
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
File: _LzfzQ7-axudiroLyS8E-0mF70g.roa (raw, json)
Hash identifier: OOTGzqA0FHYS+fZg62/g7Vx4rSWfTUZYYzI/6dOadG0=
Subject key identifier: FC:BC:DF:CD:0E:FE:6B:1B:9D:8A:BA:0B:C9:2F:04:FB:49:85:EF:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3A69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
Signing time: Fri 22 Aug 2025 08:47:19 +0000
ROA not before: Fri 22 Aug 2025 08:47:19 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 123.192.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14953 (0x3a69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:47:19 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FCBCDFCD0EFE6B1B9D8ABA0BC92F04FB4985EF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:d0:8d:1f:a2:4a:d1:b9:97:42:35:03:ca:
6f:d7:65:ff:f3:a4:36:b7:39:d0:e5:1b:4b:3b:94:
43:95:9b:48:ba:69:9d:d7:1f:b8:4c:f8:ce:2d:43:
da:ea:76:d8:58:eb:34:6f:6e:8e:79:39:4f:4f:75:
fb:e0:27:7a:0d:4c:72:cb:f8:40:5c:bc:12:f6:6f:
f8:9d:a8:8a:1d:80:49:0d:54:9e:d9:3c:ec:71:0f:
b6:e5:92:fb:5c:4d:a0:33:74:93:25:04:f9:b2:e5:
22:0d:9e:ef:16:30:3f:66:79:1f:22:9b:b9:df:c7:
5b:03:c8:72:92:c6:3a:a2:bb:ad:75:d1:c8:30:23:
f6:ed:d5:ee:71:80:14:6f:08:2b:ce:dc:86:59:af:
4b:54:75:e9:3f:b2:97:51:6e:70:9c:67:cb:9c:c7:
78:58:95:e7:41:8c:ef:14:68:58:2c:5d:3d:41:41:
fb:ac:c3:71:a5:54:46:b9:7b:c7:14:3a:52:b0:71:
6d:d6:fa:63:a8:4f:42:a7:a3:72:0d:dc:75:04:82:
60:a7:85:fe:90:06:53:6f:e7:e5:9e:d2:7e:99:2d:
b6:81:03:b2:93:76:24:ec:50:50:6c:0c:91:87:25:
4a:e7:30:12:57:0e:ac:70:21:b3:23:2a:60:bf:b1:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BC:DF:CD:0E:FE:6B:1B:9D:8A:BA:0B:C9:2F:04:FB:49:85:EF:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_LzfzQ7-axudiroLyS8E-0mF70g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
44:9e:ad:0e:58:6c:58:d1:90:dd:bd:71:65:14:ac:ec:dc:5f:
88:0a:18:89:24:df:49:55:b9:93:ad:93:1d:d0:3a:92:23:f7:
54:58:03:0e:03:15:b8:79:dd:eb:3c:fb:a1:df:01:9f:68:fb:
ba:82:06:de:13:f0:fe:28:b2:8b:ac:27:88:3d:1d:ca:e8:b9:
d6:b2:59:87:48:4e:20:5e:ec:2d:05:a3:c1:92:d8:3a:7a:c4:
a8:75:f8:41:d6:e0:0d:0d:d6:e4:9f:42:6e:ce:6a:5a:cd:db:
bf:a8:bf:72:e1:0d:cd:3d:bb:7d:99:43:b4:1d:e2:fd:5e:fe:
88:4b:26:26:68:8c:57:ee:1d:d2:e0:ba:14:c2:26:c7:e8:d1:
60:d0:36:58:ca:3a:c6:58:c5:7c:8b:de:21:70:07:4c:10:f2:
33:6e:44:39:24:4b:ff:d0:35:7f:9a:35:74:00:05:01:87:e0:
a9:00:42:74:03:62:70:0b:7d:02:b1:50:65:7e:9a:9f:d8:fa:
40:7d:72:95:02:e0:1a:3a:32:86:2f:c0:bd:7d:c8:25:54:b9:
38:e1:20:a8:65:2f:1a:09:20:6d:e7:b0:94:b2:35:bb:4d:6f:
af:46:ef:29:bf:ce:7c:bd:1b:76:28:21:8d:98:34:7c:4c:8a:
35:16:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:20 2025 by rpki-client