
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
File: RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa (raw, json)
Hash identifier: 2kghBMQ/fCKAdbbt3AupOQg9uDLpev33uoHfkukpJJc=
Subject key identifier: 46:A5:F2:D5:B9:CA:7D:3C:AA:90:D9:2D:0B:B6:6C:DF:03:7D:CD:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 37CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
Signing time: Fri 22 Aug 2025 08:44:40 +0000
ROA not before: Fri 22 Aug 2025 08:44:40 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 106.1.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14287 (0x37cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:44:40 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=46A5F2D5B9CA7D3CAA90D92D0BB66CDF037DCDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:e5:73:c1:c8:f1:bd:46:82:e0:e7:f6:a7:
1c:b5:93:e0:a4:f8:03:33:87:55:a7:b0:b1:41:74:
71:70:49:ac:2a:14:04:a1:c2:09:b0:dd:67:08:fa:
d5:7c:a1:86:9f:b3:71:6a:31:fb:a0:05:81:8c:33:
31:28:27:1b:44:f8:eb:9d:c6:d2:45:d4:e6:c4:bb:
40:ec:4c:02:01:68:bf:d9:62:c7:3a:62:f5:9e:a6:
24:0a:1a:95:f7:6a:a1:70:8b:75:de:1c:f9:37:36:
ab:5f:00:ca:12:92:e9:92:ca:6f:98:90:5c:90:fe:
4f:9f:45:0b:07:a7:87:f8:7d:e3:b2:9c:17:49:72:
04:dc:21:57:67:d4:d2:01:60:d2:65:76:a1:05:6c:
a6:45:98:7a:db:77:f4:54:5c:92:20:fb:83:20:5c:
d3:3b:cf:23:40:2e:67:74:2c:08:ae:90:6b:c1:0c:
10:37:88:c3:7e:46:e3:ea:7f:a2:e3:25:38:fd:71:
54:2c:a5:04:96:8f:f1:ad:bb:34:53:a0:70:5d:c2:
b9:5c:bf:af:db:76:14:b7:18:7e:ab:b0:01:62:74:
44:13:2e:59:69:88:eb:1d:92:ab:b7:f6:bc:d7:4b:
f2:e6:11:c9:39:ba:5e:05:c2:c1:38:15:a4:2c:94:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A5:F2:D5:B9:CA:7D:3C:AA:90:D9:2D:0B:B6:6C:DF:03:7D:CD:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqXy1bnKfTyqkNktC7Zs3wN9zfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.181.0/24
Signature Algorithm: sha256WithRSAEncryption
af:6d:81:04:e7:07:89:42:ce:55:03:75:54:72:dc:ac:2b:24:
58:c4:46:70:c4:b2:7b:8a:83:99:e3:cc:e7:3c:89:4a:ae:ec:
e9:d7:67:28:57:4d:ef:15:87:2d:f9:a9:1a:4c:18:c0:ff:bc:
20:7a:13:13:73:3b:5c:a9:aa:40:35:94:0c:57:9d:09:41:a4:
a9:a5:86:da:fe:41:02:06:08:7d:f7:5d:38:88:6e:15:aa:f9:
fb:3e:bb:c8:44:3a:37:6d:44:30:b3:15:66:13:89:bb:17:7b:
ae:47:a3:90:fa:1a:71:cb:01:92:39:4f:9d:10:6b:1e:b1:16:
2d:43:22:8a:83:20:e6:db:ac:a6:de:cb:a8:9f:11:b9:21:1b:
5b:4e:84:63:88:f9:53:f9:93:27:03:8d:54:2f:c2:8a:78:48:
7d:d3:e8:da:ad:4d:49:d0:04:0f:b1:ba:fa:4a:9f:e3:47:64:
d7:d8:d1:a2:ff:25:4c:f0:48:2e:f9:fb:fe:94:59:3f:9d:35:
0b:a3:09:59:ae:cb:d7:a7:fb:96:76:f5:de:66:fe:00:08:4a:
d5:fc:fc:5d:06:2a:8a:67:bc:2b:c3:0d:9b:f8:87:ce:f5:50:
a3:d3:c6:97:a4:22:89:29:4d:02:14:5f:b0:31:dd:29:63:be:
d3:44:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:21:27 2025 by rpki-client