
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
File: aao53KVT6s8aI3NzKgEVvSmu_mk.roa (raw, json)
Hash identifier: jErTQ3FS/WDmc4iI4HGd4/DCOyeEz50OD1/Rb/yxGbM=
Subject key identifier: 69:AA:39:DC:A5:53:EA:CF:1A:23:73:73:2A:01:15:BD:29:AE:FE:69
Certificate issuer: /CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
Certificate serial: 08
Authority key identifier: 37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
Signing time: Thu 23 Oct 2025 06:31:49 +0000
ROA not before: Thu 23 Oct 2025 06:31:49 +0000
ROA not after: Fri 16 Oct 2026 15:30:24 +0000
asID: 131657
IP address blocks: 138.252.54.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 13:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3799FB79F3AEB84516A1038E37D2F8AC3CB667C9
Validity
Not Before: Oct 23 06:31:49 2025 GMT
Not After : Oct 16 15:30:24 2026 GMT
Subject: CN=69AA39DCA553EACF1A2373732A0115BD29AEFE69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:4b:74:ae:bd:3f:cf:6e:8b:80:5c:45:64:
c3:d2:41:ff:df:c5:8f:22:8c:11:5b:1c:3a:e4:39:
d2:ab:65:c2:cb:95:4f:af:ee:bf:e9:43:dd:ca:48:
6e:86:63:8f:25:dc:a0:f0:1a:63:84:54:8d:98:f9:
6b:40:07:d1:7a:71:f8:7d:c7:1a:ea:fc:14:21:59:
02:16:74:7d:5c:78:00:57:63:89:e3:df:66:8d:d5:
3d:80:9b:ed:ea:4f:ab:bb:7c:df:58:45:b0:73:ad:
b8:f2:8d:7d:35:f4:ed:2e:b1:43:e4:3e:b5:3f:73:
f6:8d:0e:c1:01:7a:6d:5c:1f:d1:75:81:e3:3e:b5:
e1:8b:48:f5:e6:f9:81:a8:63:c4:64:09:15:04:e9:
06:77:77:35:86:4a:f7:c2:b1:03:a8:9a:f9:74:10:
10:44:cc:96:7b:68:7b:4e:53:a3:73:55:53:a9:28:
a7:ec:12:81:d3:e9:e1:1f:bc:67:c0:9c:5b:0c:a2:
10:63:fe:5d:7e:b7:77:60:79:db:6d:8e:b9:4e:47:
34:02:ba:a4:00:0e:34:9d:26:9d:41:3f:8e:e5:83:
1b:e1:78:0b:c6:a0:be:97:93:64:61:a4:32:c7:3c:
61:07:2a:6d:68:0d:f8:39:0c:48:e3:78:eb:72:de:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AA:39:DC:A5:53:EA:CF:1A:23:73:73:2A:01:15:BD:29:AE:FE:69
X509v3 Authority Key Identifier:
keyid:37:99:FB:79:F3:AE:B8:45:16:A1:03:8E:37:D2:F8:AC:3C:B6:67:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/N5n7efOuuEUWoQOON9L4rDy2Z8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/N5n7efOuuEUWoQOON9L4rDy2Z8k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LONGDETECH/aao53KVT6s8aI3NzKgEVvSmu_mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.54.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:ee:25:e4:da:b6:c5:1e:97:a4:85:e1:f7:16:cd:80:0a:3c:
ba:1b:90:6e:e1:c5:58:b7:67:6d:41:7b:eb:20:7f:81:6b:ab:
c1:0d:d1:6c:aa:c0:1f:12:79:92:e8:5a:7d:48:c5:fc:98:8b:
7f:d0:7b:a2:4a:41:7c:3b:5c:39:d6:f3:2a:89:04:96:11:4e:
ce:88:59:38:69:e5:6f:0e:7e:4a:a9:15:85:33:a1:90:9c:eb:
da:f8:78:05:79:85:f6:4d:ba:27:ab:f4:03:ca:0b:c2:88:9d:
f2:38:33:8c:0c:74:81:f8:59:34:57:70:3c:7f:1b:19:85:32:
38:73:0b:93:2e:7f:21:ac:ce:b8:bb:ce:54:c5:b9:e8:8c:aa:
f4:53:8b:c5:ee:b1:26:4a:ec:a1:1e:15:a6:76:34:18:2f:00:
25:ab:e7:53:86:0f:ba:c1:c1:77:19:e8:eb:8b:96:94:9b:6c:
9e:d5:89:b7:c8:ac:12:3a:a2:c5:00:78:7e:99:d5:a6:2f:4e:
5b:3c:6d:fc:f9:f2:f3:36:68:f4:0b:4a:3f:c2:92:d2:4d:88:
d5:36:6e:1e:83:6d:40:b8:d9:5e:b4:ee:b5:48:31:9f:d9:0e:
5d:c7:17:b0:e8:a0:73:3b:51:c5:78:fa:a5:13:46:cf:c8:e4:
90:c0:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:40:34 2025 by rpki-client