
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SYVC/JSVpDCofBtGtBRwEA9DRu3szGSM.roa
File: JSVpDCofBtGtBRwEA9DRu3szGSM.roa (raw, json)
Hash identifier: ZWtcS0iPkjoRjUPoPAYTRf6Exn4J0Rpt0CEHhiwkK6g=
Subject key identifier: 25:25:69:0C:2A:1F:06:D1:AD:05:1C:04:03:D0:D1:BB:7B:33:19:23
Certificate issuer: /CN=7448D66FF329D2945C52EA01A567578B50026717
Certificate serial: 03BF
Authority key identifier: 74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/JSVpDCofBtGtBRwEA9DRu3szGSM.roa
Signing time: Fri 22 Aug 2025 08:57:44 +0000
ROA not before: Fri 22 Aug 2025 08:57:44 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 7483
IP address blocks: 2400:63e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 06:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7448D66FF329D2945C52EA01A567578B50026717
Validity
Not Before: Aug 22 08:57:44 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=2525690C2A1F06D1AD051C0403D0D1BB7B331923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:88:51:50:94:0d:f1:cf:60:a2:3b:d7:37:
fd:bd:f6:f9:fc:7a:af:43:0c:c1:f8:90:47:29:ba:
78:87:f5:b5:87:92:eb:0e:be:ae:6b:c2:5d:f4:dc:
44:41:67:9b:9a:0b:ee:6c:50:56:59:18:1d:d7:ea:
a0:cc:4a:a8:fa:03:fe:59:71:29:72:be:3a:00:b3:
ab:2e:27:90:21:b8:bb:60:37:a1:91:0a:11:1f:5b:
11:14:ae:6c:d9:87:ad:07:a8:07:75:51:14:60:90:
d6:e1:74:e9:30:95:08:e4:0e:cc:18:e4:9d:e3:45:
6a:14:74:13:87:8d:60:ca:6b:ff:da:d5:41:91:75:
d5:06:5e:b2:f1:65:93:45:ff:b0:11:0e:97:89:fd:
8f:43:c1:3a:2d:a0:46:6e:7c:a5:af:71:4e:4a:a7:
5a:83:9d:0b:d9:a0:f4:03:4a:da:6f:17:50:4e:c2:
a7:7d:af:4d:16:91:18:28:62:a3:6f:a7:01:68:6b:
cd:11:32:81:e6:54:ab:89:ff:35:07:22:2f:87:e4:
1a:c3:b6:6f:44:af:0b:27:91:1c:47:2b:10:da:f4:
ac:c0:8b:b5:2c:9c:13:21:c4:9d:b7:5e:cf:ee:39:
cf:7f:34:a9:12:9c:b3:4e:13:69:42:99:18:36:0d:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:69:0C:2A:1F:06:D1:AD:05:1C:04:03:D0:D1:BB:7B:33:19:23
X509v3 Authority Key Identifier:
keyid:74:48:D6:6F:F3:29:D2:94:5C:52:EA:01:A5:67:57:8B:50:02:67:17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dEjWb_Mp0pRcUuoBpWdXi1ACZxc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SYVC/JSVpDCofBtGtBRwEA9DRu3szGSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:63e0::/32
Signature Algorithm: sha256WithRSAEncryption
77:cb:95:e5:ff:cf:02:2d:66:ca:a0:a3:58:01:16:1d:b2:3e:
f9:6f:80:0b:90:d6:c0:89:36:16:57:27:e6:20:cf:5e:28:f6:
56:9a:52:98:37:d3:ba:f9:71:4f:96:7e:05:43:99:61:be:b3:
55:47:78:32:9c:1b:2c:c5:30:56:5f:c7:12:9c:db:37:5a:59:
fd:3b:71:9e:43:38:50:0a:95:73:77:fa:93:fb:96:e3:bf:a7:
fc:10:ca:d5:88:9c:4e:45:c3:f7:81:35:2b:76:f3:66:a4:9c:
90:4e:fe:87:c3:c0:c2:97:0f:3c:57:be:d5:27:a5:a4:27:02:
c0:c7:9d:94:5c:f2:14:69:56:68:c5:91:c4:5d:b2:aa:92:44:
f1:06:6d:d1:ef:16:5d:ed:37:8d:80:30:fa:e5:cf:73:55:38:
ef:79:03:17:f7:14:e3:33:32:ec:51:c8:73:9d:a2:fc:e4:49:
93:c3:66:d0:95:36:c3:3a:84:30:d4:c1:95:c1:d1:84:3a:d3:
5a:6f:06:a3:53:7e:b4:58:70:ea:c3:c8:4c:d3:7c:27:f6:44:
23:90:cb:4c:96:10:85:8a:c7:dc:1f:be:13:36:1b:ea:f0:e2:
ad:74:56:8b:ac:8f:89:b4:0c:d1:e1:4f:97:3f:3e:5a:e8:a5:
31:69:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:28:45 2025 by rpki-client