
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_jt-cq-tivHtpS0BM5qdvkT1VLc.roa
File: _jt-cq-tivHtpS0BM5qdvkT1VLc.roa (raw, json)
Hash identifier: wnslmYYHb8U6QR01qvAaia+fKF1b206cqsR9FhPqqbE=
Subject key identifier: FE:3B:7E:72:AF:AD:8A:F1:ED:A5:2D:01:33:9A:9D:BE:44:F5:54:B7
Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Certificate serial: 0200
Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_jt-cq-tivHtpS0BM5qdvkT1VLc.roa
Signing time: Fri 06 Mar 2026 03:20:59 +0000
ROA not before: Fri 06 Mar 2026 03:20:59 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131630
IP address blocks: 160.30.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 13:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718
Validity
Not Before: Mar 6 03:20:59 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FE3B7E72AFAD8AF1EDA52D01339A9DBE44F554B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:46:f3:c7:59:8b:6c:aa:af:1c:63:05:d9:
96:95:fe:59:14:53:f7:a1:05:bb:a9:65:96:55:05:
17:d0:42:3a:c1:0a:bb:52:5e:55:be:41:ad:81:fe:
cc:66:60:43:58:e3:7f:ce:2d:87:8a:9b:50:cf:5b:
1c:d0:db:cd:3d:22:d6:a3:1c:84:d7:0d:11:6b:2c:
38:26:b9:55:c3:ac:a7:db:ae:d9:05:65:89:04:18:
8d:af:65:b0:5f:fb:7c:83:70:e1:97:13:3a:d6:ab:
0c:bf:19:db:de:28:d4:d5:98:15:85:90:ff:fb:cc:
ee:2e:b5:b6:4f:7b:2a:f5:ca:25:9e:c4:31:71:8f:
66:0d:7b:84:12:91:d1:aa:36:95:fd:9e:c2:6c:3c:
c5:45:98:ba:50:b6:b7:a6:bd:bd:9c:e0:2e:43:06:
71:65:42:05:07:9d:70:67:52:64:a2:f7:77:e4:80:
de:96:82:03:44:53:22:9f:d1:0d:a8:0b:68:0b:af:
d3:a6:db:cb:21:30:b3:bd:1b:2f:dc:94:d2:b5:57:
0b:c7:0e:f5:ba:a7:c5:d2:b9:0f:b3:fc:00:31:0a:
c1:52:13:25:14:b2:0a:90:f9:c1:9e:b5:f2:71:0d:
dd:e6:03:c1:82:5c:87:3f:a8:80:c0:be:90:fa:5b:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:7E:72:AF:AD:8A:F1:ED:A5:2D:01:33:9A:9D:BE:44:F5:54:B7
X509v3 Authority Key Identifier:
keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/_jt-cq-tivHtpS0BM5qdvkT1VLc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b1:9c:cb:90:bf:f8:39:02:41:70:88:4e:1d:fe:e0:b0:79:
84:78:3a:8d:be:20:18:1f:98:23:da:24:61:44:55:03:97:26:
57:20:d0:9d:94:34:69:24:c1:1f:1e:a6:33:b6:09:b8:ea:89:
c0:7b:77:dc:92:00:6c:8f:72:a2:cd:91:ab:15:45:63:f0:ab:
08:c9:eb:be:15:6a:0a:07:ac:a4:ea:55:75:b0:a4:69:b4:ec:
b3:3d:d5:6a:d9:0c:33:42:24:ea:2e:e4:c9:0e:1e:e9:bc:c7:
89:c5:3c:92:d2:e4:ff:bb:b5:ae:a5:5c:36:f2:78:49:ce:be:
5b:fa:ef:4b:15:2b:04:61:db:07:bd:53:91:66:6f:ca:ef:09:
4c:0f:a6:ae:78:a8:7d:68:09:50:a7:62:bf:ca:bf:f2:aa:c2:
9a:a3:e2:e9:03:9e:7e:a7:ea:ce:e9:66:f7:25:9c:84:89:ad:
d3:d4:4b:3b:d7:de:8c:6b:e5:1f:5b:28:ff:12:f5:77:04:c2:
0e:df:9f:ba:e9:0d:80:f4:af:77:27:c7:61:64:5d:b7:89:4b:
06:d5:2b:c6:62:30:9c:ff:08:d7:e8:a0:52:13:3c:cf:cc:cd:
53:86:f1:91:62:35:e1:19:b0:42:f7:5c:12:bd:5d:ab:c9:f5:
9c:83:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:14:11 2026 by rpki-client