
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
File: aYHqICgmGlj_ILZQDMsXQOxtQII.roa (raw, json)
Hash identifier: n0+t/2F7hKu6ZUBds+3k57zvj+UmazRAMdS2j8wYkTg=
Subject key identifier: 69:81:EA:20:28:26:1A:58:FF:20:B6:50:0C:CB:17:40:EC:6D:40:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 390E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
Signing time: Fri 22 Aug 2025 08:45:54 +0000
ROA not before: Fri 22 Aug 2025 08:45:54 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 38841
IP address blocks: 180.177.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 21:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14606 (0x390e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 22 08:45:54 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=6981EA2028261A58FF20B6500CCB1740EC6D4082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c1:7f:ca:f6:f4:0c:5f:cd:b0:db:52:4b:f4:
a2:88:4f:08:c4:0a:83:2b:53:d4:33:85:61:55:81:
25:20:44:7e:8f:fb:6e:44:f3:a6:7f:24:7d:97:bc:
6c:ca:02:92:ef:20:aa:67:1d:3b:94:f6:32:ed:31:
9d:13:72:8a:c9:8c:17:f6:63:6d:5a:6e:e6:78:3b:
3c:5e:06:2c:2a:46:ab:91:b0:49:95:c2:15:03:81:
d6:37:a2:b0:1a:e4:6b:70:2e:3a:19:07:99:47:9c:
be:b0:43:2e:a6:50:09:01:d4:1f:99:b9:fd:da:26:
fe:46:f2:3b:c5:52:e7:33:7c:5a:35:aa:db:c2:29:
0a:7a:de:e0:e7:2c:e1:bb:dd:14:ed:b1:b6:cb:dc:
d6:e4:64:16:3b:e8:4a:f7:97:9d:c9:f5:4a:eb:0d:
b8:4f:1e:5c:7f:55:84:98:2a:6d:0b:61:3b:69:a5:
e0:cc:57:52:26:35:85:0f:48:fa:a7:49:1a:45:93:
53:fb:90:7e:3d:52:74:cf:24:c9:a1:8f:3f:35:b3:
a2:12:23:32:8c:c3:f2:db:0b:7f:34:53:10:c3:25:
c9:f3:52:47:b2:e8:b1:0f:23:a8:35:49:c5:9f:24:
87:68:8e:83:51:da:1c:71:54:f5:64:81:0b:70:ec:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:EA:20:28:26:1A:58:FF:20:B6:50:0C:CB:17:40:EC:6D:40:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aYHqICgmGlj_ILZQDMsXQOxtQII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.48.0/22
Signature Algorithm: sha256WithRSAEncryption
08:6f:f1:06:09:d7:cd:91:f8:2b:14:63:04:52:9c:df:e8:10:
38:f0:69:66:1d:00:aa:5d:18:d3:c8:a8:76:00:ea:23:7d:49:
ab:f3:b1:40:b4:dc:b5:41:49:00:c3:47:2a:c8:a2:df:a4:38:
4e:32:0c:bc:4d:92:5d:46:88:99:ca:f5:22:6e:ff:b0:b5:a5:
06:20:45:ad:07:19:16:bf:61:b2:27:4c:11:13:98:ac:33:2e:
70:3b:b9:fa:a0:96:d9:92:6b:cd:5e:8c:ac:05:eb:9b:c4:0a:
65:99:cb:3d:97:b2:b1:44:71:92:09:64:db:c2:5a:cc:b8:78:
8f:9b:1d:d4:df:13:e1:a1:b9:e2:25:48:6e:10:d1:4e:fb:8b:
e5:7c:8e:fe:db:e2:e1:a7:95:d2:8f:cc:06:4b:f0:20:60:ca:
82:fb:f7:80:7b:8c:6d:be:57:94:61:d7:fa:c4:9f:c1:30:52:
4c:48:d0:ee:34:17:fb:8c:f3:8f:48:21:b4:6f:ec:0c:73:20:
6e:67:a1:7d:9e:04:6c:38:52:ad:bb:fe:ec:1d:59:77:21:11:
ee:b6:4f:2d:87:b2:f5:7d:26:d1:a0:d3:86:8a:17:de:c6:d2:
09:3d:ad:56:e6:c8:96:55:75:d7:59:af:8c:38:4c:6e:9a:9a:
8f:ad:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:27:50 2025 by rpki-client