
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rJSRRSJ82eb844ESSTTNRBrTjsM.roa
File: rJSRRSJ82eb844ESSTTNRBrTjsM.roa (raw, json)
Hash identifier: 3XqDY54B2moYjfizW8cWVFahr+o9bn3ZhxmwR0jY+NE=
Subject key identifier: AC:94:91:45:22:7C:D9:E6:FC:E3:81:12:49:34:CD:44:1A:D3:8E:C3
Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial: 0EB0
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rJSRRSJ82eb844ESSTTNRBrTjsM.roa
Signing time: Fri 22 Aug 2025 08:52:31 +0000
ROA not before: Fri 22 Aug 2025 08:52:31 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9416
IP address blocks: 115.43.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3760 (0xeb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Validity
Not Before: Aug 22 08:52:31 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=AC949145227CD9E6FCE381124934CD441AD38EC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:3e:63:95:e4:e4:c7:ba:51:26:5b:db:8c:
c6:5a:b4:b4:ba:e9:21:6d:b8:81:2f:4b:d2:fe:ae:
16:e6:a5:41:bb:d5:5b:6a:a8:6b:9b:ea:43:6c:d3:
00:a0:4a:ca:cd:06:a9:55:a7:6b:a7:e4:5f:ab:d9:
12:33:9d:93:c4:01:fd:9b:55:17:a1:24:be:9f:2b:
32:96:93:97:f1:5a:60:2c:4f:8f:e6:e3:33:bf:c9:
88:17:ac:d2:c7:96:fb:a8:a6:42:64:c2:4d:6d:69:
44:a1:06:82:ca:96:9a:8c:46:77:73:91:8e:85:79:
3b:be:75:9e:69:2b:6f:30:c0:d0:49:cd:32:f0:32:
46:65:fb:78:a2:14:3c:45:42:fb:e0:75:0a:3f:34:
ca:01:cf:34:f4:77:3f:00:a7:69:39:8c:4e:08:a8:
63:50:33:79:6c:b0:61:2e:b1:78:c1:7d:69:f7:19:
9e:11:30:24:61:3c:a6:e3:bb:18:2b:e6:c7:54:c7:
aa:77:30:25:e7:4c:e1:9f:a1:bc:74:45:6b:b6:af:
a2:0a:e8:f4:a1:ed:73:25:c2:fc:a9:0b:b2:47:c7:
fe:e8:39:2f:92:e1:6c:34:a6:d7:30:2e:c1:e3:5b:
65:5f:2b:84:2a:f5:b9:c8:54:f0:ad:50:de:ef:e6:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:91:45:22:7C:D9:E6:FC:E3:81:12:49:34:CD:44:1A:D3:8E:C3
X509v3 Authority Key Identifier:
keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rJSRRSJ82eb844ESSTTNRBrTjsM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:e9:54:e8:55:5f:54:c7:7e:fa:89:15:7e:ba:cb:fc:d0:36:
8d:db:68:53:71:6c:d1:b8:f0:6f:22:12:40:c7:87:9e:ba:fa:
89:f0:0f:bc:ea:55:bf:9b:f3:9b:3f:69:5c:a0:3b:c9:2a:05:
9d:7b:56:18:fb:9b:9a:73:36:24:4b:80:38:3f:df:00:9a:0a:
02:b2:24:7c:90:73:d1:dd:6b:21:a0:cc:5f:e2:fd:87:d3:9b:
70:57:1d:ff:5b:ad:52:37:be:de:c9:6b:6b:15:0f:75:ff:6b:
65:e8:7f:76:9b:0d:bb:b4:91:a8:0b:4b:85:10:31:a0:01:e7:
ac:dd:fa:91:89:14:08:fa:eb:df:04:cd:e5:66:36:b5:13:01:
b2:71:2b:16:03:53:5f:ec:58:e6:10:58:35:01:33:61:70:2f:
cd:5a:b8:46:ae:81:bb:53:4d:7c:51:30:be:28:17:29:ba:7c:
39:2d:1c:8d:72:c5:c7:63:6e:a2:41:40:59:9b:d5:25:45:e8:
1a:d4:09:0e:18:5c:f2:e2:cb:2a:38:08:5e:8e:05:72:51:65:
a1:76:44:bc:4c:e4:98:18:41:df:fd:e8:68:ea:c6:2e:58:ca:
12:d8:3d:8d:bc:1e:42:c7:74:fb:1f:12:97:6d:68:3d:fc:e6:
e5:67:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:41 2025 by rpki-client