
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
File: W_WC4r-sIIhgkM59M2CggTKIhL8.roa (raw, json)
Hash identifier: yS27CKziOX3jHMf34DyTtdMotw9msfH4g4XW2pisfXA=
Subject key identifier: 5B:F5:82:E2:BF:AC:20:88:60:90:CE:7D:33:60:A0:81:32:88:84:BF
Certificate issuer: /CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Certificate serial: 0DD5
Authority key identifier: 96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
Signing time: Fri 22 Aug 2025 08:55:11 +0000
ROA not before: Fri 22 Aug 2025 08:55:11 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 4783
IP address blocks: 210.67.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 07:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96BB94B457F9D82A29B5B2FD9F3A4418899E71EC
Validity
Not Before: Aug 22 08:55:11 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5BF582E2BFAC20886090CE7D3360A081328884BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ef:e2:69:c3:85:8f:ff:ac:67:9d:c7:73:c8:
e8:5f:e8:b8:6b:74:48:03:b0:21:a8:8f:29:32:b2:
af:38:f0:90:37:ee:8b:34:6b:e7:33:f2:bb:67:ae:
37:30:7c:65:6f:b9:27:0f:1f:26:5d:28:17:45:f9:
ba:e7:34:58:d4:31:f7:ac:9b:41:ae:3c:54:ce:70:
fe:18:b4:47:dd:ea:73:91:11:c5:b8:96:f4:8c:bd:
b3:39:59:b5:eb:0a:51:05:b9:cc:21:69:81:24:6a:
b2:51:41:02:4c:fe:c6:60:96:9f:ce:7a:e5:a3:55:
c3:e8:12:06:1f:3a:3d:21:67:5f:1d:26:5f:69:d5:
10:85:5f:6b:07:9d:a0:2b:8d:e5:aa:ee:33:6e:67:
94:e5:75:4b:28:62:b9:6b:fa:26:1a:cc:3c:41:4b:
7b:72:9f:63:38:95:a0:74:5c:a0:51:8e:74:b3:b1:
74:64:a4:ba:ba:df:59:e8:d2:ac:22:f4:7f:21:cd:
60:e0:79:d1:ad:cc:a8:7a:72:15:82:7c:6e:88:dc:
e9:dc:11:75:53:92:f7:7d:aa:24:60:a3:45:50:f5:
47:08:6b:72:d4:17:19:cd:fc:0a:65:12:d4:50:4c:
05:1d:a6:d1:52:dc:d1:3a:f3:3c:86:d5:e7:7d:f2:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F5:82:E2:BF:AC:20:88:60:90:CE:7D:33:60:A0:81:32:88:84:BF
X509v3 Authority Key Identifier:
keyid:96:BB:94:B4:57:F9:D8:2A:29:B5:B2:FD:9F:3A:44:18:89:9E:71:EC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/lruUtFf52CoptbL9nzpEGImecew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lruUtFf52CoptbL9nzpEGImecew.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYSNET/W_WC4r-sIIhgkM59M2CggTKIhL8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
68:b1:c3:44:5f:74:55:1d:e3:fd:fb:3f:77:0d:6c:5a:7b:a7:
32:5a:c2:4b:d5:27:00:b9:c6:2e:63:7e:e4:a0:34:11:96:aa:
02:e9:91:4c:93:55:28:df:fc:dc:fc:50:76:f7:12:97:04:e4:
87:bd:e4:a4:6e:a5:52:28:54:39:49:09:d6:18:b9:d6:81:b0:
c4:07:9e:a7:48:be:f0:3d:fc:84:c6:13:20:4d:3e:50:7c:c1:
2f:a7:9c:62:04:5a:1a:27:c4:88:4f:43:ad:20:53:d1:f7:6e:
4c:2d:c0:dc:e9:02:50:72:cb:d6:33:15:28:77:3f:ca:6a:e2:
91:ce:7f:8a:ab:19:b0:6b:1a:b0:89:4d:16:c7:bd:3c:ed:c1:
76:21:60:d6:a7:26:32:8e:57:c8:9e:ea:11:40:ba:ee:f9:d5:
43:c2:21:d2:f9:e7:32:60:df:3e:7d:91:d1:2f:72:58:84:bd:
cd:4e:db:0b:e3:1b:5b:66:33:b4:df:fb:d6:77:06:07:3a:cb:
1b:16:eb:dd:10:45:78:d2:69:a0:3a:6b:80:0d:77:82:0e:b9:
77:42:c8:cb:79:af:67:cc:d8:8f:d7:f4:24:eb:c6:bf:0a:26:
f7:0e:c3:2e:75:52:c7:a3:94:10:7a:88:24:52:f7:33:15:d1:
2b:9c:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:48:01 2025 by rpki-client