
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
File: I92FI40ZSz_8Woj3VvD4JfGU-LI.roa (raw, json)
Hash identifier: w9U7beKAPWdi96OvqFDsw9XljntWBGxTsgcfX8tKVmY=
Subject key identifier: 23:DD:85:23:8D:19:4B:3F:FC:5A:88:F7:56:F0:F8:25:F1:94:F8:B2
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 1083
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
Signing time: Fri 22 Aug 2025 08:55:34 +0000
ROA not before: Fri 22 Aug 2025 08:55:34 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 17716
IP address blocks: 120.96.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 06:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Aug 22 08:55:34 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=23DD85238D194B3FFC5A88F756F0F825F194F8B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:0a:eb:bd:5a:51:c7:07:38:79:13:4c:e0:
5a:f2:ef:2b:60:74:3e:a6:eb:5b:5e:3f:d9:03:5a:
90:e6:7e:7e:e3:22:c3:4c:02:2d:dc:db:d7:81:62:
66:0d:a9:f4:76:d3:96:b7:59:9f:8e:e8:02:b7:13:
8f:ff:7b:16:5f:7e:0c:d3:56:8d:d2:d0:23:ba:eb:
7d:be:05:0d:23:cb:20:e0:15:cb:57:4f:d4:90:dd:
69:24:77:87:6a:87:e8:ea:c2:a9:7f:e0:64:c0:33:
2c:54:5c:e4:50:cc:97:a3:71:f9:8c:8f:26:06:29:
0b:a5:2a:1d:58:5a:d5:bb:73:67:86:c1:33:f0:e7:
d7:d3:72:2f:c5:75:70:5d:be:57:4e:85:55:35:10:
cb:f3:55:d3:77:34:87:cb:bd:76:cd:a8:37:77:78:
3e:e3:ec:97:40:e4:26:71:d3:aa:fd:4e:50:a4:db:
dc:02:0f:72:cb:df:a8:cf:fe:41:b5:d4:ba:9f:6f:
90:18:1b:16:ae:f8:ef:42:b2:76:87:3d:e6:c1:5b:
04:4a:c4:f8:81:07:67:7b:3e:0a:15:07:a3:79:66:
a2:df:65:bd:55:41:49:27:ae:61:30:4a:ee:54:04:
5b:21:e5:df:fb:74:d4:31:15:76:0f:82:42:b9:71:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:85:23:8D:19:4B:3F:FC:5A:88:F7:56:F0:F8:25:F1:94:F8:B2
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/I92FI40ZSz_8Woj3VvD4JfGU-LI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
120.96.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9a:f3:89:43:ef:65:55:d4:c3:8f:21:11:2e:48:b2:fb:e1:3c:
97:cd:c8:b4:0d:71:61:f3:1d:bf:a1:f0:a7:c1:48:2c:83:e4:
2d:ed:35:da:1a:50:61:e6:9b:f4:f4:9a:e3:bc:bb:71:56:0d:
03:78:68:eb:ec:0c:8c:74:12:9a:b7:50:b5:64:fc:fa:60:e0:
d1:8c:09:87:49:35:1f:25:36:87:f2:cc:47:0e:20:75:84:b2:
3a:f3:14:6b:b3:1a:8a:e9:6f:be:4e:d8:1a:78:db:e2:bb:f7:
f6:8c:81:90:6e:b4:57:0c:6a:61:60:14:6c:ba:55:76:f8:f5:
3f:33:e8:18:54:d7:37:33:03:81:99:4a:5f:a7:ea:66:12:77:
d2:58:94:0a:01:f4:35:33:ba:23:70:22:34:2d:80:0b:7f:02:
98:6f:92:40:e5:e3:11:73:aa:a1:a0:49:78:88:c5:c4:2f:00:
63:85:33:ff:c5:b6:0d:05:e0:f1:f0:89:93:ec:8a:a2:95:b3:
82:e3:0c:9d:d4:c9:88:03:82:29:7f:0a:bd:bc:e0:ba:04:9e:
30:d6:08:fc:da:eb:e2:67:d2:d6:ea:85:b0:6a:85:7b:98:74:
87:58:d1:0a:4b:15:74:e2:72:c0:68:ad:ed:d9:5e:97:62:8b:
fa:e8:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:14:31 2025 by rpki-client