
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa
File: 7S_czCWQPrnPtbOLMr3pddSPfxY.roa (raw, json)
Hash identifier: vXVgZnqZoGZn32QruYTUL8/XDzV4wrRzyhyZwbHPuQE=
Subject key identifier: ED:2F:DC:CC:25:90:3E:B9:CF:B5:B3:8B:32:BD:E9:75:D4:8F:7F:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3816
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa
Signing time: Fri 22 Aug 2025 08:44:56 +0000
ROA not before: Fri 22 Aug 2025 08:44:56 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 211.76.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14358 (0x3816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:44:56 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=ED2FDCCC25903EB9CFB5B38B32BDE975D48F7F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:3b:65:cb:54:1d:40:84:9a:9d:af:d6:2b:
2e:02:de:c1:6a:46:73:49:d1:09:54:24:4f:90:04:
be:1b:f3:64:61:8e:bd:c7:57:30:5d:ad:81:5a:3e:
7c:8a:a7:a5:be:87:15:ca:e3:06:f7:3f:bd:ea:a5:
be:0d:f1:6c:98:15:b7:19:ad:b2:d5:41:4a:a1:de:
c4:ed:ea:6b:a0:93:b2:18:29:17:61:5e:38:11:d7:
a9:dc:fe:d3:8d:72:a1:7c:e4:fb:01:b1:bb:6b:0a:
21:cf:27:47:ff:5f:42:1e:2d:19:cd:18:a9:e3:d5:
08:c0:b5:ea:b5:6c:05:92:4c:69:3a:ca:6e:fa:c5:
2d:b1:3b:10:d9:03:c4:d7:e6:42:8d:7c:b8:dc:6b:
c4:89:75:a7:ae:bc:18:e6:e8:ee:2f:79:ee:35:e5:
a7:f7:a4:f8:43:35:64:32:74:1f:c6:1c:a5:5f:60:
1e:ec:c6:cd:18:ae:8d:98:4e:36:c4:3b:7e:cb:f7:
a8:b2:3f:a5:c1:e9:f5:71:01:0e:cc:ce:49:8d:a2:
62:db:cf:1d:16:db:3c:09:c4:55:ac:43:ed:27:17:
ab:56:fb:4c:c5:d7:ba:7e:4f:cb:68:bb:90:0a:5c:
64:72:68:bc:35:b9:10:24:30:f9:a0:f3:53:69:ff:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:DC:CC:25:90:3E:B9:CF:B5:B3:8B:32:BD:E9:75:D4:8F:7F:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7S_czCWQPrnPtbOLMr3pddSPfxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ec:b3:c6:c6:45:91:0d:b8:3b:f4:8a:c1:8e:5f:90:d7:39:
c4:04:ee:78:7e:99:c8:b5:10:f2:fc:07:f2:6e:f0:f4:65:8b:
5a:a7:8d:ac:52:a4:88:89:97:33:36:d6:06:06:81:4c:a9:4c:
c7:9c:40:f3:03:f3:af:2c:ed:b9:12:08:54:f9:e0:12:fe:53:
7a:9a:46:dd:10:46:bb:16:62:0d:17:b9:92:63:c3:8b:83:c3:
7d:91:10:07:da:88:f7:90:e8:9a:dd:e8:0f:78:ec:86:20:93:
6b:c6:e3:d2:e5:41:44:e9:e8:d2:fc:21:64:42:0f:7b:3d:b5:
22:18:d0:21:c5:85:f5:e1:fc:2c:f1:5b:b7:81:78:2b:1c:0c:
05:6e:81:4c:3b:7e:7e:12:24:37:ac:5d:11:77:25:86:55:18:
bd:b8:43:4a:35:e4:00:e2:6d:1c:42:55:41:66:f1:a6:a1:22:
c5:40:91:00:a8:fb:07:fc:50:68:c1:d9:66:6c:d1:90:ed:8b:
dd:ee:5b:52:ec:10:a1:14:a1:a1:cf:08:92:53:c5:fc:51:0e:
8e:16:9d:c6:a7:c0:85:fa:1b:a0:d4:f5:19:5c:dd:d6:9a:6c:
01:e0:18:82:a0:1d:ea:e5:6f:1d:e7:f8:87:27:33:17:12:f9:
bd:ea:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:15 2025 by rpki-client