
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PqcRuIpsZv2-qDUof-omDyDlXXs.roa
File: PqcRuIpsZv2-qDUof-omDyDlXXs.roa (raw, json)
Hash identifier: 4GBbTq6Qu6cgnx1BUoMSKPOdThFxFTNI6gFX40ptYwI=
Subject key identifier: 3E:A7:11:B8:8A:6C:66:FD:BE:A8:35:28:7F:EA:26:0F:20:E5:5D:7B
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: 02CD
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PqcRuIpsZv2-qDUof-omDyDlXXs.roa
Signing time: Fri 14 Nov 2025 06:51:02 +0000
ROA not before: Fri 14 Nov 2025 06:51:02 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 215595
IP address blocks: 202.160.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Nov 2025 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: Nov 14 06:51:02 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=3EA711B88A6C66FDBEA835287FEA260F20E55D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:c4:22:e9:83:5f:01:95:6d:59:ea:73:3b:
93:c7:26:56:06:76:27:71:b8:6e:c6:5b:cb:cc:d5:
57:9e:e2:55:db:d7:c6:a7:c9:8f:59:83:7a:73:53:
30:85:c0:77:bf:41:46:21:39:a2:2c:a3:98:48:16:
c2:b0:58:96:c0:9c:bd:34:ce:82:ab:ad:8a:d8:12:
d4:f3:3b:04:a3:dd:f5:01:d1:c1:7f:52:50:31:f1:
69:45:55:d2:9a:78:55:79:a4:00:12:25:d0:68:bf:
2d:5d:57:df:6a:6b:c0:e4:b7:11:9c:0b:5a:da:6e:
d7:d6:e2:df:66:3c:c8:de:7a:71:14:50:f7:89:1f:
00:e0:70:db:f1:8b:36:ba:02:e5:78:6a:45:17:cf:
97:76:d6:e0:59:38:d8:b0:ae:ad:e9:f4:68:57:82:
6a:4d:8e:92:c2:48:53:38:30:ae:66:70:d0:91:46:
fc:ff:70:16:91:cb:1a:db:be:fa:36:a5:e1:52:c6:
0a:7e:e5:c1:54:e1:26:66:44:56:29:9b:f3:64:15:
ae:16:96:40:cb:a7:4c:c5:21:67:1f:08:46:7d:76:
34:45:22:5c:a6:ab:04:9a:c1:9d:c6:4e:12:73:d7:
d6:a6:1e:6a:6a:de:10:75:72:37:71:0d:ec:0b:f3:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:11:B8:8A:6C:66:FD:BE:A8:35:28:7F:EA:26:0F:20:E5:5D:7B
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/PqcRuIpsZv2-qDUof-omDyDlXXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:5a:48:11:af:f1:54:14:27:a8:64:d5:4d:69:e6:5d:7c:de:
45:6a:10:15:cd:c5:ba:7a:1e:da:8b:3c:1e:57:ea:f2:9b:1f:
74:6c:69:42:7e:e8:68:3f:7c:8a:50:4f:3c:b0:5c:97:f3:7b:
d9:e4:45:79:59:37:58:f8:bb:eb:78:f5:89:95:c5:b7:4d:c3:
18:74:8a:d2:7e:a9:67:8f:00:b2:f0:3a:b5:72:0d:7e:4f:ca:
6d:90:78:ff:18:7e:10:f2:09:6f:b4:40:c3:92:91:b2:47:df:
0c:f8:77:f4:b2:48:10:16:fb:53:33:63:a1:6e:5a:2f:f2:dd:
03:0e:3c:3b:ed:92:fa:49:0c:7c:cc:d9:9f:6d:c6:ce:40:57:
d3:ee:1e:5a:c9:19:58:f7:fd:50:55:a6:f7:e6:55:e8:93:2f:
1b:ee:fa:c3:11:d5:46:23:36:d8:03:1c:f5:76:ef:86:32:77:
c4:e6:6f:c9:bb:09:45:f2:a9:25:ac:71:33:aa:e5:d6:8a:58:
9f:0f:95:6c:c5:2c:c6:11:e0:8c:59:2b:e3:d0:d9:db:59:e0:
37:31:97:da:13:86:1a:92:83:19:69:03:55:b4:d1:11:48:34:
71:a1:ca:d6:a7:14:a1:e2:56:0e:08:21:90:8e:58:77:c9:6b:
ce:0e:94:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 11:52:18 2025 by rpki-client