
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
File: zwgEu_7W7FKXxd17sWg7vesVayk.roa (raw, json)
Hash identifier: 0NzhgUmGIAvJNLP0u49GaBjU3QxT2/GtO8g8Yw90gIM=
Subject key identifier: CF:08:04:BB:FE:D6:EC:52:97:C5:DD:7B:B1:68:3B:BD:EB:15:6B:29
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 14E4
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
Signing time: Fri 22 Aug 2025 08:54:54 +0000
ROA not before: Fri 22 Aug 2025 08:54:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4662
IP address blocks: 203.65.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5348 (0x14e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 22 08:54:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=CF0804BBFED6EC5297C5DD7BB1683BBDEB156B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:d8:a3:4a:6c:a7:87:0f:49:71:43:f7:2f:
f2:8b:0b:06:51:ed:ee:72:a9:7b:82:e9:24:13:20:
db:c7:1c:70:69:ff:c0:e1:12:50:cf:2d:9d:a0:65:
d8:db:f6:c4:5a:f8:6a:27:e0:d4:c7:29:89:0f:82:
9a:0d:c7:83:46:be:b4:a2:fd:c3:25:7d:38:1a:6f:
44:5e:ed:6c:6a:f5:b4:93:61:5b:78:d9:97:20:85:
33:a6:86:75:5d:52:7d:d2:8e:1f:d0:07:42:90:cc:
ee:51:59:f7:e2:2f:51:99:de:65:ab:9a:d5:b6:f0:
ff:1a:9b:5b:4e:dd:45:48:78:68:87:c1:3d:73:d1:
6d:db:f6:7d:53:fa:83:e9:ac:1e:46:36:cb:92:72:
1a:a1:7e:7d:f6:27:40:1c:5f:a4:04:a7:18:27:1d:
f9:2a:8d:e8:76:5b:0c:4a:ef:e8:c8:d0:e3:20:e2:
c4:3f:ed:ff:b8:9b:25:8c:fe:4a:79:02:d7:c5:9d:
32:ea:e7:0c:37:e4:10:6b:58:a5:ae:b5:6b:a9:23:
29:a4:50:17:01:2f:e0:2e:c0:5d:54:86:59:e5:d7:
1c:0f:c5:e2:61:4e:87:33:72:a0:7a:50:1f:56:f2:
4e:f9:89:db:f5:ac:28:f2:d1:25:87:d5:51:d9:a8:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:04:BB:FE:D6:EC:52:97:C5:DD:7B:B1:68:3B:BD:EB:15:6B:29
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zwgEu_7W7FKXxd17sWg7vesVayk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:41:a2:e4:0a:71:e9:2b:e1:1f:10:e1:fb:07:0f:3b:65:fb:
40:cc:96:47:89:ef:79:19:1a:c3:f2:ff:f0:a1:5b:38:ca:24:
14:96:17:f7:93:9f:e2:72:03:db:f4:44:76:de:d6:b4:7a:18:
5c:41:fc:ef:e0:8a:31:b8:d3:66:ea:61:31:dc:97:fc:e4:77:
45:69:86:0b:84:7a:18:c4:32:aa:61:3d:fe:cb:ea:fe:1c:70:
a0:da:ad:99:45:49:4c:14:ff:46:86:65:ae:8a:18:44:e4:e4:
e8:28:88:65:5f:ee:9d:c3:e8:6e:29:aa:69:db:ea:85:0e:4e:
7d:d7:08:95:e6:ec:71:17:14:e8:24:58:48:5f:35:ab:e6:80:
ba:29:83:f5:43:7b:6d:35:cb:2c:90:d6:00:41:58:d1:0e:2d:
41:13:f8:c0:0e:96:3e:4e:a3:df:37:32:c1:38:9d:fb:0a:f2:
5e:1d:21:02:f3:1a:5b:48:02:bf:2c:12:b7:fe:e3:47:14:1b:
3e:67:3f:af:40:8d:dc:c7:6d:d6:19:49:c0:3b:38:13:ef:0e:
c6:b8:b3:88:8c:cf:54:29:de:60:5f:c4:70:bc:5e:a6:b0:59:
b3:16:43:67:da:c9:5a:6e:ba:28:ca:bb:73:14:97:8d:be:46:
ad:94:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:45:44 2025 by rpki-client