEBCwUAA4IBAQCW+wkCuMLfpw3dk4rHAJDjHwYOSfXlnZhds/Rh
eo0mEYtRRHw5YZ9tS3FNZc0d1s4oO3J05O/anssiSXpk4b3nYxnzp9+xrz64yHzI
Qk+eYR/oxZxU/oBe4r3dC96p21+P6jvLOtv5Le0dIgsJNGLKJkotmBMz5kOVDykt
II9XR0HnHW1OZ8qPiFvhjyt6Z8X0lzot5i/1Ev12MC76TvMwJP641lJVFkcSn/DT
6w4ONmvU5cbPh/vdOb4M7ikYZzgWKSRYLEPbP4eFoJBWeg35tyHso4DEtb1Y0IW5
FYwZ9idKSnQtcR+ZcJkqJvNJ7Vez8D+Nz5NM19IoA0Qyf0F1
-----END CERTIFICATE-----
Generated at Sat Oct 25 21:53:41 2025 by rpki-client