
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
File: FUXuk2vn6bIce9bKUsjgcU3uKuA.roa (raw, json)
Hash identifier: AlEHns3LLEzjhg4CMpFq+KVvLFXubOBq1MABYszcBx4=
Subject key identifier: 15:45:EE:93:6B:E7:E9:B2:1C:7B:D6:CA:52:C8:E0:71:4D:EE:2A:E0
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 03E7
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
Signing time: Fri 22 Aug 2025 08:55:56 +0000
ROA not before: Fri 22 Aug 2025 08:55:56 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38047
IP address blocks: 103.182.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 07:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Aug 22 08:55:56 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=1545EE936BE7E9B21C7BD6CA52C8E0714DEE2AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:99:2b:1e:14:71:a0:3c:f9:7c:77:15:c2:
05:42:08:9b:34:fa:dd:f8:05:63:06:7d:08:dc:f6:
bb:6e:12:da:23:f8:3f:42:dc:83:e0:34:71:a4:5f:
c2:74:63:4a:2c:de:cf:5b:7e:e6:49:cf:ab:76:35:
76:3d:3c:96:a9:a1:a6:3d:1a:19:ff:c6:04:ef:25:
fb:e7:bd:67:e0:b1:e1:08:5a:85:4e:bb:8d:50:13:
56:36:30:a3:fc:d5:23:03:81:4f:6d:dd:a4:60:b2:
a1:c2:a6:e7:f1:b6:b1:81:e5:c9:7d:4f:2a:66:52:
cd:fc:b7:78:4e:d1:57:25:ec:f4:72:cd:aa:6d:34:
a3:07:b4:e9:da:99:36:95:8c:80:a5:35:85:52:6b:
8b:b9:da:a9:fa:43:d5:3e:28:7d:46:0e:b3:55:a3:
78:b1:c5:53:3f:68:f0:f6:e5:91:0f:90:5a:89:00:
b3:13:0d:66:96:81:04:a7:24:1f:46:e5:36:bf:81:
0d:d7:51:7e:06:49:00:a2:e0:e9:bb:84:c7:c5:51:
e5:ad:66:b8:b8:14:ee:0b:86:8f:e3:f2:49:ab:6b:
a0:53:a3:b9:75:ed:95:cb:1f:c2:51:d8:4f:39:7d:
08:8b:78:6e:05:22:44:21:5d:c5:c8:55:4b:38:88:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:45:EE:93:6B:E7:E9:B2:1C:7B:D6:CA:52:C8:E0:71:4D:EE:2A:E0
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/FUXuk2vn6bIce9bKUsjgcU3uKuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.226.0/23
Signature Algorithm: sha256WithRSAEncryption
09:99:e7:ee:98:c8:bf:1a:d0:96:71:7b:3b:53:fa:b7:ac:7c:
3a:61:d3:0b:6c:d9:cb:61:35:75:d4:97:22:72:fd:97:16:67:
38:d3:7c:0d:be:9f:34:13:c8:72:fe:ed:32:a6:34:5b:9e:93:
05:53:2c:11:09:0f:c1:a9:39:b4:95:4c:73:1c:44:51:ad:3c:
1b:9e:b2:86:01:9c:06:82:4e:44:a1:c0:bd:d2:d4:28:a2:95:
e1:4a:8f:65:4d:4a:9d:ad:74:57:d9:9e:ce:81:38:81:88:68:
95:ea:2d:f9:73:84:ea:24:80:d3:e4:93:d2:77:2f:40:05:59:
03:65:05:77:c4:27:a4:73:9c:e9:11:43:d4:ef:e3:34:3d:5c:
a0:e8:e0:38:4f:5c:81:6b:fd:1c:30:ba:95:79:26:9d:75:d9:
9c:8d:e7:f5:a2:ec:59:b1:20:32:f0:5d:01:ab:04:4c:5a:c3:
82:73:7d:fe:1f:98:60:db:d8:0c:c4:a1:7d:40:ce:ab:7e:23:
16:78:c0:9b:46:7e:9e:ca:d3:10:56:c2:78:50:cf:68:de:fb:
5e:21:00:31:27:a6:94:5d:03:73:20:a4:a9:b2:c7:ff:94:73:
82:c3:1a:3b:42:3f:1c:4a:69:ad:8b:04:b0:85:31:27:31:45:
45:fa:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:47:41 2025 by rpki-client