
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
File: 65-iQvz8w7uLWyPJ_e7-89W9ENY.roa (raw, json)
Hash identifier: cfRYT+FXyOTc2h4laNfxt3jD9llreiQ9XHG8WdghxC8=
Subject key identifier: EB:9F:A2:42:FC:FC:C3:BB:8B:5B:23:C9:FD:EE:FE:F3:D5:BD:10:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3934
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
Signing time: Fri 22 Aug 2025 08:46:04 +0000
ROA not before: Fri 22 Aug 2025 08:46:04 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 123.194.205.64/26 maxlen: 26
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14644 (0x3934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:46:04 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=EB9FA242FCFCC3BB8B5B23C9FDEEFEF3D5BD10D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:b9:5d:57:63:aa:70:7d:47:15:6d:a9:e3:
e2:aa:b3:f1:5c:6f:b4:b5:10:0e:1b:4a:16:04:bd:
18:36:1d:8b:a2:d3:58:1d:ba:a2:63:42:6b:52:10:
fd:92:97:9a:42:68:df:66:61:d6:74:9e:ea:27:25:
47:38:88:57:e0:61:d8:9a:6d:f0:6a:07:c1:14:e7:
33:af:35:65:af:73:92:64:d7:3d:21:b7:c7:9a:63:
89:c2:47:51:69:c1:1e:87:9a:43:77:4e:8d:c8:4f:
0d:2a:2f:f7:b8:14:cb:4d:4d:dd:59:45:b5:46:04:
98:e8:6f:56:1c:ec:d1:32:39:82:b2:00:e7:e0:31:
06:38:1b:ad:87:c2:81:4d:90:5f:09:7b:06:b3:9a:
71:84:1e:f3:16:a7:2b:a7:5c:16:43:b8:3c:66:66:
7b:c4:e2:b7:36:1d:59:50:94:7c:e4:39:57:dd:d8:
3f:af:ae:da:49:39:21:4e:88:4b:16:bf:17:82:84:
34:71:ec:49:62:f6:1d:d0:ed:fd:2c:be:40:b6:60:
bd:0b:8b:91:aa:8f:06:cd:64:d5:10:f8:c8:0a:0f:
51:e1:f8:c5:ce:14:fa:63:de:ac:1a:29:50:b4:84:
1d:82:2b:27:1e:97:fa:9f:bb:0c:1e:0a:8b:3a:ca:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:A2:42:FC:FC:C3:BB:8B:5B:23:C9:FD:EE:FE:F3:D5:BD:10:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/65-iQvz8w7uLWyPJ_e7-89W9ENY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.64/26
Signature Algorithm: sha256WithRSAEncryption
56:d6:e3:e2:a8:32:d1:52:c4:72:e2:a2:d3:c5:6c:e8:a7:53:
80:f9:9f:0f:a1:10:12:7f:d2:6e:fd:d9:2f:7b:4e:2c:b0:26:
bf:9e:86:e4:09:9e:7f:b9:b3:5f:3a:84:ed:29:af:ca:bf:d1:
00:a8:29:40:93:f0:25:66:52:a7:24:e2:47:73:77:9b:62:96:
a7:46:0f:65:f3:4d:e5:0e:2c:5e:a9:50:d7:dc:11:46:d0:59:
83:ea:5e:97:39:23:78:06:39:a3:22:e4:7e:1c:1c:cd:f8:bd:
e6:8d:bf:3b:f9:1f:59:03:6a:26:28:c1:61:0e:69:2a:65:90:
2e:a1:3c:1a:24:69:73:db:83:7a:12:13:45:39:e0:b0:9c:b7:
4b:75:4d:cf:72:14:c4:96:05:0d:09:29:1c:40:cc:6a:82:c2:
6d:75:93:50:81:17:cf:f1:d0:06:12:a8:38:fb:96:e2:2a:ca:
79:64:e5:cd:0a:71:16:d7:65:68:fa:70:28:31:fe:ad:a6:43:
f7:9a:53:21:9e:e2:34:b7:8e:e9:f5:6d:9a:72:f1:0c:b0:b7:
6d:27:d4:63:a5:16:76:c3:29:8d:b5:b8:fc:f6:ba:91:57:93:
2f:1f:bb:4f:69:62:10:2b:48:54:31:dc:e2:63:02:ce:10:05:
cf:ea:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:24:34 2025 by rpki-client