
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
File: 8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa (raw, json)
Hash identifier: ARAMMoYbDt105m7+mgs6mwY8wD04es5VtJBucHkgL2c=
Subject key identifier: F0:81:76:E4:2C:EF:B3:51:50:E8:51:36:12:AF:BD:3F:79:AA:58:38
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3A83
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
Signing time: Fri 22 Aug 2025 08:47:26 +0000
ROA not before: Fri 22 Aug 2025 08:47:26 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.177.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14979 (0x3a83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:47:26 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F08176E42CEFB35150E8513612AFBD3F79AA5838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:86:83:37:fb:db:30:68:1e:6c:0c:b2:41:
72:8f:72:b3:b5:24:f6:b4:4c:7f:1b:cf:0d:63:5e:
54:7d:7e:0d:e2:dd:5a:4e:96:21:7c:82:c9:b2:63:
ba:12:46:db:b9:56:e8:30:0f:a3:71:17:53:52:bb:
9c:7a:13:37:73:39:66:68:f1:cc:94:55:d2:f1:ff:
57:33:79:28:9d:50:32:75:ea:4b:26:18:ef:6f:f2:
2b:4d:69:29:58:fd:b9:91:b3:bb:1f:8f:cd:9b:d1:
dc:81:b3:3a:e5:0d:91:e7:a8:43:5f:67:38:19:8c:
d7:aa:a2:3f:21:af:d9:6f:96:27:d4:47:98:a7:ae:
b6:c4:d3:61:b0:9a:b6:4c:12:e1:20:ec:e4:d6:26:
7d:3e:f2:f1:df:a7:7d:af:ad:a3:b7:aa:ef:ce:a2:
ab:6b:fd:59:cb:b6:39:f7:f8:48:89:f7:f5:4f:fd:
ea:2f:24:6e:b3:c8:1a:2f:9a:b1:59:c9:59:03:d7:
95:a8:b4:ae:4a:d7:dc:ec:97:1f:cc:ed:9e:41:e0:
bd:c4:b5:c5:3e:0c:08:07:cc:4d:70:84:c4:09:81:
0d:57:af:e1:b9:25:e0:4f:1c:1e:1a:c5:86:d9:a5:
a3:24:71:08:57:68:e5:a2:b1:ef:85:d5:12:45:2a:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:76:E4:2C:EF:B3:51:50:E8:51:36:12:AF:BD:3F:79:AA:58:38
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8IF25Czvs1FQ6FE2Eq-9P3mqWDg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:51:5f:c7:f4:a8:91:82:cb:d8:77:89:45:b0:1d:2d:de:e8:
13:7f:dc:74:8c:96:a7:d5:71:41:7e:60:78:90:aa:4a:3b:88:
b9:b7:aa:b3:7f:61:61:6c:c4:c2:17:20:e5:f2:32:69:0b:4d:
20:b2:9c:d4:95:21:7e:ef:b7:54:19:58:ad:a5:eb:78:d8:9d:
65:39:51:bf:94:78:8c:d7:c7:7c:67:fb:07:33:d0:ed:e5:9a:
5b:ff:56:16:e3:81:28:59:1a:3e:f5:3e:af:81:5c:10:71:b8:
5c:92:99:fc:6b:92:ca:2f:1b:40:4c:df:50:89:7c:0d:66:1d:
25:85:28:df:fb:de:26:ad:c0:17:99:52:29:94:34:e5:29:82:
bb:63:14:d1:c6:41:8b:26:98:03:b1:8d:ff:f5:d1:5f:6e:41:
f7:16:74:88:a9:5c:85:76:6f:90:46:17:f0:17:f8:dd:25:0e:
1e:8e:10:fb:e6:ac:53:ea:4d:35:97:17:f7:8d:f4:f6:e2:4b:
a8:74:1b:07:9c:14:b2:07:ba:d8:23:e9:fc:ff:bf:87:44:16:
12:0b:aa:9a:7a:1e:98:35:97:11:b6:92:1b:43:85:ba:d5:a1:
2e:47:cb:d3:a0:65:dc:8b:aa:f5:11:76:9e:67:e2:9f:54:21:
16:2a:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:40 2025 by rpki-client