
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
File: 087oS-qHJyzTkXdA9b2Te-JvmKM.roa (raw, json)
Hash identifier: hJU1HOP1aMHGU6G9/JSMNmXdsXcJIPSdxT8vgNpZ5ZA=
Subject key identifier: D3:CE:E8:4B:EA:87:27:2C:D3:91:77:40:F5:BD:93:7B:E2:6F:98:A3
Certificate issuer: /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial: 0D60
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
Signing time: Fri 22 Aug 2025 08:57:00 +0000
ROA not before: Fri 22 Aug 2025 08:57:00 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7483
IP address blocks: 103.229.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 06:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Validity
Not Before: Aug 22 08:57:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=D3CEE84BEA87272CD3917740F5BD937BE26F98A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:0b:ee:3e:60:71:e2:c2:46:11:68:20:34:
c8:b6:20:ca:a5:fd:32:82:da:c9:9c:b8:b8:6c:94:
ea:2c:d2:10:59:dd:dd:7c:4c:e5:76:76:17:a2:42:
4c:8c:ba:07:08:31:61:ea:39:36:d7:58:35:1f:46:
83:a0:c8:fc:d9:17:b9:3d:e0:5b:da:04:7e:b7:bf:
18:0f:05:21:a1:14:6f:40:f5:5e:85:2f:8e:96:aa:
28:b9:16:3e:5e:41:b3:84:91:63:14:f9:ee:23:95:
38:ce:0f:75:54:e6:87:82:89:5f:0d:e4:68:8a:9c:
b5:d6:e7:e1:6f:14:b2:ba:25:25:32:0b:ec:d7:a1:
df:09:ed:4a:c8:d8:98:50:90:9e:ba:b4:42:ff:c8:
42:a0:86:8b:b0:63:60:c4:77:ad:1f:ff:e2:ac:f4:
aa:3c:a5:25:f0:87:18:bc:80:f2:79:70:29:2d:bb:
dd:e0:98:75:0c:91:b0:d4:c0:a3:bc:0b:58:e2:3f:
fd:73:22:20:44:ab:db:2a:90:9d:3c:84:3c:d6:61:
10:cf:ea:a4:60:75:f6:56:32:ac:7f:a9:85:5f:83:
30:5f:db:91:2b:1e:2f:cf:8e:46:09:4e:c1:69:95:
6d:43:9c:02:59:d9:f0:c9:45:38:61:a7:4d:76:57:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CE:E8:4B:EA:87:27:2C:D3:91:77:40:F5:BD:93:7B:E2:6F:98:A3
X509v3 Authority Key Identifier:
keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/087oS-qHJyzTkXdA9b2Te-JvmKM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
41:04:7b:87:7e:5f:76:96:8c:83:99:95:ea:77:4e:fa:71:da:
0a:5e:1d:32:e3:2b:32:c3:27:72:6b:6e:4a:d4:62:c7:c4:0c:
0d:58:bc:98:30:d3:05:e9:56:8a:fb:31:35:e9:1a:dc:9c:0c:
40:eb:31:b8:e3:b8:38:9b:ed:a1:50:e9:67:60:a9:56:3d:c3:
d2:45:54:55:ba:7e:9c:ab:96:85:cd:71:2e:05:c9:33:95:2b:
c0:72:fb:8a:61:39:a9:fb:b1:79:01:84:6f:4e:bb:d3:19:6b:
20:9f:b5:3b:41:73:2c:e1:af:69:35:8b:ea:02:d1:6a:71:96:
7d:9b:f9:51:7d:cd:01:69:93:5a:c7:71:e5:a3:0c:86:b6:22:
09:77:ce:a5:3e:9a:b2:d1:a7:60:75:22:bc:75:30:d8:d8:19:
28:8c:5f:10:e0:da:d7:76:ef:0c:4d:9e:5d:c9:ca:0b:44:e8:
91:82:7e:e4:70:a0:14:ea:0c:af:07:6a:91:ab:9a:57:c5:58:
4c:a1:9a:0e:ba:a9:be:d1:85:70:de:ae:03:2e:e9:2a:77:d2:
c7:29:20:06:ed:c5:53:7d:b0:a0:79:ce:6f:4d:88:0b:b5:0a:
28:aa:b5:04:48:5c:5f:57:15:35:b8:b1:dd:20:36:29:ba:58:
0d:f9:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:25:18 2025 by rpki-client