
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
File: k00A3NK9QX8FuS2J0G23V4EOeGk.roa (raw, json)
Hash identifier: hnhcwIOcEj8X76ZvC1POc+g6WNVnxrHR2JZKPoSGXI4=
Subject key identifier: 93:4D:00:DC:D2:BD:41:7F:05:B9:2D:89:D0:6D:B7:57:81:0E:78:69
Certificate issuer: /CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
Certificate serial: 0C
Authority key identifier: AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
Signing time: Mon 27 Oct 2025 07:03:42 +0000
ROA not before: Mon 27 Oct 2025 07:03:42 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 9677
IP address blocks: 103.117.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 09:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB0CB3B24069501EB4E8A5C04E0EEC6511C2C91C
Validity
Not Before: Oct 27 07:03:42 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=934D00DCD2BD417F05B92D89D06DB757810E7869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:10:0d:6b:f3:c3:a5:81:5c:9b:be:bc:59:
ab:d6:5c:5c:e3:e4:2b:a1:65:9b:e5:e2:94:01:70:
58:53:e5:be:78:c6:0e:21:0b:c8:d7:25:5b:37:7b:
bf:f1:1e:10:a9:b2:c5:4d:bf:14:66:9d:18:37:f8:
9b:dc:5a:34:f6:ce:10:2c:5f:e4:0c:6c:94:4d:26:
a1:70:75:40:37:89:b5:0e:96:b7:29:80:4d:eb:00:
7c:9e:b3:7f:49:4e:29:dc:83:eb:05:74:4d:8d:b5:
0d:37:77:95:da:bb:18:b6:4a:35:97:2a:ff:9f:4a:
25:fb:ee:17:65:08:42:98:da:43:7f:ca:b9:79:f9:
c9:ba:b7:33:e1:21:9d:d0:06:d0:32:57:d7:d6:c2:
2a:a8:88:23:91:17:72:9c:ec:f8:66:f6:c2:52:1a:
f2:01:38:7e:92:b4:69:13:0b:48:4b:62:69:e5:80:
3e:d1:14:68:6c:be:a6:0d:ec:d8:99:4d:3d:3a:1d:
b4:49:18:86:81:91:fd:c2:a7:62:a8:fd:fa:77:3a:
d1:b3:17:b5:08:e6:c2:0a:29:5f:24:30:c2:0b:d2:
3b:30:6f:fc:c9:5a:cf:62:48:25:fa:26:1b:8b:df:
df:e7:d9:9e:28:3b:33:5a:04:9e:e1:f2:02:40:24:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:00:DC:D2:BD:41:7F:05:B9:2D:89:D0:6D:B7:57:81:0E:78:69
X509v3 Authority Key Identifier:
keyid:AB:0C:B3:B2:40:69:50:1E:B4:E8:A5:C0:4E:0E:EC:65:11:C2:C9:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/qwyzskBpUB606KXATg7sZRHCyRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/qwyzskBpUB606KXATg7sZRHCyRw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MFE/k00A3NK9QX8FuS2J0G23V4EOeGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.132.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:85:0e:72:0c:a6:7d:48:66:ab:af:dc:03:d4:58:7a:81:ec:
ec:86:db:51:46:b9:ff:86:39:26:be:27:39:f7:f5:90:ae:26:
44:e9:5f:f4:4e:c7:d6:a6:e4:2e:51:e7:a1:ee:38:be:c2:e7:
81:53:d7:47:0d:49:99:df:b1:96:25:8b:c4:f3:2e:43:5c:94:
c3:21:0e:27:22:08:63:cd:79:06:f5:fc:c9:d4:9c:09:38:dc:
1c:3f:b6:59:24:ba:eb:d4:38:71:de:05:63:b6:f9:ff:e3:e9:
2a:d7:ec:63:88:87:ed:16:81:00:35:72:7c:b5:d0:96:9c:f6:
79:41:d6:74:5a:44:41:c0:35:ba:d9:3c:4a:22:ad:7e:8e:47:
29:29:c7:97:d5:75:58:b7:12:dd:e8:54:9a:a9:10:06:32:7b:
b0:f3:89:f8:8c:5f:36:75:f6:c0:61:ca:64:3c:fb:a7:79:8b:
d6:c5:28:8e:45:f0:84:5f:1d:31:61:ba:8e:82:a0:fd:29:3d:
a1:3f:d1:bc:a7:3a:50:71:f2:a9:4f:11:47:5d:c4:ae:34:e9:
7c:2a:70:8b:d7:7c:2b:fc:32:1d:94:16:4f:b0:e9:21:5d:71:
7e:af:44:e1:e1:e9:96:48:15:43:a3:76:27:cb:df:dc:d3:3d:
f3:89:ec:0b
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjBD
QjNCMjQwNjk1MDFFQjRFOEE1QzA0RTBFRUM2NTExQzJDOTFDMB4XDTI1MTAyNzA3
MDM0MloXDTI2MDgyMjA4MTQyOFowMzExMC8GA1UEAxMoOTM0RDAwRENEMkJENDE3
RjA1QjkyRDg5RDA2REI3NTc4MTBFNzg2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMlxEA1r88OlgVybvrxZq9ZcXOPkK6Flm+XilAFwWFPlvnjGDiEL
yNclWzd7v/EeEKmyxU2/FGadGDf4m9xaNPbOECxf5AxslE0moXB1QDeJtQ6WtymA
TesAfJ6zf0lOKdyD6wV0TY21DTd3ldq7GLZKNZcq/59KJfvuF2UIQpjaQ3/KuXn5
ybq3M+EhndAG0DJX19bCKqiII5EXcpzs+Gb2wlIa8gE4fpK0aRMLSEtiaeWAPtEU
aGy+pg3s2JlNPTodtEkYhoGR/cKnYqj9+nc60bMXtQjmwgopXyQwwgvSOzBv/Mla
z2JIJfomG4vf3+fZnig7M1oEnuHyAkAkUbMCAwEAAaOCAegwggHkMB0GA1UdDgQW
BBSTTQDc0r1BfwW5LYnQbbdXgQ54aTAfBgNVHSMEGDAWgBSrDLOyQGlQHrTopcBO
DuxlEcLJHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGA1UdHwRSMFAwTqBM
oEqGSHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvcXd5
enNrQnBVQjYwNktYQVRnN3NaUkhDeVJ3LmNybDBgBggrBgEFBQcBAQRUMFIwUAYI
KwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9x
d3l6c2tCcFVCNjA2S1hBVGc3c1pSSEN5UncuY2VyMA4GA1UdDwEB/wQEAwIHgDCB
mQYIKwYBBQUHAQsEgYwwgYkwVAYIKwYBBQUHMAuGSHJzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS9NRkUvazAwQTNOSzlRWDhGdVMySjBHMjNWNEVP
ZUdrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3JyZHAv
bm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWd1hDANBgkq
hkiG9w0BAQsFAAOCAQEAnoUOcgymfUhmq6/cA9RYeoHs7IbbUUa5/4Y5Jr4nOff1
kK4mROlf9E7H1qbkLlHnoe44vsLngVPXRw1Jmd+xliWLxPMuQ1yUwyEOJyIIY815
BvX8ydScCTjcHD+2WSS669Q4cd4FY7b5/+PpKtfsY4iH7RaBADVyfLXQlpz2eUHW
dFpEQcA1utk8SiKtfo5HKSnHl9V1WLcS3ehUmqkQBjJ7sPOJ+IxfNnX2wGHKZDz7
p3mL1sUojkXwhF8dMWG6joKg/Sk9oT/RvKc6UHHyqU8RR13ErjTpfCpwi9d8K/wy
HZQWT7DpIV1xfq9E4eHplkgVQ6N2J8vf3NM984nsCw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 08:39:03 2025 by rpki-client